CVE-2025-30791: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpdever Cart tracking for WooCommerce cart-tracking-for-woocommerce allows SQL Injection.This issue affects Cart tracking for WooCommerce: from n/a through = 1.0.16...

The vulnerability of the readline.sh component in the socat redirecting utility allows a hacker to overwrite any files in the system.

The vulnerability of the readline.sh utility for socket redirection involves tracking symbolic links in UNIX systems. Exploiting this vulnerability allows a remote attacker to re-write any files in the system...

kernel: netfilter: nf_conntrack_h323: Add protection for bmp length out of range

A vulnerability was found in the netfilter subsystem of the Linux kernel, specifically in the nfconntrackh323 module. This issue involves inadequate protection for BMP length values, potentially leading to out-of-range conditions...

WordPress plugin UTM tags tracking for Contact Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

PT-2025-12916

Name of the Vulnerable Software and Affected Versions UTM tags tracking for Contact Form 7 versions n/a through 2.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

CVE-2025-26544: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Max K UTM tags tracking for Contact Form 7 cf7-utm-tracking allows Reflected XSS.This issue affects UTM tags tracking for Contact Form 7: from n/a through = 2.1...

CVE-2025-25373

creationtimestamp| type| source ---|---|--- 2025-03-25 20:24:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8756 2025-03-25 23:40:37+00:00| seen| https://t.me/cvedetector/21123 2025-03-26 01:04:14+00:00| seen|...

CVE-2024-13118

creationtimestamp| type| source ---|---|--- 2025-03-25 06:22:30+00:00| seen| https://bsky.app/profile/potato.software/post/3ll6mzgj6dr2s 2025-03-25 07:00:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8607 2025-03-25 08:49:22+00:00| seen|...

CVE-2025-2748

creationtimestamp| type| source ---|---|--- 2025-03-24 22:35:05+00:00| seen| https://t.me/cvedetector/20993 2025-03-24 22:39:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll5t66rlpk2e 2025-04-01 10:13:14+00:00| seen|...

CVE-2025-1098

creationtimestamp| type| source ---|---|--- 2025-03-24 17:55:00+00:00| seen| https://thehackernews.com/2025/03/critical-ingress-nginx-controller.html 2025-03-24 21:56:48+00:00| seen| https://bsky.app/profile/lookitup.baby/post/3ll5qr5t6uk2k 2025-03-24 22:01:06+00:00| seen|...

CVE-2024-55279

creationtimestamp| type| source ---|---|--- 2025-03-24 16:39:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll56zvshem26 2025-03-24 18:24:37+00:00| seen| https://t.me/cvedetector/20983 2025-04-01 18:33:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9...

CVE-2024-7760

aimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery CSRF vulnerability in the tracking server. The vulnerability is due to overly permissive CORS settings, allowing cross-origin requests from all origins. This enables CSRF attacks on all endpoints of the tracking server, which can b...

CVE-2024-8769

A vulnerability in the LockManager.releaselocks function in aimhubio/aim commit bb76afe allows for arbitrary file deletion through relative path traversal. The runhash parameter, which is user-controllable, is concatenated without normalization as part of a path used to specify file deletion. Thi...

Aim Uncontrolled Resource Consumption vulnerability

In version 3.25.0 of aimhubio/aim, the tracking server is vulnerable to a denial of service attack. The server overrides the maximum size for websocket messages, allowing very large images to be tracked. This causes the server to become unresponsive to other requests while processing the large...

GHSA-J5QJ-RG5J-J7C2 Aim Uncontrolled Resource Consumption vulnerability

In version 3.25.0 of aimhubio/aim, the tracking server is vulnerable to a denial of service attack. The server overrides the maximum size for websocket messages, allowing very large images to be tracked. This causes the server to become unresponsive to other requests while processing the large...

Aim path traversal in LockManager.release_locks

A vulnerability in the LockManager.releaselocks function in aimhubio/aim commit bb76afe allows for arbitrary file deletion through relative path traversal. The runhash parameter, which is user-controllable, is concatenated without normalization as part of a path used to specify file deletion. Thi...

Aim allows denial of service due to no timeouts for some tracking server endpoints

In version 3.23.0 of aimhubio/aim, certain methods that request data from external servers do not have set timeouts, causing the server to wait indefinitely for a response. This can lead to a denial of service, as the tracking server does not respond to other requests while waiting. The issue...

GHSA-6W7P-XRVP-P7XV Aim allows denial of service due to no timeouts for some tracking server endpoints

In version 3.23.0 of aimhubio/aim, certain methods that request data from external servers do not have set timeouts, causing the server to wait indefinitely for a response. This can lead to a denial of service, as the tracking server does not respond to other requests while waiting. The issue...

Aim vulnerable to Cross-Site Request Forgery

aimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery CSRF vulnerability in the tracking server. The vulnerability is due to overly permissive CORS settings, allowing cross-origin requests from all origins. This enables CSRF attacks on all endpoints of the tracking server, which can b...

GHSA-38R9-3J52-H92V Aim vulnerable to Cross-Site Request Forgery

aimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery CSRF vulnerability in the tracking server. The vulnerability is due to overly permissive CORS settings, allowing cross-origin requests from all origins. This enables CSRF attacks on all endpoints of the tracking server, which can b...