CVE-2024-12403

creationtimestamp| type| source ---|---|--- 2025-01-15 09:28:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113831661336637777 2025-01-15 10:11:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1716 2025-01-15 10:15:49+00:00| seen|...

CVE-2024-39799

creationtimestamp| type| source ---|---|--- 2025-01-14 15:19:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpkedrrhc2t 2025-01-14 15:48:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfplyqfxkw2q 2025-01-14 15:50:07+00:00| seen|...

Belledonne Communications Linphone-Desktop

RISK EVALUATION Successful exploitation of this vulnerability could could result in a remote attacker causing a denial-of-service condition on the affected devices. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...

CVE-2024-27397

creationtimestamp| type| source ---|---|--- 2025-01-14 04:20:53+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lfofldj2b22d 2025-01-14 06:20:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lfomaubh2k2x 2025-01-14 08:51:49+00:00| seen|...

PT-2025-6278

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.0.0 through 7.0.16 FortiProxy versions 7.0.0 through 7.0.19 FortiProxy versions 7.2.0 through 7.2.12 Description An authentication bypass issue exists in the Node.js WebSocket module and CSF proxy requests. This flaw allows ...

Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H (Update B)

RISK EVALUATION Successful exploitation of this vulnerability could cause information disclosure of a restricted web page, modification of a web page and a denial of service when specific web pages are modified and restricted functions are invoked. 2. RECOMMENDED PRACTICES CISA reminds...

CVE-2023-42247

creationtimestamp| type| source ---|---|--- 2025-01-13 22:11:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113823335053783592 2025-01-13 22:17:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfnrauqxjf2j 2025-01-13 22:38:17+00:00| seen|...

CVE-2024-11636

creationtimestamp| type| source ---|---|--- 2025-01-13 06:05:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113819537102998283 2025-01-13 06:06:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1355 2025-01-13 06:10:25+00:00| seen|...

CVE-2025-0407

creationtimestamp| type| source ---|---|--- 2025-01-13 01:36:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113818481099839135 2025-01-13 02:06:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1347 2025-01-13 02:15:59+00:00| seen|...

CVE-2025-23109

creationtimestamp| type| source ---|---|--- 2025-01-11 03:43:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113807654396857326 2025-01-11 04:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgtv3mhqx2d 2025-01-11 04:43:46+00:00| seen|...

Cross-site Scripting (XSS)

Overview mediawiki/article-feedbackv5 is a MediaWiki extension designed to engage readers in the assessment of article quality Affected versions of this package are vulnerable to Cross-site Scripting XSS via messages passed in as articlefeedbackv5-activity-pane-header, which is not escaped. Detai...

CVE-2023-24010

creationtimestamp| type| source ---|---|--- 2025-01-09 14:40:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113798913106504782 2025-01-09 15:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcxtqtlio25 2025-01-09 15:38:35+00:00| seen|...

CVE-2022-22491

creationtimestamp| type| source ---|---|--- 2025-01-09 14:12:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113798805158983707 2025-01-09 14:15:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/953 2025-01-09 14:15:46+00:00| seen|...

GHSA-58MG-WW7Q-XW3P

creationtimestamp| type| source ---|---|--- 2025-01-08 20:22:12+00:00| seen| https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3lfayiptjt662...

Malicious code in cursor-always-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 614a7726e7b2899695d56d3b75f1f9179a6fcde5654913693b20e521e476840f The OpenSSF Package Analysis project identified 'cursor-always-local' @ 1.0.2 npm as malicious. It is considered malicious because: - The packag...

CVE-2024-12849

creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/343 2025-01-07 06:16:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrq7eak2m 2025-01-07 06:33:54+00:00| seen|...

MAL-2025-23 Malicious code in zetessf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54b4e49ae22e5325a2ed8fe3e7a32f36e50fdf5fda9ea594cf72b24bd9c97788 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-12996

creationtimestamp| type| source ---|---|--- 2025-01-06 15:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3ggvwcst2a 2025-01-06 15:58:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lf3itcyzux2k...

CVE-2024-43064

creationtimestamp| type| source ---|---|--- 2025-01-06 11:12:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113781107563141439 2025-01-06 11:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2z24gva622 2025-01-06 11:43:07+00:00| seen|...

CVE-2024-20148

creationtimestamp| type| source ---|---|--- 2025-01-06 03:47:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113779361382316972 2025-01-06 04:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2bkr5yyc22 2025-01-06 04:42:47+00:00| seen|...