CVE-2025-20962

Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position...

CVE-2025-32402

creationtimestamp| type| source ---|---|--- 2025-05-07 07:22:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15273 2025-05-07 08:05:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwjikxv7l2 2025-05-07...

PT-2025-20153 · WordPress · Wpdever Cart Tracking For Woocommerce

Name of the Vulnerable Software and Affected Versions: wpdever Cart tracking for WooCommerce versions 1.0.0 through 1.0.17 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

CVE-2025-47626: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in apasionados Submission DOM tracking for Contact Form 7 cf7-submission-dom-tracking allows Stored XSS.This issue affects Submission DOM tracking for Contact Form 7: from n/a through = 2.1...

CVE-2025-47633: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Awin Awin – Advertiser Tracking for WooCommerce awin-advertiser-tracking allows Cross Site Request Forgery.This issue affects Awin – Advertiser Tracking for WooCommerce: from n/a through = 2.0.0...

The vulnerability of the Intelligent Tracking Prevention (ITP) component in the Safari browser on macOS and iOS operating systems allows a tracker to bypass ITP.

The vulnerability of the Intelligent Tracking Prevention ITP component in the Safari browser on macOS and iOS operating systems is related to the improper use of security mechanisms. Exploiting this vulnerability can allow a malicious actor to bypass ITP if the Cross-Origin Resource Sharing CORS...

WordPress plugin Awin – Advertiser Tracking for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Awin-Advertiser Tracking for WooCommerce plugin, which stems from the WEB application not adequately verifying...

CVE-2025-47538: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpdever Cart tracking for WooCommerce cart-tracking-for-woocommerce allows SQL Injection.This issue affects Cart tracking for WooCommerce: from n/a through = 1.0.17...

WordPress plugin Cart tracking for WooCommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

WordPress plugin Submission DOM tracking for Contact Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

Configure Proper Association Policies for INPUT and OUTPUT of iptables

Although you can configure protocols, IP addresses, and port numbers to add policies for packets entering and leaving a server to the INPUT and OUTPUT chains, it is difficult to configure suitable policies using the sport parameter due to complicated situations. For example, a client accesses the...

CVE-2025-46815

creationtimestamp| type| source ---|---|--- 2025-05-06 18:36:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojjmy3txj2e 2025-05-06 19:20:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lojlqm4qmeo2 2025-05-06...

CVE-2025-22476

creationtimestamp| type| source ---|---|--- 2025-05-06 16:21:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15148 2025-05-06 18:21:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojis6m67t2p 2025-05-06 20:20:18+00:00| seen| https://t.me/cvedetector/24627...

Abnormal Asset Behavior Detected (Critical)

This asset behavior is an anomaly that needs to be verified for the root cause. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503205;...

Abnormal Asset Behavior Detected (High)

This asset behavior is an anomaly that needs to be verified for the root cause. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503204;...

CVE-2025-3746

creationtimestamp| type| source ---|---|--- 2025-05-02 04:30:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5yhuxjc72l 2025-05-02 05:01:09+00:00| seen| Telegram/7QEqju-jYCJkVqvbZMxXpX4ajzaYKxifFuPEzR6oDsSpQMc 2025-05-02 07:34:58+00:00| seen| https://t.me/cvedetector/24329...

CVE-2025-46630

creationtimestamp| type| source ---|---|--- 2025-05-01 22:01:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cptx5vg2r 2025-05-01 23:12:43+00:00| seen| https://t.me/cvedetector/24273 2025-05-02 15:16:54+00:00| published-proof-of-concept|...

CVE-2025-35975

creationtimestamp| type| source ---|---|--- 2025-05-01 20:35:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo55xlqy4r2l 2025-05-01 21:02:21+00:00| seen| Telegram/h5sjG5GrTkIVK0KP-Zeb-XVGVHy1vwa2ngZ84vEqUPJKDmU...

CVE-2022-49896

In the Linux kernel, the following vulnerability has been resolved: cxl/pmem: Fix cxlpmemregion and cxlmemdev leak When a cxlnvdimm object goes through a -remove event device physically removed, nvdimm-bridge disabled, or nvdimm device disabled, then any associated regions must also be disabled. ...

DEBIAN-CVE-2022-49896

In the Linux kernel, the following vulnerability has been resolved: cxl/pmem: Fix cxlpmemregion and cxlmemdev leak When a cxlnvdimm object goes through a -remove event device physically removed, nvdimm-bridge disabled, or nvdimm device disabled, then any associated regions must also be disabled. ...