PT-2025-15829 · Unknown · Powerpress Podcasting

Name of the Vulnerable Software and Affected Versions: PowerPress Podcasting versions through 11.12.4 Description: The issue is a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For versions through 11.12.4, update to a version later...

CVE-2025-3286

creationtimestamp| type| source ---|---|--- 2025-04-08 19:22:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmd756b7r52h 2025-04-09 13:15:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114308189037550499 2025-04-10 10:00:00+00:00| seen|...

GHSA-VJ5Q-3JV2-CG5P

creationtimestamp| type| source ---|---|--- 2025-04-08 16:46:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10954...

GHSA-4WJW-6XMF-44XF

creationtimestamp| type| source ---|---|--- 2025-04-07 17:45:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10743...

GHSA-CHHP-GMXC-46RQ

creationtimestamp| type| source ---|---|--- 2025-04-06 19:44:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10638...

CVE-2024-51800

Incorrect Privilege Assignment vulnerability in Favethemes Homey allows Privilege Escalation.This issue affects Homey: from n/a through 2.4.1...

BELL-CVE-2025-21900

Bulletin has no description...

docs.dhtmlx.com Cross Site Scripting vulnerability OBB-4041560

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-6HR4-H6PX-7PPG

creationtimestamp| type| source ---|---|--- 2025-03-31 18:32:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9740...

WordPress Ni WooCommerce Product Enquiry plugin <= 4.1.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Ni WooCommerce Product Enquiry versions = 4.1.8...

CGA-PG6M-GC6G-HGJ5

Bulletin has no description...

BELL-CVE-2023-52941

Bulletin has no description...

CVE-2025-22658

creationtimestamp| type| source ---|---|--- 2025-03-27 18:26:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9159...

CVE-2025-30566

CVE-2025-30566 concerns Clink (WordPress Link Manager, by Aryan Themes). The connected vulnerability data indicate an Authenticated (Contributor+) cross-site scripting issue in Clink versions up to 1.2.2, with Wordfence listing it as an Unpatched, stored XSS vulnerability in Clink

openSUSE Security Advisory (SUSE-SU-2025:0980-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

agent-path (>=0.1.0 <=0.1.2), agentc-llamaindex (=0.2.5a2) +837 more potentially affected by CVE-2024-12704 via llama-index-core (>=0.10.0 <=0.12.52.post1)

llama-index-core PYPI version =0.10.0, =0.1.0, =0.0.2, =0.1.0a0.dev0, =0.2.0a0, =0.0.6, =1.1.0, =3.0.0, =1.0.5, =1.7.0, =0.1.0, =1.0.0, =1.1.6 - botrun-llama-kb =5.8.22 and more Source cves: CVE-2024-12704 Source advisory: SNYK:PYTHON-LLAMAINDEXCORE-9511125...

GHSA-3F5X-R59X-P8CF

creationtimestamp| type| source ---|---|--- 2025-03-17 23:48:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7891 2025-03-18 00:23:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114180582366575557...

Siemens SCALANCE LPE9403 Improper Check For Dropped Privileges (CVE-2025-27396)

Affected devices do not properly limit the elevation of privileges required to perform certain valid functionality. This could allow an authenticated lowly-privileged remote attacker to escalate their privileges. This plugin only works with Tenable.ot. Please visit...

CVE-2024-13602

creationtimestamp| type| source ---|---|--- 2025-03-16 06:46:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7706 2025-03-16 08:00:52+00:00| seen| https://t.me/cvedetector/20402...

CVE-2025-29775 xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment

xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1, and 2.1.6 to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. Th...