2334 matches found
CVE-2025-13363
CVE-2025-13363 concerns the IMAQ CORE WordPress plugin. According to Wordfence, versions up to and including 1.2.1 are vulnerable to a Cross-Site Request Forgery (CSRF) due to missing nonce validation on the URL structure settings update function. This enables unauthenticated attackers to modify ...
PT-2025-50878
In GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION prior to ver5.7.1, "External page display restriction" is set to "Do not limit" in the initial configuration. With this configuration, the user may be redirected to an arbitrary website...
Exploit for CVE-2022-25765
Command Injection quando processa URLs não sanitizadas. Isso aco...
CVE-2024-58312
xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attackers to access sensitive system files by manipulating URL parameters. Attackers can exploit directory traversal techniques to read critical system files like using encoded path traversal characters in HTTP...
CVE-2025-67505
creationtimestamp| type| source ---|---|--- 2025-12-11 01:00:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7oepprs6m2e...
uCrop 代码问题漏洞
uCrop is an Android image cropping library open-sourced by Yalantis. A code issue vulnerability exists in uCrop version 2.2.11, which stems from a flaw in the function downloadFile in the file com.yalantis.ucrop.task.BitmapLoadTask.java of the component URL Handler, which could lead to server-sid...
PT-2025-50608
A vulnerability was found in Yalantis uCrop 2.2.11. Affected by this issue is the function downloadFile of the file com.yalantis.ucrop.task.BitmapLoadTask.java of the component URL Handler. Performing manipulation results in server-side request forgery. The attack may be initiated remotely. The...
CVE-2025-13607
A malicious actor can access camera configuration information, including account credentials, without authenticating when accessing a vulnerable URL...
GHSA-MJCP-GPGX-GGCG
creationtimestamp| type| source ---|---|--- 2025-12-10 01:47:43+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3m7lwvgz5u52x...
EUVD-2025-202068
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in flexmls Flexmls® IDX flexmls-idx allows Phishing.This issue affects Flexmls® IDX: from n/a through = 3.15.7...
CVE-2025-34397
creationtimestamp| type| source ---|---|--- 2025-12-09 18:23:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115691003669191782...
CVE-2025-62082
creationtimestamp| type| source ---|---|--- 2025-12-09 16:00:21+00:00| seen| https://gist.github.com/Darkcrai86/ef17d2dc0caf1ff17172b93af46f911e...
CVE-2025-12807
creationtimestamp| type| source ---|---|--- 2025-12-09 15:52:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7kvnvapsq2a 2026-01-14 17:27:21+00:00| seen| https://mastodon.social/ap/users/115426718704364579/statuses/115894625226861827 2026-01-14 17:27:41+00:00| seen|...
CVE-2025-13604
CVE-2025-13604 is a stored XSS in the WordPress plugin “Login Security, FireWall, Malware removal by CleanTalk” (versions ≤ 2.168). The root cause is insufficient input sanitization and output escaping on the page URL, enabling unauthenticated attackers to inject scripts executed when users load ...
CVE-2025-42896 Server-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence Platform
SAP BusinessObjects Business Intelligence Platform lets an unauthenticated remote attacker send crafted requests through the URL parameter that controls the login page error message. This can cause the server to fetch attacker-supplied URLs, resulting in low impact to confidentiality and integrit...
CVE-2025-12635 IBM WebSphere Application Server and WebSphere Application Server Liberty Cross-Site Scripting
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.12 are affected by cross-site scripting due to improper validation of user-supplied input. An attacker could exploit this vulnerability by using a specially crafted URL to redirect the...
CVE-2025-40220
creationtimestamp| type| source ---|---|--- 2025-12-07 02:38:03+00:00| seen| https://bsky.app/profile/secqube.com/post/3m7eicp63if23 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...
CVE-2024-32642
creationtimestamp| type| source ---|---|--- 2025-12-04 15:10:07+00:00| seen| https://bsky.app/profile/blackwiremedia.bsky.social/post/3m76awosycm2g...
CVE-2025-66373
creationtimestamp| type| source ---|---|--- 2025-12-03 23:07:17+00:00| seen| https://bsky.app/profile/geeknik.bsky.social/post/3m74l525ixj2w 2025-12-04 19:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m76nxfvi372j 2025-12-14 13:18:27+00:00| seen|...