CVE-2025-22992

creationtimestamp| type| source ---|---|--- 2025-02-06 18:28:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113958357304730897 2025-02-06 19:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjscoic432x 2025-02-06 21:55:36+00:00| seen|...

CVE-2023-5878

creationtimestamp| type| source ---|---|--- 2025-02-06 14:19:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113957375605890754 2025-02-06 14:51:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113957501258847591 2025-02-06 15:15:43+00:00| seen|...

CVE-2021-4406

An authenticated attacker is able to create alerts that trigger a stored XSS attack. POC go to the alert manager open the ITSM tab add a webhook with the URL/service token value ' -h && id | tee /tmp/ttttttddddssss ' whitespaces are tab characters click add click apply create a test alert The tes...

CVE-2021-35222

This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution RCE from the Alerts Settings page...

CVE-2021-35220

Command Injection vulnerability in EmailWebPage API which can lead to a Remote Code Execution RCE from the Alerts Settings page...

CVE-2024-51450

creationtimestamp| type| source ---|---|--- 2025-02-06 00:32:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113954125870793330 2025-02-06 01:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhvxrlc722r 2025-02-06 02:44:21+00:00| seen|...

CVE-2024-57082

creationtimestamp| type| source ---|---|--- 2025-02-05 21:16:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113953353403713809 2025-02-05 22:17:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhly67a672i 2025-02-06 01:50:59+00:00| seen|...

GHSA-CXQQ-W3X5-7PH3

creationtimestamp| type| source ---|---|--- 2025-02-05 18:44:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113952756172745897 2025-02-05 19:35:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113952958359120211...

CVE-2025-24803

creationtimestamp| type| source ---|---|--- 2025-02-05 18:44:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113952756172745897 2025-02-05 19:18:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhbz6hwmx2w 2025-02-05 21:39:47+00:00| seen|...

CVE-2024-56131

creationtimestamp| type| source ---|---|--- 2025-02-05 18:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6jhwr7u27 2025-02-05 18:48:31+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113952770990462952 2025-02-05 22:08:54+00:00| seen|...

CVE-2025-23239

creationtimestamp| type| source ---|---|--- 2025-02-05 18:07:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113952610543794801 2025-02-05 18:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6kjnt562t 2025-02-05 18:48:33+00:00| seen|...

CVE-2025-1044

creationtimestamp| type| source ---|---|--- 2025-02-05 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-085/ 2025-02-11 20:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwi2ltxps2a 2025-02-11 20:48:54+00:00| seen|...

CVE-2024-36408

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in the Alerts controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

CVE-2024-36517

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module...

CVE-2024-26266

Multiple stored cross-site scripting XSS vulnerabilities in Liferay Portal 7.2.0 through 7.4.3.13, and older unsupported versions, and Liferay DXP 7.4 before update 10, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allow remote authenticated users to inject arbitrary...

CVE-2025-0364

creationtimestamp| type| source ---|---|--- 2025-02-04 17:56:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113946906751178412 2025-02-04 18:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhenzxr6ut2f 2025-02-04 18:48:30+00:00| seen|...

CVE-2024-57427

creationtimestamp| type| source ---|---|--- 2025-02-04 16:00:09+00:00| published-proof-of-concept| Telegram/Zrldk8z1EwjpYU8Vg3CSH1QFx-z50lEQp2XdvPCkQk6RQ8I 2025-02-06 16:22:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113957861619119242 2025-02-06 17:16:16+00:00| seen|...

CVE-2025-22699

creationtimestamp| type| source ---|---|--- 2025-02-04 15:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhedzdiovf2b 2025-02-04 16:03:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhegmtwewl2l 2025-02-04 16:48:47+00:00| seen|...

CVE-2025-0675

creationtimestamp| type| source ---|---|--- 2025-02-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-03 2025-02-06 15:21:39+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113957620896581550 2025-02-06 23:48:49+00:00| seen|...

CVE-2025-0960

creationtimestamp| type| source ---|---|--- 2025-02-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-08 2025-02-04 20:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheuqydy3v2e 2025-02-04 20:49:00+00:00| seen|...