CVE-2025-46243

creationtimestamp| type| source ---|---|--- 2025-04-22 10:03:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12824 2025-04-22 11:05:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju6kgeq2c 2025-04-22 14:13:30+00:00| seen|...

[SECURITY] Fedora 40 Update: uv-0.6.14-3.fc40

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

CVE-2025-40364

creationtimestamp| type| source ---|---|--- 2025-04-18 13:58:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12426 2025-04-18 14:23:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114359414511438148 2025-04-18 14:27:11+00:00| seen|...

CVE-2025-29453

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12365 2025-04-17 22:53:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274q7dzc2l 2025-04-18 03:12:18+00:00| seen| https://t.me/cvedetector/23300...

Care what you share

Welcome to this week's edition of the Threat Source newsletter. As we navigate our daily routines, certain tasks become second nature to us, especially if they are integral to our professions. However, what feels instinctive to one person might be foreign to another. This disparity is akin to a...

CVE-2025-27293

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webparexapp Shipmozo Courier Tracking webparex allows Reflected XSS.This issue affects Shipmozo Courier Tracking: from n/a through = 1.0...

CVE-2025-27293 WordPress Shipmozo Courier Tracking plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webparexapp Shipmozo Courier Tracking webparex allows Reflected XSS.This issue affects Shipmozo Courier Tracking: from n/a through = 1.0...

CVE-2025-27293

The CVE-2025-27293 entry concerns the WordPress plugin Shipmozo Courier Tracking (Shipmozo Courier Tracking). The vulnerability is an improper input neutralization that enables a Reflected Cross-Site Scripting (XSS) attack in the plugin, affecting versions from n/a up to 1.0. The CVSS vector is C...

CVE-2025-27293 WordPress Shipmozo Courier Tracking plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webparexapp Shipmozo Courier Tracking webparex allows Reflected XSS.This issue affects Shipmozo Courier Tracking: from n/a through = 1.0...

SUSE CVE-2024-58092

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization Get rid of the nfsd4legacytrackingops-init call in checkforlegacymethods. That will be handled in the caller nfsd4clienttrackinginit. Otherwise, we'll wind up calling...

WordPress plugin Shipmozo Courier Tracking 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2025-17059 · Unknown · Shipmozo Courier Tracking

Name of the Vulnerable Software and Affected Versions: Shipmozo Courier Tracking versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This type of issue can occu...

CVE-2025-27293: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webparexapp Shipmozo Courier Tracking webparex allows Reflected XSS.This issue affects Shipmozo Courier Tracking: from n/a through = 1.0...

CVE-2025-31478

creationtimestamp| type| source ---|---|--- 2025-04-16 22:44:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxo5cirug2r 2025-04-17 00:48:19+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114350548475440645 2025-04-17 02:06:42+00:00| seen|...

CVE-2025-28072

creationtimestamp| type| source ---|---|--- 2025-04-16 22:43:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxo3kkwyh2h 2025-04-17 00:25:53+00:00| seen| https://t.me/cvedetector/23177 2025-04-17 13:57:54+00:00| published-proof-of-concept|...

DEBIAN-CVE-2025-23132

In the Linux kernel, the following vulnerability has been resolved: f2fs: quota: fix to avoid warning in dquotwritebackdquots F2FS-fs dm-59: checkpoint=enable has some unwritten data. ------------ cut here ------------ WARNING: CPU: 6 PID: 8013 at fs/quota/dquot.c:691...

CVE-2025-22034

creationtimestamp| type| source ---|---|--- 2025-04-16 14:59:42+00:00| seen| https://bsky.app/profile/potato.software/post/3lmwu6iwbtl27...

CVE-2025-3692

creationtimestamp| type| source ---|---|--- 2025-04-16 13:55:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12040 2025-04-16 14:43:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwtcbq4xi2h...

CVE-2024-58092

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization Get rid of the nfsd4legacytrackingops-init call in checkforlegacymethods. That will be handled in the caller nfsd4clienttrackinginit. Otherwise, we'll wind up calling...

DEBIAN-CVE-2024-58092

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization Get rid of the nfsd4legacytrackingops-init call in checkforlegacymethods. That will be handled in the caller nfsd4clienttrackinginit. Otherwise, we'll wind up calling...