28479 matches found
CVE-2025-55145
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote authenticated attacker to hijack existing HTML5...
CVE-2025-8712
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote authenticated attacker with read-only admin...
CVE-2025-9018
creationtimestamp| type| source ---|---|--- 2025-09-11 13:49:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lykvbis35s2c...
CVE-2025-42961
creationtimestamp| type| source ---|---|--- 2025-09-11 13:37:23+00:00| seen| https://vulnerability.circl.lu/bundle/43ff9e04-da8f-45fe-a06a-e8f9b84a2d14...
CVE-2025-42918
creationtimestamp| type| source ---|---|--- 2025-09-11 13:37:23+00:00| seen| https://vulnerability.circl.lu/bundle/43ff9e04-da8f-45fe-a06a-e8f9b84a2d14...
CVE-2025-40694
Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'fromdate' and 'todate' parameters via POST at the endpoint '/ofrs/admin/bwdates-report-result.php'. This vulnerability...
CVE-2025-40694 Cross Site Scripting in PHPGurukul Online Fire Reporting System
Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'fromdate' and 'todate' parameters via POST at the endpoint '/ofrs/admin/bwdates-report-result.php'. This vulnerability...
CVE-2025-9635
creationtimestamp| type| source ---|---|--- 2025-09-11 10:50:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyklb23erl2c...
CVE-2025-9861
creationtimestamp| type| source ---|---|--- 2025-09-11 10:47:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lykl4ko5hn2f...
CVE-2025-10127
creationtimestamp| type| source ---|---|--- 2025-09-11 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-254-10 2025-09-11 20:03:06+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lylk5btbwa26 2025-09-13 01:37:20+00:00| seen|...
CVE-2025-8392
The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...
CVE-2025-9123
creationtimestamp| type| source ---|---|--- 2025-09-11 07:36:53+00:00| seen| Telegram/4zyvQ36OasQaiXXBi-XS6orPBC3L6BdwAS3ORhIHRYvE6wE...
CVE-2025-8392 Mitfahrgelegenheit <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter
The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...
CVE-2025-8392
CVE-2025-8392 affects the Mitfahrgelegenheit WordPress plugin. It allows stored XSS via the date parameter in versions up to 1.1.5 . Exploitation requires Contributor+ authentication. The vulnerability is listed with an Unpatched status in the provided details; a patch tag exists (1.1.5) in the r...
CVE-2025-8392 Mitfahrgelegenheit <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter
The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...
Malicious code in @google_cloud/precise-date (npm)
The package @googlecloud/precise-date was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe210b8cac7607562aceba7accb395f7d72480112abadec2545c8863f9029ac Any computer that has this package installed or running should be considered...
Malware in @google_cloud/precise-date
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious Package
Overview @googlecloud/precise-date is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
MAL-2025-47029 Malicious code in @google_cloud/precise-date (npm)
The package @googlecloud/precise-date was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe210b8cac7607562aceba7accb395f7d72480112abadec2545c8863f9029ac Any computer that has this package installed or running should be considered...