CVE-2025-30141

An issue was discovered on G-Net Dashcam BB GONX devices. One can Remotely Dump Video Footage and the Live Video Stream. It exposes API endpoints on ports 9091 and 9092 that allow remote access to recorded and live video feeds. An attacker who connects to the dashcam's network can retrieve all...

WordPress Google News Editors Picks Feed Generator plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2025-28860

Cross-Site Request Forgery CSRF vulnerability in PPDPurveyor Google News Editors Picks Feed Generator google-news-editors-picks-news-feeds allows Stored XSS.This issue affects Google News Editors Picks Feed Generator: from n/a through = 2.1...

CVE-2024-7296

creationtimestamp| type| source ---|---|--- 2025-03-13 08:55:50+00:00| seen| https://t.me/cvedetector/20199 2025-08-13 13:26:34+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

WordPress Simple Photo Feed Plugin <= 1.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Psai in WordPress Plugin Simple Photo Feed versions = 1.4.0...

CVE-2025-2217

creationtimestamp| type| source ---|---|--- 2025-03-12 16:41:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7331 2025-08-13 13:26:34+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

WordPress Google News Editors Picks Feed Generator plugin <= 2.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Google News Editors Picks Feed Generator versions = 2.1...

CVE-2025-28860

Cross-Site Request Forgery CSRF vulnerability in PPDPurveyor Google News Editors Picks Feed Generator allows Stored XSS. This issue affects Google News Editors Picks Feed Generator: from n/a through 2.1...

CVE-2025-28860

CVE-2025-28860 – Google News Editors Picks Feed Generator is a CSRF-to-Stored XSS vulnerability affecting the WordPress plugin Google News Editors Picks Feed Generator (versions up to 2.1). The issue arises from insufficient validation of requests, enabling a CSRF attacker to trigger stored XSS w...

CVE-2025-28860 WordPress Google News Editors Picks Feed Generator plugin <= 2.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in PPDPurveyor Google News Editors Picks Feed Generator google-news-editors-picks-news-feeds allows Stored XSS.This issue affects Google News Editors Picks Feed Generator: from n/a through = 2.1...

CVE-2025-28860 WordPress Google News Editors Picks Feed Generator plugin <= 2.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in PPDPurveyor Google News Editors Picks Feed Generator google-news-editors-picks-news-feeds allows Stored XSS.This issue affects Google News Editors Picks Feed Generator: from n/a through = 2.1...

CVE-2025-2208

creationtimestamp| type| source ---|---|--- 2025-03-11 20:41:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7226 2025-08-13 13:26:34+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

WordPress plugin Google News Editors Picks Feed Generator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

The vulnerability in the DNN CMS system’s script execution scenario /Activity-Feed/userId/{user_id}, which allows a attacker to perform XSS attacks.

Vulnerability of the DNN CMS system’s /Activity-Feed/userId/userid endpoint: no measures taken to protect the website structure. Exploitation of this vulnerability allows a malicious actor to perform XSS attacks remotely...

CVE-2025-1322

The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 16.26.10 via the 'feed' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated...

WordPress plugin WP-Recall 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information...

CVE-2024-53693

An improper neutralization of CRLF sequences 'CRLF Injection' vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to modify application data. We have already fixed the...

QNAP Systems QTS和QNAP Systems QuTS hero 代码注入漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is an entry operating system.QNAP Systems QuTS hero is an operating system. A code injection vulnerability exists in QNAP Systems QTS prior to version 5.2.3.3006 build 20250108...

CVE-2025-2034

creationtimestamp| type| source ---|---|--- 2025-03-06 22:12:37+00:00| seen| https://t.me/cvedetector/19748 2025-08-18 13:31:23+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3 2025-08-19 02:47:43+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3...

CVE-2025-1957

creationtimestamp| type| source ---|---|--- 2025-03-04 22:33:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6448 2025-03-05 00:12:41+00:00| seen| https://t.me/cvedetector/19548 2025-08-18 18:31:00+00:00| seen| MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7...