The vulnerability of the CORS mechanism in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CORS mechanism in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the lack of verification of the reliability of data sources or messages. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the CORS mechanism in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CORS mechanism in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the lack of verification of the reliability of data sources or messages. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2024-6322

Access control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user or service account is granted associated access to any other data source, as the ReqActions check was not scoped to each specific datasource. The account must have prior query...

CVE-2022-3780

Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data. This issue affects : Remote Desktop Manager 2022.3.7 and prior versions...

I checked out the European vulnerability database, EUVD, which was officially launched yesterday

I checked out the European vulnerability database,EUVD, which was officiallylaunchedyesterday. Its usefulness is questionable for now. !🤷‍♂️https://s.w.org/images/core/emoji/15.1.0/72x72/1f937-200d-264...

CVE-2025-30328

creationtimestamp| type| source ---|---|--- 2025-05-13 18:11:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp32x4gwj3r2 2025-05-13 18:30:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16188 2025-05-13 20:48:11+00:00| seen|...

CVE-2025-3454

This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path. Users with minimal permissions could gain unauthorized read access to GET endpoints in Alertmanager and Prometheus datasources. The issue primarily...

CVE-2025-3802

creationtimestamp| type| source ---|---|--- 2025-04-19 14:59:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12583 2025-04-19 16:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln6ji7xfih2v 2025-04-19 16:28:54+00:00| seen|...

CVE-2025-39569

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:53+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325535934214 2025-04-17 18:24:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3cov3l2d 2025-04-17 20:30:36+00:00| seen|...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via Service Call functionality. A user with sufficient privileges to create Kyverno policies can expose all data from a Kubernetes cluster using a malicious Kyverno policy that makes external service cal...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via Service Call functionality. A user with sufficient privileges to create Kyverno policies can expose all data from a Kubernetes cluster using a malicious Kyverno policy that makes external service cal...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via Service Call functionality. A user with sufficient privileges to create Kyverno policies can expose all data from a Kubernetes cluster using a malicious Kyverno policy that makes external service cal...

CVE-2025-21999

creationtimestamp| type| source ---|---|--- 2025-04-03 07:46:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114272919108253388 2025-04-03 07:46:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114272919108253388 2025-04-03 11:03:19+00:00| seen|...

Appsmith 安全漏洞

Appsmith is an open source platform for building, deploying, and maintaining internal applications from Appsmith Open Source. A security vulnerability exists in Appsmith versions prior to 1.51, which stems from App Viewer's ability to obtain a list of data sources in the workspace, potentially...

CVE-2025-29891

creationtimestamp| type| source ---|---|--- 2025-03-12 15:58:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114150283427551221 2025-03-12 16:03:09+00:00| seen| https://cyberplace.social/users/GossiTheDog/statuses/114150301427230872 2025-03-12 16:07:40+00:00| seen|...

CVE-2024-58045

creationtimestamp| type| source ---|---|--- 2025-03-04 07:30:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6351 2025-03-04 09:48:56+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114103532598040540 2025-03-04 09:59:00+00:00| seen| https://t.me/cvedetector/19483 2025-03-...

CVE-2018-8639

creationtimestamp| type| source ---|---|--- 2025-03-03 15:58:10+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/3472167 2025-03-03 18:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2025-03-03 19:03:10+00:00| seen| https://bsky.app/profile/hackingne.ws/post/3ljinbdwlgm23...

CVE-2025-26530

creationtimestamp| type| source ---|---|--- 2025-02-24 20:22:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5216 2025-02-24 21:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114061063478712386 2025-02-24 22:08:36+00:00| seen| https://t.me/cvedetector/18827 2025-02-...

CVE-2025-0893

creationtimestamp| type| source ---|---|--- 2025-02-19 20:01:07+00:00| seen| Telegram/oQVpewWkvKBKUQ-rRdVr10GCle5O0Tfmf5rIV9EWW1t8XYM 2025-02-19 20:24:48+00:00| seen| https://t.me/cvedetector/18448 2025-02-19 22:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likrwsoxpe2a...

CVE-2025-22702

creationtimestamp| type| source ---|---|--- 2025-02-14 12:49:43+00:00| seen| https://infosec.exchange/users/cve/statuses/114002321943293184 2025-02-14 12:53:40+00:00| seen| https://infosec.exchange/users/cve/statuses/114002337478890879 2025-02-14 13:16:13+00:00| seen|...