27766 matches found
CVE-2025-32664 WordPress Nepali Date Utilities plugin <= 1.0.15 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in ashokbasnet Nepali Date Utilities nepali-date-utilities allows Stored XSS.This issue affects Nepali Date Utilities: from n/a through = 1.0.15...
CVE-2025-32664 WordPress Nepali Date Utilities plugin <= 1.0.15 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in ashokbasnet Nepali Date Utilities nepali-date-utilities allows Stored XSS.This issue affects Nepali Date Utilities: from n/a through = 1.0.15...
CVE-2025-32664
CVE-2025-32664: Nepali Date Utilities (WordPress plugin) contains a CSRF-triggered Stored XSS vulnerability affecting versions up to 1.0.13. The connected Wordfence vulnerability list indicates this entry is currently Unpatched. No exploit details or mitigation steps are provided in the supplied ...
WordPress Nepali Date Utilities plugin <= 1.0.15 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Nepali Date Utilities versions = 1.0.15...
WordPress Mergado Pack plugin <= 4.2.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Mergado Pack versions = 4.2.1...
CVE-2022-47859
creationtimestamp| type| source ---|---|--- 2025-04-09 14:48:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11065...
CVE-2022-3841
creationtimestamp| type| source ---|---|--- 2025-04-09 13:47:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11054...
CVE-2015-10038
creationtimestamp| type| source ---|---|--- 2025-04-09 13:47:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11051...
CVE-2017-20197
creationtimestamp| type| source ---|---|--- 2025-04-09 11:47:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11042 2025-04-09 14:15:59+00:00| seen| https://t.me/cvedetector/22557...
CVE-2025-27722
creationtimestamp| type| source ---|---|--- 2025-04-09 09:47:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11031 2025-04-09 12:35:33+00:00| seen| https://t.me/cvedetector/22548...
CVE-2024-8243
creationtimestamp| type| source ---|---|--- 2025-04-09 06:48:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11023 2025-04-09 07:32:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmehvt6jnd2z 2025-04-09 10:04:55+00:00| seen|...
CVE-2025-32464
HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sampleconvregsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one...
CVE-2025-3481
creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-245/ 2025-05-22 01:42:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17218 2025-05-22 04:46:07+00:00| seen|...
CVE-2025-30679
creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-237/...
CVE-2025-30680
creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-238/...
CVE-2025-30678
creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-236/ 2025-06-20 13:43:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18956...
CVE-2025-32460
GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call...
WordPress plugin Nepali Date Utilities 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
Debian: Security Advisory (DSA-5897-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...