42651 matches found
GHSA-32CH-6X54-Q4H9 vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, stakater-reloader, prometheus-alertmanager, aws-flb-firehose, rqlite, tflint, aws-flb-cloudwatch, nri-couchbase, aws-flb-kinesis, mongo-tools, temporal-server, pulumi, nri-apache, shfmt, newrelic-infrastructure-agent, gcsfuse,...
GHSA-WVXQ-PCXQ-G3Q3 vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-79WF-QGRG-2P6C vulnerabilities
Vulnerabilities for packages: python, expat...
CVE-2024-34035
creationtimestamp| type| source ---|---|--- 2025-02-25 07:42:55+00:00| seen| https://gist.github.com/fklement/3a43dbb9fb361dddd8db7703080ade0f 2025-02-25 20:23:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5381...
CVE-2025-1642
creationtimestamp| type| source ---|---|--- 2025-02-25 01:25:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5240 2025-02-25 04:49:59+00:00| seen| https://t.me/cvedetector/18851 2025-02-25 05:08:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liy3sjhvf...
CVE-2025-26201
creationtimestamp| type| source ---|---|--- 2025-02-24 19:08:57+00:00| seen| https://t.me/DarkWebInformerNews/1124 2025-02-24 19:09:09+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/114060437037808360 2025-02-24 19:09:11+00:00| seen|...
CVE-2025-27335 WordPress Auto Tag Links Plugin <= 1.0.13 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Free plug in by SEO Roma Auto Tag Links auto-tag-links allows Cross Site Request Forgery.This issue affects Auto Tag Links: from n/a through = 1.0.13...
SUSE: Security Advisory (SUSE-SU-2025:0638-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-1584
creationtimestamp| type| source ---|---|--- 2025-02-23 13:20:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5092 2025-02-23 15:12:40+00:00| seen| https://t.me/cvedetector/18744 2025-02-23 16:27:25+00:00| seen|...
PT-2025-7673 · Sourcecodester · Sourcecodester Best Employee Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Best Employee Management System version 1.0 Description: A vulnerability has been found in the processing of the file /admin/salary slip.php. The manipulation of the id argument leads to authorization bypass. The attack may be...
CVE-2025-25282
creationtimestamp| type| source ---|---|--- 2025-02-21 23:31:55+00:00| published-proof-of-concept| Telegram/z-TEGJuLb-MI9QSBe5sQLLsDPvx9hpDxWNGhFcSyGduHviQ 2025-02-21 23:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114044550171978219 2025-02-21 23:57:36+00:00| seen|...
i-map.jp Cross Site Scripting vulnerability OBB-4027581
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-13900
creationtimestamp| type| source ---|---|--- 2025-02-21 11:18:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4880 2025-02-21 15:26:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhf5id2a 2025-02-21 15:35:52+00:00| seen| https://t.me/cvedetector/18651...
britcham.org.sg Open Redirect vulnerability OBB-4027452
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress SVG Support plugin <= 2.5.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability
Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin SVG Support versions = 2.5.10...
PT-2025-7579 · Itsourcecode · Itsourcecode Simple Chatbox
Name of the Vulnerable Software and Affected Versions: ITSourcecode Simple ChatBox versions up to 1.0 Description: A vulnerability was found in ITSourcecode Simple ChatBox, affecting unknown code of the file /delete.php. The attack can use SQL injection to obtain sensitive data. Recommendations:...
GHSA-RR6P-3PFG-562J XWiki Platform allows remote code execution as guest via SolrSearchMacros request
Impact Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduce on an instance, without being logged in, go to...
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure via the Unselectable function. An attacker can obtain sensitive information by exploiting the function's improper handling of data visibility. Remediation There is no fixed version for AutoQueryable.Core. References...
CVE-2024-12284
creationtimestamp| type| source ---|---|--- 2025-02-20 02:16:30+00:00| seen| https://t.me/cvedetector/18487 2025-02-20 02:33:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lilatp35kb2m 2025-02-20 03:36:00+00:00| seen|...