CVE-2024-4028

CVE-2024-4028 affects Keycloak. The issue allows a privileged attacker to supply a malicious payload as a permission during admin-console item (Resource/Permissions) creation, resulting in stored XSS. Description and related entries consistently describe this XSS path; exploitation details are no...

CVE-2025-25305

creationtimestamp| type| source ---|---|--- 2025-02-18 15:20:00+00:00| published-proof-of-concept| https://github.com/home-assistant/core/security/advisories/GHSA-m3pm-rpgg-5wj6 2025-02-18 19:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihxx2p4ei2k 2025-02-18...

CVE-2024-13689

The Uncode Core plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.9.1.6. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

CVE-2025-0864

creationtimestamp| type| source ---|---|--- 2025-02-18 08:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligt2bcuji2y 2025-02-18 08:41:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4763 2025-02-18 10:57:38+00:00| seen| https://t.me/cvedetector/18303...

CVE-2025-0422

creationtimestamp| type| source ---|---|--- 2025-02-18 08:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligszy6rzv23 2025-02-18 08:41:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4761 2025-02-18 10:00:46+00:00| seen|...

CVE-2024-13795

creationtimestamp| type| source ---|---|--- 2025-02-18 08:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligszvlf7d27 2025-02-18 08:41:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4764 2025-02-18 10:57:44+00:00| seen| https://t.me/cvedetector/18306...

CVE-2024-13438

creationtimestamp| type| source ---|---|--- 2025-02-18 06:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligmcvmuug2h 2025-02-18 08:00:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4753 2025-02-18 09:16:48+00:00| seen|...

CVE-2024-13622

creationtimestamp| type| source ---|---|--- 2025-02-18 05:16:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligizthwnk2y 2025-02-18 07:56:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4737 2025-02-18 09:17:00+00:00| seen| https://t.me/cvedetector/18288...

CVE-2024-13595

creationtimestamp| type| source ---|---|--- 2025-02-18 05:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiznny2q27 2025-02-18 09:17:05+00:00| seen| https://t.me/cvedetector/18291...

CVE-2024-13578

creationtimestamp| type| source ---|---|--- 2025-02-18 05:16:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiz5ladv2g 2025-02-18 11:39:00+00:00| seen| Telegram/Z8lXXuRXY2uE49CtRfYdvxOnLAQcxAUnjWKsEG3YJrAh5N...

CVE-2025-1390

The PAM module pamcap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to...

CVE-2025-25055

creationtimestamp| type| source ---|---|--- 2025-02-18 00:17:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lifybytrn423 2025-02-18 02:35:20+00:00| seen| https://t.me/cvedetector/18266 2025-02-18 03:16:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4726...

Ubuntu: Security Advisory (USN-7269-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-25469

CVE-2025-25469 is a memory-leak vulnerability in FFmpeg’s libavutil/iamf.c affecting FFmpeg git-master before commit d5873b. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) yields a base score of 6.5 (Medium) with network attack vector, no user interaction, and no exploitation in public...

CVE-2024-13837

creationtimestamp| type| source ---|---|--- 2025-02-17 19:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lifhgskvf72y 2025-02-17 21:25:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lifopbzyog2v...

CVE-2025-1391

creationtimestamp| type| source ---|---|--- 2025-02-17 14:09:17+00:00| seen| https://infosec.exchange/users/cve/statuses/114019621749555941 2025-02-17 14:15:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liewnsiuqu2o 2025-02-17 15:15:19+00:00| seen|...

CVE-2025-1380

creationtimestamp| type| source ---|---|--- 2025-02-17 07:07:16+00:00| seen| https://infosec.exchange/users/cve/statuses/114017962303220578 2025-02-17 07:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lie777okip2g 2025-02-17 09:06:02+00:00| seen|...

CVE-2024-13726

CVE-2024-13726 affects the WordPress plugin Themes Coder Ecommerce

CVE-2025-1376

CVE-2025-1376 affects GNU elfutils 0.192, specifically the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip . The manipulation leads to a denial of service and requires a local attack. The exploitation difficulty is described as high, and the exploit has been disc...

CVE-2025-1389

creationtimestamp| type| source ---|---|--- 2025-02-17 04:18:15+00:00| seen| https://infosec.exchange/users/cve/statuses/114017297678557169 2025-02-17 05:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidyjfng3u2o 2025-02-17 05:31:16+00:00| seen|...