CVE-2024-55030

creationtimestamp| type| source ---|---|--- 2025-03-25 20:24:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8750 2025-03-25 23:40:51+00:00| seen| https://t.me/cvedetector/21133 2025-03-26 01:05:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llalqwzwx...

CVE-2024-31896

creationtimestamp| type| source ---|---|--- 2025-03-25 19:24:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8735 2025-03-25 21:04:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lla6dgfnem26 2025-03-25 22:00:06+00:00| seen| https://t.me/cvedetector/21114...

CVE-2025-30567

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP01 WP01 wp01 allows Path Traversal.This issue affects WP01: from n/a through = 2.6.2...

CVE-2025-24514

A flaw was found in ingress-nginx https://github.com/kubernetes/ingress-nginx where the auth-url Ingress annotation can be used to inject configuration into nginx. This issue can lead to arbitrary code execution in the context of the ingress-nginx controller and disclosure of Secrets accessible t...

CVE-2025-2635

creationtimestamp| type| source ---|---|--- 2025-03-25 10:24:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8641 2025-03-25 10:54:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll747pobsg2w 2025-03-25 13:38:27+00:00| seen| https://t.me/cvedetector/21086...

CVE-2025-27810

creationtimestamp| type| source ---|---|--- 2025-03-25 08:49:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va26o322s 2025-03-25 09:27:33+00:00| seen| https://t.me/cvedetector/21058...

CVE-2024-13122

creationtimestamp| type| source ---|---|--- 2025-03-25 06:23:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8606 2025-03-25 08:49:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va2c76z24 2025-03-25 09:27:48+00:00| seen| https://t.me/cvedetector/21070...

CVE-2024-12769 Simple Banner < 3.0.4 - Admin+ Stored XSS

The Simple Banner WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2025-2765

creationtimestamp| type| source ---|---|--- 2025-03-25 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-177/ 2025-04-23 20:32:35+00:00| seen| Telegram/Eg-knjjPTR9ocTVizjx2pI3zFSlAWu4SgE31pSS6iQco10 2025-04-23 21:10:30+00:00| seen| https://t.me/cvedetector/23609...

CVE-2025-2720

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: According to the code maintainer the call of the POC is invalid because the buffer pointed to by "data...

CVE-2025-30741

Pixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewhere in the Fediverse, if they otherwise have any followers from a Pixelfed instance...

CVE-2025-2755

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as critical. Affected by this issue is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument...

CVE-2025-2752

A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function fastatorealmove in the library include/assimp/fastatof.h of the component CSM File Handler. The manipulation leads to out-of-bounds read. The attack may be initiated...

CVE-2025-27836

CVE-2025-27836 affects Ghostscript prior to 10.05.0, with a print buffer overflow in the BJ10V device (contrib/japanese/gdev10v.c). The issue is confirmed in multiple advisories, and a fix was deployed as part of ghostpdl-10.05.0. Connected documents indicate the vulnerability arises from imprope...

CVE-2025-2708

creationtimestamp| type| source ---|---|--- 2025-03-24 20:23:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8524 2025-03-24 22:35:04+00:00| seen| https://t.me/cvedetector/20991 2025-03-24 22:39:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll5t67j2p...

CVE-2025-29778

Kyverno (policy engine for cloud-native platforms) contains a vulnerability prior to version 1.14.0-alpha.1 where artifact verification in keyless mode ignores subjectRegExp and IssuerRegExp, allowing deployment of Kubernetes resources signed with an unexpected certificate and potentially full cl...

CVE-2025-30558

CVE-2025-30558 : A CSRF flaw in the WordPress plugin ANAC XML Render (vendor: EnzoCostantini55) could enable a stored XSS. Affected versions are listed as

CVE-2025-30556 WordPress Fix Rss Feeds plugin <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in flyaga Fix Rss Feeds allows Cross Site Request Forgery. This issue affects Fix Rss Feeds: from n/a through 3.1...

CVE-2025-30525

CVE-2025-30525 describes an SQL injection in the WP Profitshare plugin for WordPress. Public sources in Connected documents indicate the vulnerability affects WP Profitshare up to version 1.4.9 and is exploitable without authentication for some access levels (per the Wordfence vulnerability entry...

CVE-2025-0835

creationtimestamp| type| source ---|---|--- 2025-03-24 12:34:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll4rdgyi2d2m 2025-03-24 14:13:10+00:00| seen| https://t.me/cvedetector/20951...