PT-2025-5807 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Defense Platform Home Edition versions 3.9.51.x and earlier Description: The issue is related to improper neutralization of argument delimiters in a command, also known as 'Argument Injection'. This can cause a denial-of-service DoS condition...

CVE-2022-41668

A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from an adversary-controlled network share which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal ExpertV3.3 Hotfix 1...

CVE-2022-41666

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal ExpertV3.3 Hotfix 1 or prior, Pro-face...

CVE-2022-41671

A CWE-89: Improper Neutralization of Special Elements used in SQL Command ‘SQL Injection’ vulnerability exists that allows adversaries with local user privileges to craft a malicious SQL query and execute as part of project migration which could result in execution of malicious code. Affected...

CVE-2022-41667

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal ExpertV3.3 Hotfi...

CVE-2022-41669

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load a malicious DLL which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal ExpertV3.3...

Multiple vulnerabilities in Defense Platform Home Edition

Overview Defense Platform Home Edition provided by Humming Heads Inc. contains multiple vulnerabilities listed below. Improper handling of message in specific process CWE-422 - CVE-2025-20094 Execution with unnecessary privileges CWE-250 - CVE-2025-22890 Improper handling of message in specific...

CVE-2025-24174

creationtimestamp| type| source ---|---|--- 2025-01-27 22:19:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxwa2vv22w 2025-01-28 00:23:28+00:00| seen| https://t.me/cvedetector/16531 2025-01-28 18:49:08+00:00| seen|...

CVE-2024-12477

creationtimestamp| type| source ---|---|--- 2025-01-22 22:02:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2671 2025-01-22 22:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgefeprjpp2h 2025-01-22 22:40:13+00:00| seen|...

CVE-2025-23809

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sunil Nanda Blue Wrench Video Widget blue-wrench-videos-widget allows Reflected XSS.This issue affects Blue Wrench Video Widget: from n/a through = 2.1.0...

CVE-2025-23809

CVE-2025-23809 describes a Reflected XSS in the NotFound Blue Wrench Video Widget (affecting Blue Wrench Video Widget: from n/a through 2.1.0). The vulnerability arises from improper neutralization of input during web page generation. CVSS v3.1 vector: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L with bas...

PT-2025-5109 · Unknown · Blue Wrench Video Widget

Name of the Vulnerable Software and Affected Versions: Blue Wrench Video Widget versions n/a through 2.1.0 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows reflected XSS. This problem affects the...

WordPress plugin Blue Wrench Video Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

GHSA-M7XQ-9374-9RVX

creationtimestamp| type| source ---|---|--- 2025-01-19 00:38:51+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lg2lj3zqda2i...

WordPress Blue Wrench Video Widget Plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Blue Wrench Video Widget versions = 2.1.0...

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

Overview This project is a Python script designed to identi...

CVE-2025-22547

creationtimestamp| type| source ---|---|--- 2025-01-07 16:18:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62gl4e3d25...

CVE-2024-56060

creationtimestamp| type| source ---|---|--- 2025-01-02 09:38:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113758091137844891 2025-01-02 10:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leqttuogw625 2025-01-02 11:44:14+00:00| seen|...

CVE-2024-56704

creationtimestamp| type| source ---|---|--- 2024-12-28 10:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leebjtaw4p2m 2024-12-28 11:38:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113730250799387227 2024-12-28 12:05:55+00:00| seen|...

Nanchang Zhuo Blue Technology Co., Ltd. blue sky collector has information leakage vulnerability

Nanchang Zhuolan Technology Co., Ltd. is an enterprise mainly engaged in software and information technology service industry. There is an information leakage vulnerability in the Blue Sky Collector of Nanchang Joran Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...