139 matches found
CVE-2025-7433
creationtimestamp| type| source ---|---|--- 2025-07-17 19:03:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114870125851359984 2025-07-18 05:43:48+00:00| seen| https://poliverso.org/objects/0477a01e-b4ff51d2-3ebe177d5dcd7fd6...
GHSA-4Q84-546J-3MF5
creationtimestamp| type| source ---|---|--- 2025-07-10 21:38:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114831099385159796...
CVE-2025-53513
creationtimestamp| type| source ---|---|--- 2025-07-08 17:16:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114818741708384892 2025-07-08 20:39:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lti5v5lv4g2o 2026-01-08 12:01:07+00:00| published-proof-of-concept|...
CVE-2025-47988
creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-07-08 17:27:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114818787872569368...
GHSA-RFC2-X8HR-536Q
creationtimestamp| type| source ---|---|--- 2025-07-02 14:53:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114784205722518343...
GHSA-RMJP-CR27-WPG2
creationtimestamp| type| source ---|---|--- 2025-06-19 15:41:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18866 2025-06-19 16:37:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114711005781429046...
CVE-2025-52467
creationtimestamp| type| source ---|---|--- 2025-06-19 03:40:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18834 2025-06-19 03:50:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114707989654328895 2025-06-19 04:01:04+00:00| published-proof-of-concept|...
CVE-2025-28380
creationtimestamp| type| source ---|---|--- 2025-06-13 13:33:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18293 2025-06-13 15:25:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114676749186057555...
CVE-2022-41929
org.xwiki.platform:xwiki-platform-oldcore is missing authorization in UsersetDisabledStatus, which may allow an incorrectly authorized user with only Script rights to enable or disable a user. This operation is meant to only be available for users with admin rights. This problem has been patched ...
CVE-2018-20508
CrashFix 1.0.4 has SQL Injection via the Userstatus parameter. This is related to actionIndex in UserController.php, and the protected\models\User.php search function...
GHSA-9G7F-JMC3-RRMF
creationtimestamp| type| source ---|---|--- 2025-05-14 15:26:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114506885070033703...
GHSA-MVGM-3RW2-7J4R
creationtimestamp| type| source ---|---|--- 2025-04-30 15:56:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114427728713256833 2025-04-30 17:32:01+00:00| seen| Telegram/Gwvh-n-ygZ7AZvt4Z14lI64V1AihU4WxZxoYYl7z1l7jTPI...
GHSA-M5PX-PWQ3-4P5M
creationtimestamp| type| source ---|---|--- 2025-04-18 15:58:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12471 2025-04-18 16:28:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114359909527505857...
GHSA-9C5P-35GJ-JQP4
creationtimestamp| type| source ---|---|--- 2025-04-11 11:50:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11416 2025-04-11 13:21:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114319534961696220...
GHSA-M4H2-49XF-VQ72
creationtimestamp| type| source ---|---|--- 2025-04-02 22:11:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114270661068874157 2025-04-02 22:11:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114270661068874157 2025-04-02 22:34:43+00:00| published-proof-of-concept|...
GHSA-26WH-CC3R-W6PJ
creationtimestamp| type| source ---|---|--- 2025-04-02 21:34:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10144 2025-04-02 22:04:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114270632021246470 2025-04-02 22:04:31+00:00| seen|...
GHSA-56P6-QW3C-FQ2G Suspended Directus user can continue to use session token to access API
Summary Since the user status is not checked when verifying a session token a suspended user can use the token generated in session auth mode to access the API despite their status. Details There is a check missing in verifySessionJWT to verify that a user is actually still active and allowed to...
GHSA-2C93-XXQG-54GM
creationtimestamp| type| source ---|---|--- 2025-03-21 22:17:45+00:00| seen| https://chaos.social/users/gsuberland/statuses/114202736244863531...