CVE-2025-25957

creationtimestamp| type| source ---|---|--- 2025-02-20 23:17:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4839 2025-02-21 00:53:51+00:00| seen| https://t.me/cvedetector/18605...

CVE-2025-27090 Server-Side Request Forgery (SSRF) in sliver teamserver

Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the...

Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H Exposure of Sensitive Information to an Unauthorized Actor (CVE-2024-12142)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure of restricted web page, modification of web page and denial of service when specific web pages are modified and restricted functions are invoked. This plugin only works...

CVE-2023-25695

creationtimestamp| type| source ---|---|--- 2025-02-14 10:06:10+00:00| seen| Telegram/ZwCbw54e2tWMU8QAw00fw2tOIfAeTe7aK1OwGUHtuYRgn4R 2025-02-14 10:08:09+00:00| seen| Telegram/M96cR7FMv4MwZ0mYeIqPh0BhoM3PpRVDoNDtd926NB41vjkU...

CVE-2020-26294

Vela is a Pipeline Automation CI/CD framework built on Linux container technology written in Golang. In Vela compiler before version 0.6.1 there is a vulnerability which allows exposure of server configuration. It impacts all users of Vela. An attacker can use Sprig's env function to retrieve...

The vulnerability of the Framework component in Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2023-23545

creationtimestamp| type| source ---|---|--- 2025-02-01 17:28:09+00:00| seen| Telegram/q6FBdZY-yXkxZpY8itEF8lntc2fuDjTqhVkYM12gDfDJOqc...

BIT-ARGO-CD-2025-23216 Argo CD does not scrub secret values from patch errors

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was discovered in Argo CD that exposed secret values in error messages and the diff view when an invalid Kubernetes Secret resource was synced from a repository. The vulnerability assumes the user has write...

PT-2025-3990 · Rockwell Automation · Powerflex 755

Name of the Vulnerable Software and Affected Versions: Rockwell Automation PowerFlex 755 affected versions not specified Oracle WebLogic Server affected versions not specified Description: A credential exposure vulnerability exists due to the use of HTTP, resulting in credentials being sent in...

BELL-CVE-2024-57935

Bulletin has no description...

CVE-2025-21539

The CVE-2025-21539 entry concerns Oracle PeopleSoft: FIN eSettlements (component: eSettlements) in version 9.2. The vulnerability can be triggered by a low-privileged attacker with network access via HTTP, enabling unauthorized update/insert/delete and unauthorized read access to a subset of eSet...

CVE-2025-21523

...

CVE-2025-21506

...

CVE-2007-2020

creationtimestamp| type| source ---|---|--- 2025-01-17 14:56:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2137...

The vulnerability of Windows operating systems’ message queues allows attackers to induce service failures.

The vulnerability of Message Queuing in Windows operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

PT-2025-4997 · Quotemedia · Quotemedia Tools

Name of the Vulnerable Software and Affected Versions: QuoteMedia Tools versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This is a type of Cross-site Scripting attack. Recommendations: For...

CVE-2025-21328 MapUrlToZone Security Feature Bypass Vulnerability

...

WordPress plugin FAT Event Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-3825 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 17.2 through 17.6.4 GitLab CE/EE versions 17.7 through 17.7.3 GitLab CE/EE versions 17.8 through 17.8.1 Description: An issue has been discovered in GitLab CE/EE, where improper rendering of certain file types leads to...

WordPress Accept Authorize.NET Payments Using Contact Form 7 plugin <= 2.2 - Unauthenticated Information Exposure vulnerability

Unauthenticated Information Exposure vulnerability discovered by Joshua Chan in WordPress Plugin Accept Authorize.NET Payments Using Contact Form 7 versions = 2.2...