CVE-2025-28089

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF via the Scheduled Task function...

CVE-2022-4834

creationtimestamp| type| source ---|---|--- 2025-03-27 20:27:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9209...

CVE-2025-30867 WordPress SearchIQ plugin <= 4.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SearchIQ SearchIQ searchiq allows Stored XSS.This issue affects SearchIQ: from n/a through = 4.7...

CVE-2025-28873 WordPress Shuffle plugin <= 0.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Scott Taylor Shuffle shuffle allows Blind SQL Injection.This issue affects Shuffle: from n/a through = 0.5...

Moderate: Red Hat Security Advisory: nginx:1.24 security update

An update for the nginx:1.24 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: container-tools:rhel8 security update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: container-tools:rhel8 security update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security h...

CVE-2025-30623 WordPress wA11y – The Web Accessibility Toolbox plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rachel Cherry wA11y – The Web Accessibility Toolbox wa11y allows Stored XSS.This issue affects wA11y – The Web Accessibility Toolbox: from n/a through = 1.0.3...

CVE-2025-29806 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2025-2550

creationtimestamp| type| source ---|---|--- 2025-03-20 17:18:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8241 2025-03-20 19:54:35+00:00| seen| https://t.me/cvedetector/20752 2025-03-20 21:04:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lktlxblte...

CVE-2024-11041

creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:21+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmh6j6cs2g...

CVE-2025-27785 Applio allows arbitrary file read in train.py export_index function

Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file read in train.py's exportindex function. This issue may lead to reading arbitrary files on the Applio server. It can also be used in conjunction with blind server-side request forgery to read files...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

CVE-2025-26978

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through = 6.5.8...

RLSA-2024:9188 Low: bpftrace security update

BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter eBPF available in recent Linux kernels 4.x. BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing...

CVE-2024-49561

creationtimestamp| type| source ---|---|--- 2025-03-17 18:31:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7811 2025-03-17 18:38:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114179224013214264 2025-03-17 21:39:43+00:00| seen| https://t.me/cvedetector/20514 2025-03-17...

CVE-2025-2360

creationtimestamp| type| source ---|---|--- 2025-03-15 22:30:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114168812896511888 2025-03-17 04:46:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7735 2025-03-17 06:00:34+00:00| seen|...

CVE-2025-29386

creationtimestamp| type| source ---|---|--- 2025-03-14 19:13:06+00:00| seen| https://t.me/cvedetector/20312 2025-03-14 20:46:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkei5x3gt32x...

CVE-2025-25291

ruby-saml provides security assertion markup language SAML single sign-on SSO for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently; the parsers can generate entirely...