CVE-2025-26532

creationtimestamp| type| source ---|---|--- 2025-02-24 20:22:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5217 2025-02-24 22:08:30+00:00| seen| https://t.me/cvedetector/18821 2025-02-24 23:02:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lixhf4js4o2r...

CVE-2025-26525

creationtimestamp| type| source ---|---|--- 2025-02-24 20:22:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5214 2025-02-24 21:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114061063378286532 2025-02-24 22:08:31+00:00| seen| https://t.me/cvedetector/18822 2025-02-...

CVE-2025-26533 SQL injection risk in course search module list filter

An SQL injection risk was identified in the module list filter within course search...

CVE-2025-26528

CVE-2025-26528 relates to Moodle’s drag-and-drop onto image (ddimageortext) question type. Multiple connected sources confirm a stored XSS risk that required additional sanitizing in this question type. The CVE description notes the need for sanitization to prevent stored XSS, and OSV/GHSA entrie...

CVE-2025-27332

creationtimestamp| type| source ---|---|--- 2025-02-24 18:47:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4mshgt23...

CVE-2025-27336

creationtimestamp| type| source ---|---|--- 2025-02-24 17:57:51+00:00| seen| https://t.me/cvedetector/18808 2025-02-24 18:47:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4m45pr2s 2025-08-22 17:25:06+00:00| seen| MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7...

CVE-2025-27339

creationtimestamp| type| source ---|---|--- 2025-02-24 17:57:51+00:00| seen| https://t.me/cvedetector/18809 2025-02-24 18:47:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4mp2cm2g 2025-08-22 17:25:06+00:00| seen| MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7...

CVE-2025-22495

creationtimestamp| type| source ---|---|--- 2025-02-24 17:33:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114060062653263406 2025-02-24 19:32:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n5wnzw2s 2025-02-24 19:48:27+00:00| seen|...

CVE-2025-1686

creationtimestamp| type| source ---|---|--- 2025-02-24 16:42:07+00:00| published-proof-of-concept| https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-p75g-cxfj-7wrx 2025-02-27 05:25:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5648 2025-02-27...

CVE-2025-27317

CVE-2025-27317 concerns the WordPress plugin IT-RAYS RAYS Grid, reported as a CSRF vulnerability affecting RAYS Grid versions up to 1.3.1. The record indicates a CSRF flaw with CVSS v3.1 base score 4.3 (Medium) and a network attack vector with user interaction required; the underlying impact is l...

Advisory ROSA-SA-2025-2721

Software: zlib 1.2.11 OS: ROSA Virtualization 3.0 packageevrstring: zlib-1.2.11 CVE-ID: CVE-2022-37434 BDU-ID: 2022-05325 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the inflate.c component of the zlib library is related to an operation exceeding buffer boundaries in memory. Exploitation of...

CVE-2025-20051

Mattermost versions 10.4.x = 10.4.1, 9.11.x = 9.11.7, 10.3.x = 10.3.2, 10.2.x = 10.2.2 fail to properly validate input when patching and duplicating a board, which allows a user to read any arbitrary file on the system via duplicating a specially crafted block in Boards...

CVE-2025-1618

creationtimestamp| type| source ---|---|--- 2025-02-24 05:21:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5127 2025-02-24 08:09:18+00:00| seen| https://t.me/cvedetector/18784 2025-02-24 08:37:37+00:00| seen|...

[SECURITY] [DLA 4066-1] fort-validator security update

Debian LTS Advisory DLA-4066-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert February 24, 2025 https://wiki.debian.org/LTS Package : fort-validator Version : 1.5.3-1deb11u2 CVE ID : CVE-2024-45234 CVE-2024-45235 CVE-2024-45236 CVE-2024-45237 CVE-2024-45238...

CVE-2025-1589

creationtimestamp| type| source ---|---|--- 2025-02-23 18:21:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5098 2025-02-23 20:27:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liuob4bd5b23 2025-02-23 21:53:34+00:00| seen| https://t.me/cvedetector/18754...

CVE-2025-1580

creationtimestamp| type| source ---|---|--- 2025-02-23 10:21:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5088 2025-02-23 13:32:29+00:00| seen| https://t.me/cvedetector/18743 2025-02-23 14:17:16+00:00| seen|...

CVE-2025-1578 PHPGurukul/Campcodes Online Shopping Portal search-result.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul/Campcodes Online Shopping Portal 2.1. This affects an unknown part of the file /search-result.php. The manipulation of the argument Product leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-13728

creationtimestamp| type| source ---|---|--- 2025-02-23 06:22:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5083 2025-02-23 09:22:05+00:00| seen| https://t.me/cvedetector/18739 2025-02-23 10:17:00+00:00| seen|...

CVE-2025-26776

creationtimestamp| type| source ---|---|--- 2025-02-22 16:25:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5032 2025-02-22 17:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114048796379381479 2025-02-22 19:10:09+00:00| seen|...

CVE-2025-26776

CVE-2025-26776 affects WordPress Chaty Pro plugin versions n/a through 3.3.3. The root cause is an Unrestricted Upload of File with Dangerous Type, enabling an attacker to upload a Web Shell to the web server. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) indicates a remote, unauthent...