CVE-2025-27399

Summary: Mastodon contains an access-control bug where, when domain blocks/reasons visibility is set to the English string “To logged-in users,” users not yet approved can view the block reasons. Affected versions: before 4.1.23, 4.2.16, and 4.3.4. Impact: instance admins who rely on private doma...

CVE-2025-27399 Mastodon's domain blocks & rationales ignore user approval when visibility set as "users"

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" localized English string: "To logged-in users", users that are not yet approved can view the block reasons. Instance admins...

Why MDR In 2025 Is About Scaling With Purpose

Forrester recently released “The Forrester Wave™: Managed Detection and Response MDR Services, Q1 2025,", highlighting the top 10 MDR providers out of more than 600 worldwide. While we’re honored to be recognized in such a competitive market, Rapid7’s designation underscores a fundamental...

89% of Enterprise GenAI Usage Is Invisible to Organizations Exposing Critical Security Risks, New Report Reveals

Organizations are either already adopting GenAI solutions, evaluating strategies for integrating these tools into their business plans, or both. To drive informed decision-making and effective planning, the availability of hard data is essential—yet such data remains surprisingly scarce. The...

Mastodon 授权问题漏洞

Mastodon is an open source social networking server based on ActivityPub by Mastodon Open Source. An authorization issue vulnerability exists in Mastodon that stems from an unapproved user being able to view the reason for a domain block, affecting instance administrators who do not wish to make...

Uncovering and Protecting Sensitive Data Across Cloud Environments with Exposure Command

Modern organizations grapple with the complex task of securing sensitive data in sprawling hybrid and multi-cloud environments. Due to insufficient visibility and governance, data is often misplaced, duplicated, or left exposed. This fragmented environment makes it difficult for teams to accurate...

Command Platform Innovations Eliminate Data Blind Spots Through Complete Visibility and Context-Driven Risk Prioritization

Rapid7 provides unmatched attack surface visibility through the Command Platform, helping security teams identify, prioritize, and remediate risk across hybrid environments. Surface Command is the only solution available that combines native external and internal scanning into a single unified vi...

UBUNTU-CVE-2025-26527

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block...

CVE-2025-26527 Non-searchable tags can still be discovered on the tag search page and in the tags block

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block...

CVE-2025-26527 Non-searchable tags can still be discovered on the tag search page and in the tags block

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block...

CVE-2025-26527 Non-searchable tags can still be discovered on the tag search page and in the tags block

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block...

Moodle 安全漏洞

Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from tags not being properly hidden, where a user may find tags that...

BIT-DISCOURSE-2024-53994 Potential bypass of chat permissions in Discourse

Discourse is an open source platform for community discussion. In affected versions users who disable chat in preferences could still be reachable in some cases. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable...

CVE-2023-51300

creationtimestamp| type| source ---|---|--- 2025-02-19 23:46:04+00:00| seen| https://t.me/cvedetector/18482 2025-02-20 00:17:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likz7j7hzy2v 2025-02-20 01:27:45+00:00| seen| Telegram/wJCiCPks-Ei5TmUJDu7KFqIFvGrtRdR-Uhn6NeZNGPh3L1...

CVE-2023-51299

creationtimestamp| type| source ---|---|--- 2025-02-19 22:05:35+00:00| seen| https://t.me/cvedetector/18468 2025-02-20 00:17:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likz7jzbwm22 2025-02-20 21:02:38+00:00| seen|...

CVE-2024-56171

creationtimestamp| type| source ---|---|--- 2025-02-18 22:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liibxeaghd23 2025-02-24 04:48:40+00:00| seen| https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3livkavqvlk2h 2025-02-24 05:02:25+00:00| seen|...

CVE-2024-13625

creationtimestamp| type| source ---|---|--- 2025-02-17 06:02:43+00:00| seen| https://infosec.exchange/users/cve/statuses/114017708458038008 2025-02-17 06:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lie3u6qjqq2n 2025-02-17 08:11:00+00:00| seen|...

CVE-2024-13500

creationtimestamp| type| source ---|---|--- 2025-02-15 11:29:28+00:00| seen| https://infosec.exchange/users/cve/statuses/114007668674336492 2025-02-15 12:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li7p2kxnjd2y 2025-02-15 13:11:21+00:00| seen|...

CVE-2025-1005

creationtimestamp| type| source ---|---|--- 2025-02-15 09:28:57+00:00| seen| https://infosec.exchange/users/cve/statuses/114007194756361085 2025-02-15 10:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li7id44k6h2h 2025-02-15 11:09:47+00:00| seen|...

CVE-2025-24903

creationtimestamp| type| source ---|---|--- 2025-02-13 15:23:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113997265751139169 2025-02-13 16:17:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li33lq3yba2a 2025-02-13 16:48:56+00:00| seen|...