9710 matches found
CVE-2025-27810
creationtimestamp| type| source ---|---|--- 2025-03-25 08:49:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va26o322s 2025-03-25 09:27:33+00:00| seen| https://t.me/cvedetector/21058...
CVE-2024-13122
creationtimestamp| type| source ---|---|--- 2025-03-25 06:23:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8606 2025-03-25 08:49:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va2c76z24 2025-03-25 09:27:48+00:00| seen| https://t.me/cvedetector/21070...
CVE-2024-12769 Simple Banner < 3.0.4 - Admin+ Stored XSS
The Simple Banner WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2025-2765
creationtimestamp| type| source ---|---|--- 2025-03-25 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-177/ 2025-04-23 20:32:35+00:00| seen| Telegram/Eg-knjjPTR9ocTVizjx2pI3zFSlAWu4SgE31pSS6iQco10 2025-04-23 21:10:30+00:00| seen| https://t.me/cvedetector/23609...
CVE-2025-2720
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: According to the code maintainer the call of the POC is invalid because the buffer pointed to by "data...
CVE-2025-2755
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as critical. Affected by this issue is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument...
CVE-2025-2752
A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function fastatorealmove in the library include/assimp/fastatof.h of the component CSM File Handler. The manipulation leads to out-of-bounds read. The attack may be initiated...
CVE-2025-30741
Pixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewhere in the Fediverse, if they otherwise have any followers from a Pixelfed instance...
CVE-2025-27836
Artifex Ghostscript versions prior to 10.05.0 are vulnerable to a Print buffer overflow in the BJ10V device, specifically located in contrib/japanese/gdev10v.c . This issue allows for potential exploitation via network vectors with low complexity and no required privileges, potentially leading to...
CVE-2025-2708
creationtimestamp| type| source ---|---|--- 2025-03-24 20:23:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8524 2025-03-24 22:35:04+00:00| seen| https://t.me/cvedetector/20991 2025-03-24 22:39:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll5t67j2p...
CVE-2025-29778
Kyverno (policy engine for cloud-native platforms) contains a vulnerability prior to version 1.14.0-alpha.1 where artifact verification in keyless mode ignores subjectRegExp and IssuerRegExp, allowing deployment of Kubernetes resources signed with an unexpected certificate and potentially full cl...
CVE-2025-30558
CVE-2025-30558 : A CSRF flaw in the WordPress plugin ANAC XML Render (vendor: EnzoCostantini55) could enable a stored XSS. Affected versions are listed as
CVE-2025-30556 WordPress Fix Rss Feeds plugin <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in flyaga Fix Rss Feeds allows Cross Site Request Forgery. This issue affects Fix Rss Feeds: from n/a through 3.1...
CVE-2025-30525
CVE-2025-30525 describes an SQL injection in the WP Profitshare plugin for WordPress. Public sources in Connected documents indicate the vulnerability affects WP Profitshare up to version 1.4.9 and is exploitable without authentication for some access levels (per the Wordfence vulnerability entry...
CVE-2025-0835
creationtimestamp| type| source ---|---|--- 2025-03-24 12:34:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll4rdgyi2d2m 2025-03-24 14:13:10+00:00| seen| https://t.me/cvedetector/20951...
CVE-2025-2688
creationtimestamp| type| source ---|---|--- 2025-03-24 10:02:24+00:00| seen| https://t.me/cvedetector/20947 2025-03-24 10:34:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll4kmp3jyo2l...
CVE-2025-2689
creationtimestamp| type| source ---|---|--- 2025-03-24 10:02:23+00:00| seen| https://t.me/cvedetector/20946 2025-03-24 10:34:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll4kmp6ucp24 2025-03-24 18:48:16+00:00| seen|...
CVE-2025-2680
creationtimestamp| type| source ---|---|--- 2025-03-24 04:23:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll3vwkpm7o2m 2025-03-24 04:30:46+00:00| seen| Telegram/1ji7ORYlPsQ67IthejQ--Bj4WTA7locBXszKDrQl4LKOZmY 2025-03-24 05:51:34+00:00| seen| https://t.me/cvedetector/20934...
CVE-2025-30472
A flaw was found in Corosync. In affected versions, a stack-based buffer overflow may be triggered via a large UDP packet in configurations where encryption is disabled or if an attacker knows the encryption key. This issue can lead to an application crash or other undefined behavior. Mitigation ...
