CVE-2024-13868

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-2088

creationtimestamp| type| source ---|---|--- 2025-03-07 15:04:06+00:00| seen| https://bsky.app/profile/potato.software/post/3ljsbriaoub2k 2025-03-07 15:35:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6843 2025-03-07 16:00:43+00:00| published-proof-of-concept|...

CVE-2024-58083

creationtimestamp| type| source ---|---|--- 2025-03-06 17:23:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114116643141768200 2025-03-06 19:41:56+00:00| seen| https://t.me/cvedetector/19733 2025-03-06 19:54:48+00:00| seen|...

CVE-2024-13868

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-27655

creationtimestamp| type| source ---|---|--- 2025-03-06 00:00:21+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sbajj52b 2025-03-06 02:16:26+00:00| seen| Telegram/1Np4XDUTqbMrImIcHm8RIgunvF0kDg4Xu2I85ZHdh8fyW9e 2025-03-06 12:00:15+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2023-38599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 a...

PozitifIK Pik Online 安全漏洞

PozitifIK Pik Online is an online exam application from PozitifIK, Inc. A security vulnerability exists in PozitifIK Pik Online version 05.03.2025 and earlier, which stems from an authorization bypass that could lead to account footprint tracking and session hijacking...

Linux Distros Unpatched Vulnerability : CVE-2023-52920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction jump history to record instructions that performed register...

openSUSE Security Advisory (SUSE-SU-2025:0764-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2023-52625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Refactor DMCUB enter/exit idle interface Why We can hang in place trying to send commands when the DMCUB isn't powered on. How We need to exit...

Linux Distros Unpatched Vulnerability : CVE-2022-49394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: Fix inflight count imbalances and IO hangs on offline iolatency needs to trac...

Linux Distros Unpatched Vulnerability : CVE-2019-18282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The flowdissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the...

CVE-2025-27418

creationtimestamp| type| source ---|---|--- 2025-03-03 16:30:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6230 2025-03-03 18:44:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7ik52h2b...

CERTFR-2025-ACT-009

creationtimestamp| type| source ---|---|--- 2025-03-03 14:10:14+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114098897766456947 2025-03-03 14:10:14+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lji4vkdfmb23 2025-03-03 14:44:31+00:00| seen|...

CVE-2025-1723

creationtimestamp| type| source ---|---|--- 2025-03-03 08:29:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6160 2025-03-03 08:49:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljhky6hfrb2b 2025-03-03 09:48:25+00:00| seen|...

Malicious code in cmp-dossier-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca47cddd0ff04336d55d7da2799d42183ab77e8b7270202739f7728e7904f712 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1577 Malicious code in cmp-dossier-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca47cddd0ff04336d55d7da2799d42183ab77e8b7270202739f7728e7904f712 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-1755

creationtimestamp| type| source ---|---|--- 2025-02-27 16:26:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5711 2025-02-27 17:02:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114076927570984469 2025-02-27 18:00:35+00:00| seen|...

CVE-2024-13148

creationtimestamp| type| source ---|---|--- 2025-02-27 15:22:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114076531254128083 2025-02-27 17:49:12+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114077109535316307 2025-02-27 18:03:41+00:00| seen|...

CVE-2024-9334

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024...