CVE-2025-1372

A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dumpdatasection/printstringsection of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to b...

SUSE: Security Advisory (SUSE-SU-2024:2184-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-26767

creationtimestamp| type| source ---|---|--- 2025-02-16 23:14:15+00:00| seen| https://infosec.exchange/users/cve/statuses/114016102254909216 2025-02-16 23:16:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidegdc36b2p 2025-02-17 00:40:23+00:00| seen|...

CVE-2025-26766

creationtimestamp| type| source ---|---|--- 2025-02-16 23:14:14+00:00| seen| https://infosec.exchange/users/cve/statuses/114016102239466875 2025-02-16 23:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidegapxrx2n 2025-02-17 00:40:24+00:00| seen|...

CVE-2024-44044

creationtimestamp| type| source ---|---|--- 2025-02-16 22:24:45+00:00| seen| https://infosec.exchange/users/cve/statuses/114015907473400158 2025-02-16 22:29:10+00:00| seen| https://infosec.exchange/users/cve/statuses/114015925023573005 2025-02-16 23:15:26+00:00| seen|...

CVE-2025-22284

creationtimestamp| type| source ---|---|--- 2025-02-16 22:24:45+00:00| seen| https://infosec.exchange/users/cve/statuses/114015907488834842 2025-02-16 22:29:10+00:00| seen| https://infosec.exchange/users/cve/statuses/114015925039646704 2025-02-16 23:15:45+00:00| seen|...

CVE-2025-1338

creationtimestamp| type| source ---|---|--- 2025-02-16 11:05:51+00:00| seen| https://infosec.exchange/users/cve/statuses/114013238107332522 2025-02-16 11:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lic45e74nj2i 2025-02-16 12:30:15+00:00| seen|...

CVE-2025-1335

creationtimestamp| type| source ---|---|--- 2025-02-16 04:05:28+00:00| seen| https://infosec.exchange/users/cve/statuses/114011585123849118 2025-02-16 04:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3libeojv26j2h 2025-02-16 05:11:30+00:00|...

CVE-2025-26552

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in badrHan Naver Syndication V2 badr-naver-syndication allows Stored XSS.This issue affects Naver Syndication V2: from n/a through = 0.8.3...

CVE-2024-13500 WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter

The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 2.6.17 due to insufficient escaping on the user supplied...

CVE-2024-13439 Team – Team Members Showcase Plugin <= 4.4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The Team – Team Members Showcase Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the response function in all versions up to, and including, 4.4.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2025-22208

creationtimestamp| type| source ---|---|--- 2025-02-15 08:16:24+00:00| seen| https://infosec.exchange/users/cve/statuses/114006909533850420 2025-02-15 09:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li7ey2sdt42g 2025-02-15 10:11:05+00:00| seen|...

CVE-2025-22208 Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for Joomla

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands via the 'filteremail' parameter in the GDPR Erase Data Request search feature...

CVE-2024-4282

Brocade SANnav OVA before SANnav 2.3.1b enables SHA1 deprecated setting for SSH for port 22...

CVE-2024-10405

creationtimestamp| type| source ---|---|--- 2025-02-14 23:27:29+00:00| seen| https://infosec.exchange/users/cve/statuses/114004829759031436 2025-02-15 00:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li6gsve2gt2y 2025-02-15 01:10:33+00:00| seen|...

CVE-2025-21401

creationtimestamp| type| source ---|---|--- 2025-02-14 23:18:20+00:00| seen| https://infosec.exchange/users/cve/statuses/114004793742751259 2025-02-15 00:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li6gtmux7l2y 2025-02-15 01:10:26+00:00| seen|...

CVE-2024-21859

Improper buffer restrictions in the UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-25288 @octokit/plugin-paginate-rest has a Regular Expression in iterator that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

@octokit/plugin-paginate-rest is the Octokit plugin to paginate REST API endpoint responses. For versions starting in 1.0.0 and prior to 11.4.1 of the npm package @octokit/plugin-paginate-rest, when calling octokit.paginate.iterator, a specially crafted octokit instance—particularly with a...

GHSA-M238-FMCW-WH58

creationtimestamp| type| source ---|---|--- 2025-02-14 19:28:53+00:00| seen| https://infosec.exchange/users/cve/statuses/114003891483235545...

CVE-2025-25296

creationtimestamp| type| source ---|---|--- 2025-02-14 19:28:52+00:00| seen| https://infosec.exchange/users/cve/statuses/114003891448459556 2025-02-14 20:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5zfwrfyt2f 2025-02-14 22:50:13+00:00| seen|...