2757 matches found
CVE-2024-46816
creationtimestamp| type| source ---|---|--- 2025-04-25 11:07:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13402 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-05-10 18:00:00+00:00| seen|...
ADM - CPU utilization is increasing and Debug is enabled
High Load on the CPU at Random time, collect the bundle and shared...
UBUNTU-CVE-2025-43921
GNU Mailman 2.1.39, as bundled in cPanel and WHM, allows unauthenticated attackers to create lists via the /mailman/create endpoint. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used...
Pimcore Admin Classic Bundle Cross-Site Scripting Vulnerability
Pimcore Admin Classic Bundle is a Pimcore open source a core bundle of Pimcore. The Pimcore Admin Classic Bundle suffers from a cross-site scripting vulnerability that stems from HTML injection, which can be exploited by an attacker to steal session cookies...
Security update for cosign
This update for cosign fixes the following issues: CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to log file bsc1227031 CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Fixed bad documentation of error handling in ParseWithClaims leading to...
CVE-2025-30166 Pimcore's Admin Classic Bundle allows HTML Injection
Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. An HTML injection issue allows users with access to the email sending functionality to inject arbitrary HTML code into emails sent via the admin interface, potentially leading to session cookie theft and the alteration of page...
CVE-2025-30166 Pimcore's Admin Classic Bundle allows HTML Injection
Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. An HTML injection issue allows users with access to the email sending functionality to inject arbitrary HTML code into emails sent via the admin interface, potentially leading to session cookie theft and the alteration of page...
CVE-2025-30166: Improper Neutralization of Input During Web Page Generation
Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. An HTML injection issue allows users with access to the email sending functionality to inject arbitrary HTML code into emails sent via the admin interface, potentially leading to session cookie theft and the alteration of page...
PT-2025-15421 · Pimcore · Pimcore Admin Classic Bundle
Name of the Vulnerable Software and Affected Versions: Pimcore Admin Classic Bundle versions prior to 1.7.6 Description: An HTML injection issue in Pimcore's Admin Classic Bundle allows users with access to the email sending functionality to inject arbitrary HTML code into emails sent via the adm...
Pimcore Admin Classic Bundle 跨站脚本漏洞
Pimcore Admin Classic Bundle is a Pimcore open source a core bundle of Pimcore. The Pimcore Admin Classic Bundle suffers from a cross-site scripting vulnerability that stems from HTML injection, which can be exploited by an attacker to steal session cookies...
CVE-2024-38611
creationtimestamp| type| source ---|---|--- 2025-04-07 08:44:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10686 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
CVE-2024-46772
creationtimestamp| type| source ---|---|--- 2025-04-07 08:44:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10685 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
CVE-2025-21969
creationtimestamp| type| source ---|---|--- 2025-04-01 19:44:39+00:00| seen| https://t.me/cvedetector/21791 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
PT-2025-04: Partial Denial of Service (DoS) in Mobile Security Framework (MobSF)
The vulnerability was identified in Mobile Security Framework MobSF , versions 4.3.0. The discovered vulnerability allows an attacker to modify the Info.plist file and add special characters to the bundle identifier, resulting in a denial of service 500 error of the application. Vulnerability...
CVE-2022-49761
creationtimestamp| type| source ---|---|--- 2025-03-28 15:28:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9361 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
Malicious code in test-utils-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c296c435648a7ea93add03c751dc85edae75eeaf8f9e36b3059aa28846dc654 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Cross-site Scripting (XSS)
Overview contao/core-bundle is an Open Source PHP Content Management System for people who want a professional website that is easy to maintain. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the uploadTo function in FileUpload.php. An attacker can execute scripts...
CERTFR-2021-ALE-022
creationtimestamp| type| source ---|---|--- 2025-03-11 20:37:58+00:00| seen| https://vulnerability.circl.lu/bundle/11268897-8798-4ec2-bcac-b23fe0715823...