CVE-2025-24906

creationtimestamp| type| source ---|---|--- 2025-02-03 21:49:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113942157461874885 2025-02-03 22:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhckywoopj2c 2025-02-03 23:40:52+00:00| seen|...

CVE-2024-55416

creationtimestamp| type| source ---|---|--- 2025-01-30 15:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxrnocmz42i 2025-01-30 16:00:07+00:00| seen| https://t.me/truesecator/6678 2025-01-30 18:12:23+00:00| published-proof-of-concept|...

CVE-2025-23057

creationtimestamp| type| source ---|---|--- 2025-01-28 17:18:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113907118853381345 2025-01-28 18:16:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgt2s7n2ai2j 2025-01-28 19:09:06+00:00| seen|...

CVE-2024-54507

creationtimestamp| type| source ---|---|--- 2025-01-23 22:42:05+00:00| seen| https://bsky.app/profile/hn100.bsky.social/post/3lggxcviw4y2c 2025-01-23 22:45:51+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3lggxjneluj25 2025-01-23 22:51:40+00:00| seen|...

CVE-2024-49742

In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app with notification access in Settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed f...

CVE-2024-13496

creationtimestamp| type| source ---|---|--- 2025-01-21 23:07:42+00:00| seen| https://bsky.app/profile/abrahack.bsky.social/post/3lgbxsnqgxs2s 2025-01-22 11:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdaiqmrjn2j 2025-01-22 11:44:34+00:00| seen|...

PT-2025-2283 · Oracle · Jd Edwards Enterpriseone Tools

Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Tools versions prior to 9.2.9.0 Description: The issue is related to a component of the JD Edwards EnterpriseOne Tools system, specifically the Business Logic Infra SEC, which has a flaw in its data source confirmatio...

CVE-2024-50967

creationtimestamp| type| source ---|---|--- 2025-01-16 22:00:05+00:00| published-proof-of-concept| Telegram/qbRDczufhEAwfoxE7jsw2afVmX33EpB44LRknpUqHzmwaHs 2025-01-17 14:57:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113844279598243025 2025-01-17 15:15:51+00:00| seen|...

CVE-2024-7097

creationtimestamp| type| source ---|---|--- 2025-01-15 12:42:27+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-7097.yaml 2025-01-19 21:02:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg4pub2zlq2x 2025-02-02...

CVE-2024-12527

creationtimestamp| type| source ---|---|--- 2025-01-11 07:57:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113808655798870020 2025-01-11 08:03:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1280 2025-01-11 08:16:10+00:00| seen|...

CVE-2024-55218

creationtimestamp| type| source ---|---|--- 2025-01-07 19:57:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113788836453836260 2025-01-07 20:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6hozzsjx2e 2025-01-07 20:39:25+00:00|...

CVE-2024-48245

Vehicle Management System 1.0 is vulnerable to SQL Injection. A guest user can exploit vulnerable POST parameters in various administrative actions, such as booking a vehicle or confirming a booking. The affected parameters include "Booking ID", "Action Name", and "Payment Confirmation ID", which...

CVE-2024-48245

Vehicle Management System 1.0 is vulnerable to SQL Injection. A guest user can exploit vulnerable POST parameters in various administrative actions, such as booking a vehicle or confirming a booking. The affected parameters include "Booking ID", "Action Name", and "Payment Confirmation ID", which...

CVE-2024-55556

creationtimestamp| type| source ---|---|--- 2025-01-07 16:07:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113787932627494304 2025-01-07 16:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62crdegm2i 2025-03-12 04:51:28+00:00| confirmed|...

CVE-2025-22385

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. For newly created accounts, the Commerce B2B application does not require email confirmation. This medium-severity issue allows the mass creation of accounts. This could affect database storage; also, non-requested...

CVE-2025-22385

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. For newly created accounts, the Commerce B2B application does not require email confirmation. This medium-severity issue allows the mass creation of accounts. This could affect database storage; also, non-requested...

CVE-2025-22385

Optimizely Configured Commerce before 5.2.2408 contains an issue where the Commerce B2B application does not require email confirmation for newly created accounts, enabling mass account creation and potential impacts to database storage (and non-requested storefront accounts). Affected version ra...

PT-2025-4481 · Optimizely · Optimizely Configured Commerce

Name of the Vulnerable Software and Affected Versions: Optimizely Configured Commerce versions prior to 5.2.2408 Description: An issue was discovered in Optimizely Configured Commerce where the Commerce B2B application does not require email confirmation for newly created accounts. This allows th...

Optimizely Configured Commerce 安全漏洞

Optimizely Configured Commerce is a portfolio commerce platform from Optimizely, Inc. A security vulnerability exists in Optimizely Configured Commerce versions prior to 5.2.2408, which stems from an email confirmation not being required for newly created accounts...

CVE-2025-22385

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. For newly created accounts, the Commerce B2B application does not require email confirmation. This medium-severity issue allows the mass creation of accounts. This could affect database storage; also, non-requested...