CVE-2025-46448

creationtimestamp| type| source ---|---|--- 2025-05-23 14:47:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17397...

CVE-2025-31060

creationtimestamp| type| source ---|---|--- 2025-05-23 14:05:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17388...

CVE-2025-39536

Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobHunt Job Alerts: from n/a through 3.6...

CVE-2025-39536

CVE-2025-39536 affects WordPress plugin JobHunt Job Alerts (versions n/a–3.6). This is a Missing Authorization vulnerability arising from misconfigured access control that could enable Arbitrary Content Deletion. The provided documents do not confirm a patch; Patch Status is listed as Unpatched, ...

CVE-2025-39536 WordPress JobHunt Job Alerts <= 3.6 - Arbitrary Content Deletion Vulnerability

Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobHunt Job Alerts: from n/a through 3.6...

CVE-2024-7438

A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?action=profile;u=2;area=showalerts;do=read of the component User Alert Read Status Handler. The manipulation of the argument...

CVE-2024-31946

An issue was discovered in Stormshield Network Security SNS 3.7.0 through 3.7.41, 3.10.0 through 3.11.29, 4.0 through 4.3.24, and 4.4.0 through 4.7.4. A user who has access to the SNS with write access on the email alerts page has the ability to create alert email containing malicious JavaScript,...

CVE-2023-22642

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the...

CVE-2022-43167

A stored cross-site scripting XSS vulnerability in the Users Alerts feature /index.php?module=usersalerts/usersalerts of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter after clicking "Add"...

WordPress plugin JobHunt Job Alerts 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2021-39413

Multiple Cross Site Scripting XSS vulnerabilities exits in SEO Panel v4.8.0 via the 1 totime parameter in a backlinks.php, b analytics.php, c log.php, d overview.php, e pagespeed.php, f rank.php, g review.php, h saturationchecker.php, i socialmedia.php, and j reports.php; the 2 fromtime parameter...

CVE-2021-35219

ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page...

CVE-2021-35221

Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution RCE from the Alerts Settings page...

CVE-2024-40460

creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17359...

CVE-2020-5946

In BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, under some circumstances, certain format client-side alerts sent to the BIG-IP virtual server configured with DataSafe may cause the Traffic Management Microkernel TMM to restart, resulting in a...

CVE-2020-0437

In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. This could lead to local denial of service of emergency alerts with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-40122

creationtimestamp| type| source ---|---|--- 2025-05-22 14:44:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17298...

CVE-2022-2853

creationtimestamp| type| source ---|---|--- 2025-05-22 14:44:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17285...

WordPress JobHunt Job Alerts plugin <= 3.6 - Arbitrary Content Deletion Vulnerability

Arbitrary Content Deletion Vulnerability discovered by Bonds in WordPress Plugin JobHunt Job Alerts versions = 3.6...

CVE-2019-15688

Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component did not adequately inform the user about the threat of redirecting to an untrusted site. Bypas...