CVE-2024-38524

creationtimestamp| type| source ---|---|--- 2025-06-10 14:14:08+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jm79-7xhw-6f6f...

CVE-2025-49007

Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.16, there is a denial of service vulnerability in the Content-Disposition parsing component of Rack. This is very similar to the previous security issue CVE-2022-44571. Carefully crafted input can caus...

GHSA-6C48-67XX-VQGC

creationtimestamp| type| source ---|---|--- 2025-05-22 21:38:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17361...

CVE-2021-37700

@github/paste-markdown is an npm package for pasting markdown objects. A self Cross-Site Scripting vulnerability exists in the @github/paste-markdown before version 0.3.4. If the clipboard data contains the string , a div is dynamically created, and the clipboard content is copied into its...

CVE-2021-21399

Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you must use a username that is not part of the site to bypass the auth checks. For more details and...

GHSA-RVHC-RCH9-J943

creationtimestamp| type| source ---|---|--- 2025-05-21 14:43:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17120...

CVE-2025-47775

creationtimestamp| type| source ---|---|--- 2025-05-14 15:08:16+00:00| published-proof-of-concept| https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3...

CVE-2025-47280

Umbrao Forms HTML injection : The Send email workflow in Umbraco Forms (versions 7.x through just before 13.4.2 and 15.1.2) does not HTML-encode user-provided field values, allowing potential email spoofing or bypass of security checks. Affected forms can patch by updating to 13.4.2 or 15.1.2, or...

Malicious code in ascpc-npm-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dfc46bf902782d78e5120173d965b16776b6f7d52ac27e8b6a05eb734290dce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-892P-PQRR-HXQR

creationtimestamp| type| source ---|---|--- 2025-05-02 17:16:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14526...

GHSA-7MPF-6GG2-2FJP

creationtimestamp| type| source ---|---|--- 2025-04-30 18:14:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14112...

GHSA-CV2P-32V3-VHWQ

creationtimestamp| type| source ---|---|--- 2025-04-23 17:04:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13077...

CVE-2025-46567

creationtimestamp| type| source ---|---|--- 2025-04-23 08:41:15+00:00| published-proof-of-concept| https://github.com/hiyouga/LlamaFactory/security/advisories/GHSA-f2f7-gj54-6vpv...

GHSA-5V2H-R2CX-5XGJ

creationtimestamp| type| source ---|---|--- 2025-04-22 19:03:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12954...

GHSA-H5G4-PPWX-48Q2

creationtimestamp| type| source ---|---|--- 2025-04-22 18:03:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12926...

GHSA-8C28-5MP7-V24H

creationtimestamp| type| source ---|---|--- 2025-04-21 15:02:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12668...

GHSA-H4Q8-96P6-JCGR

creationtimestamp| type| source ---|---|--- 2025-04-16 14:56:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12060...

Malicious code in lme4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d886ca0d77375a13d7b0c7d522f2dae6e996f8d069f1337810a23c86e040412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-58H4-9M7M-J9M4

creationtimestamp| type| source ---|---|--- 2025-04-08 13:46:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10903...

CVE-2025-28269

creationtimestamp| type| source ---|---|--- 2025-04-06 18:13:23+00:00| published-proof-of-concept| https://github.com/rrainn/js-object-utilities/security/advisories/GHSA-hpqf-m68j-2pfx...