The Dark Side of the Web: Towards Understanding Various Data Sources in Cyber Threat Intelligence

Cyber threats have become increasingly prevalent and sophisticated. Prior work has extracted actionable cyber threat intelligence CTI, such as indicators of compromise, tactics, techniques, and procedures TTPs, or threat feeds from various sources: open source data e.g., social networks, internal...

CVE-2024-12863

Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system...

CVE-2024-12863 Stored XSS in Discussions functionality

Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system...

OpenText Content Management CE 跨站脚本漏洞

OpenText Content Management CE is an enterprise content management solution from OpenText Canada. A cross-site scripting vulnerability exists in OpenText Content Management CE versions 20.2 through 25.1, which stems from stored cross-site scripting in the Discussions feature that could lead to co...

CVE-2024-12863: Improper Neutralization of Input During Web Page Generation

Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system...

CVE-2025-3620

creationtimestamp| type| source ---|---|--- 2025-04-16 01:07:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114344960148459261 2025-04-16 07:11:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lmvzyo7xik2r 2025-04-16 09:06:20+00:00| seen|...

Top security talks from KubeCon Europe 2025

Many of the talks at KubeCon Europe, Europe’s largest open source community conference, were related to security. Let's discuss some of our favorites...

CVE-2024-48887

creationtimestamp| type| source ---|---|--- 2025-04-08 15:53:00+00:00| seen| https://thehackernews.com/2025/04/fortinet-urges-fortiswitch-upgrades-to.html 2025-04-08 17:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmczgcbtcy2e 2025-04-08 19:08:09+00:00| seen|...

CVE-2025-3219

A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/project/2 of the component Project Discussions Module. The manipulation of the argument description leads to cross site scripting. It is...

CVE-2025-3219

A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/project/2 of the component Project Discussions Module. The manipulation of the argument description leads to cross site scripting. It is...

CVE-2025-3219 CodeCanyon Perfex CRM Project Discussions Module 2 cross site scripting

A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/project/2 of the component Project Discussions Module. The manipulation of the argument description leads to cross site scripting. It is...

CVE-2025-3219

The CVE-2025-3219 entry concerns CodeCanyon Perfex CRM 3.2.1. Affected is an unknown function in the file /perfex/clients/project/2 within the Project Discussions Module. The issue is a cross‑site scripting vulnerability triggered by manipulation of the argument description, with remote exploitat...

PT-2025-14865 · Unknown · Codecanyon Perfex Crm

Name of the Vulnerable Software and Affected Versions: CodeCanyon Perfex CRM version 3.2.1 Description: A vulnerability was found in CodeCanyon Perfex CRM. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/project/2 of the component Project...

CVE-2025-3219: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/project/2 of the component Project Discussions Module. The manipulation of the argument description leads to cross site scripting. It is...

CVE-2024-55228

creationtimestamp| type| source ---|---|--- 2025-01-25 04:09:52+00:00| exploited| https://gist.github.com/Dqtdqt/a942bbce9a5fc851dce366902411c768 2025-01-27 16:36:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113901292435622561 2025-01-27 17:16:06+00:00| seen|...

CVE-2025-21210

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:17:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpud2edey2j 2025-01-14 18:41:01+00:00| seen|...

CVE-2024-56778

creationtimestamp| type| source ---|---|--- 2025-01-08 18:07:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113794066477382175 2025-01-08 18:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfarhbw3s52f 2025-01-08 18:21:31+00:00| seen|...

CVE-2024-56521

creationtimestamp| type| source ---|---|--- 2024-12-27 04:32:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113722915496819427 2024-12-27 04:37:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113722933165201992 2024-12-27 05:15:44+00:00| seen|...

CVE-2024-12846

creationtimestamp| type| source ---|---|--- 2024-12-21 05:05:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113689069906563464 2024-12-21 05:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lds5h6jcmv2z 2024-12-21 06:58:14+00:00| seen|...

CVE-2024-43594

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 17:53:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113629799580426668 2025-01-07 16:45:47+00:00| seen|...