42649 matches found
CVE-2025-5228
creationtimestamp| type| source ---|---|--- 2025-05-26 18:20:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114575516129811043 2025-05-27 03:36:05+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4r3blsfuj2 2025-05-27...
CVE-2025-5215
creationtimestamp| type| source ---|---|--- 2025-05-26 13:50:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114574454541216691 2025-05-27 00:47:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17590 2025-05-27 02:56:14+00:00| seen|...
CVE-2025-4057
creationtimestamp| type| source ---|---|--- 2025-05-26 09:49:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17543 2025-05-26 13:47:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq3crt2uyd22 2025-06-02 18:26:30+00:00| seen|...
PT-2025-22929 · Unknown · Wing Ftp Server
Name of the Vulnerable Software and Affected Versions: Wing FTP Server versions 7.4.0 through 7.4.3 Description: A critical vulnerability has been found in the Lua Admin Console component of Wing FTP Server, allowing execution with unnecessary privileges. The attack can be launched remotely and h...
CVE-2024-51108
creationtimestamp| type| source ---|---|--- 2025-05-23 17:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpu6fnfon222...
CVE-2025-5106
creationtimestamp| type| source ---|---|--- 2025-05-23 16:15:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptzobiysv2w...
CVE-2025-3894
creationtimestamp| type| source ---|---|--- 2025-05-23 16:05:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptz4eg6lg2o...
CVE-2025-47673
CVE-2025-47673 affects the WordPress Arconix Shortcodes plugin up to version 2.1.16. It is a Reflected XSS flaw caused by improper input neutralization during web page generation. According to CVSS 3.1, the base score is 7.1 (High); vector: Network, low attack complexity, privileges required: Non...
CVE-2025-23369
An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed signature spoofing for unauthorized internal users. Instances not utilizing SAML single sign-on or where the attacker is not already an existing user were not impacted. This...
CVE-2024-42793
A Cross-Site Request Forgery CSRF vulnerability was found in Kashipara Music Management System v1.0 via a crafted request to the /music/ajax.php?action=saveuser page...
CVE-2024-42623
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/layout/delete/1...
CVE-2024-3690
A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0. Affected by this vulnerability is an unknown functionality of the component Change Password Handler. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...
CVE-2024-7394
Concrete CMS versions 9 through 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in getAttributeSetName. A rogue administrator could inject malicious code. The Concrete CMS team gave this a CVSS v4.0 rank of 4.6 with vector...
CVE-2024-13945
creationtimestamp| type| source ---|---|--- 2025-05-23 09:47:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17375 2025-05-23 11:22:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptjbxlxxn2y...
CVE-2024-1084
Cross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise Server allows a malicious website that requires user interaction and social engineering to make changes to a user account via CSP bypass with created CSRF tokens. This vulnerability affected all...
CVE-2024-10419
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /bloodrequest.php. The manipulation of the argument msg leads to cross site scripting. The attack may be launched remotel...
CVE-2024-33636
Missing Authorization vulnerability in Mahesh Vora WP Page Post Widget Clone.This issue affects WP Page Post Widget Clone: from n/a through 1.0.1...
CVE-2024-44771
BigId PrivacyPortal v179 is vulnerable to Cross Site Scripting XSS via the "Label" field in the Report template function...