CVE-2024-13981

creationtimestamp| type| source ---|---|--- 2025-08-29 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxf7elfi2q 2026-06-23 14:03:57+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4d1ff909-beaa-4f8c-aa53-3c1cad94b70c...

CVE-2023-7309

creationtimestamp| type| source ---|---|--- 2025-08-29 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxf74epa27 2025-11-11 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-11-11 2026-06-19 12:45:47+00:00| exploited|...

Malicious code in user-event-13 (npm)

The package user-event-13 was found to contain malicious code...

MAL-2025-42106 Malicious code in user-event-13 (npm)

The package user-event-13 was found to contain malicious code...

CVE-2025-30274

creationtimestamp| type| source ---|---|--- 2025-08-29 18:54:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxkqa7o5ym27...

CVE-2024-55177

creationtimestamp| type| source ---|---|--- 2025-08-29 18:40:05+00:00| seen| https://bsky.app/profile/jfreeg.bsky.social/post/3lxkpgte6m72l...

CVE-2025-9660

creationtimestamp| type| source ---|---|--- 2025-08-29 18:08:06+00:00| seen| https://gist.github.com/Darkcrai86/e3a55450a0268f1074e17a6e0a420de2...

CVE-2025-40708

creationtimestamp| type| source ---|---|--- 2025-08-29 17:34:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxklsd3s3h2j...

CVE-2025-40707

creationtimestamp| type| source ---|---|--- 2025-08-29 17:13:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxkkm2nj5y2p...

CVE-2025-40703

creationtimestamp| type| source ---|---|--- 2025-08-29 17:05:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxkk5cwm4h2n...

CVE-2025-55177

creationtimestamp| type| source ---|---|--- 2025-08-29 16:11:15+00:00| seen| https://bsky.app/profile/campuscodi.risky.biz/post/3lxkh4ly2hk2s 2025-08-29 16:16:44+00:00| seen| https://bsky.app/profile/billmarczak.org/post/3lxkhghssi22p 2025-08-29 16:50:51+00:00| seen|...

GHSA-M5QC-C3Q5-2P29

creationtimestamp| type| source ---|---|--- 2025-08-29 15:23:09+00:00| seen| Telegram/jXz3wQJYIXyPJTUY0JfmFlFB9k8-MkC5avbhgUKdqDXKf0...

CVE-2025-40708

Cross-Site Scripting XSS vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage ACDH-CH, due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an...

CVE-2025-40708 Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH

Cross-Site Scripting XSS vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage ACDH-CH, due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an...

CVE-2025-40708 Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH

Cross-Site Scripting XSS vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage ACDH-CH, due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an...

CVE-2025-40708

OpenAtlas v8.9.0 is affected by a Cross-Site Scripting (XSS) flaw triggered by insufficient validation of the name field in the POST /insert/event API. An attacker could craft queries to an authenticated user and potentially steal session cookie details. The issue is corroborated by multiple sour...

CVE-2025-54777

creationtimestamp| type| source ---|---|--- 2025-08-29 10:39:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxjum2hok72m...

CVE-2025-9610

A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /createaccount.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicl...

CVE-2025-9610 code-projects Online Event Judging System create_account.php sql injection

A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /createaccount.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicl...

CVE-2025-9610

The CVE-2025-9610 entry relates to code-projects Online Event Judging System 1.0 with a SQL injection in /create_account.php. The fname parameter manipulation leads to SQL injection, enabling remote exploitation. Multiple connected sources confirm the vulnerability and public exploitation discuss...