CVE-2025-47548 WordPress Wbcom Designs - Activity Link Preview For BuddyPress plugin <= 1.4.4 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through = 1.4.4...

CVE-2025-47548

The CVE-2025-47548 refers to an unauthenticated SSRF vulnerability in Wbcom Designs – Activity Link Preview For BuddyPress (WordPress plugin) up to version 1.4.4. Connected sources confirm the issue is Server-Side Request Forgery and affect the BuddyPress Activity Link Preview plugin, with Patchs...

CVE-2025-20977

creationtimestamp| type| source ---|---|--- 2025-05-07 12:23:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lolakkb67el2 2025-05-07 13:09:07+00:00| seen| https://t.me/cvedetector/24692...

CVE-2025-20975

Improper Export of Android Application Components in AODService prior to version 8.8.28.12 allows local attackers to launch arbitrary activity with systemui privilege...

CVE-2024-12120

creationtimestamp| type| source ---|---|--- 2025-05-07 08:03:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwih4arzl2 2025-05-07 08:21:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15286...

CVE-2025-32402

creationtimestamp| type| source ---|---|--- 2025-05-07 07:22:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15273 2025-05-07 08:05:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwjikxv7l2 2025-05-07...

CVE-2025-32404

creationtimestamp| type| source ---|---|--- 2025-05-07 07:22:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15271 2025-05-07 08:05:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwjiomdq52 2025-05-07...

CVE-2025-32405

creationtimestamp| type| source ---|---|--- 2025-05-07 07:21:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15270 2025-05-07 08:03:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwiifo25l2 2025-05-07 08:26:30+00:00| seen|...

CVE-2025-0853

creationtimestamp| type| source ---|---|--- 2025-05-07 00:02:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lok3qtsgobl2 2025-05-07 02:21:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokdlfffsl2p 2025-05-07...

PT-2025-20161 · Wbcom Designs · Activity Link Preview For Buddypress

Name of the Vulnerable Software and Affected Versions: Wbcom Designs - Activity Link Preview For BuddyPress versions 1.4.4 and earlier Description: A Server-Side Request Forgery SSRF issue affects the software, allowing for Server Side Request Forgery. Recommendations: For versions 1.4.4 and...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A security vulnerability exists in SAMSUNG SMR, which stems from improper access control and could allow a local attacker to initiate arbitrary activity wi...

GHSA-9PCC-GVX5-R5WM

creationtimestamp| type| source ---|---|--- 2025-05-06 17:13:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114462007419812570 2025-05-06 18:21:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15182 2025-05-06 19:30:34+00:00| published-proof-of-concept|...

Malicious code in testveriftest1asdlaaaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ff36b3e2ad882727ed964a43d4599f3713d2bada89b6cec169d727127c21c2fa During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-3602 Malicious code in testveriftest1asdlaaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b241cae62c005e3cd31a8251941ab101ebcca75aa4c8cb988905e87529339cd During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during activity update The Linux kernel CVE team has assigned CVE-2024-35855 to this issue. Upstream advisory:...

MAL-2025-3718 Malicious code in landsat-tiler (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61fe6ddc244e63c8c39ace5a34847e4b308d9e9b6ef38676efaf8de13cefd709 Any computer that has this package installed or running should be considered...

MAL-2025-3605 Malicious code in fake-linter-no-schema (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f20fce888f575adb89ec821dd8a1a50867576b07e0bf0d5f418fdc1d732e8e0d Any computer that has this package installed or running should be considered...

Malicious code in @sdrosdzol_linkedin/husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5e24d36da21d692922a995d564a799ff283c0dfe20bc5c90fe02d89aad33a616 The OpenSSF Package Analysis project identified '@sdrosdzollinkedin/husky' @ 0.2.0 npm as malicious. It is considered malicious because: - The...

Malicious code in @styletime/eslint-config (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @gfgtech/ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84be24a70b7b194bd9b506eb47c9e8b14d609c4dacff0fe05c46440b18ebcc58 Any computer that has this package installed or running should be considered...