CVE-2024-53943

CVE-2024-53943 affects NRadio N8-180 NROS-1.9.2.n3.c5. The endpoint "/cgi-bin/luci/nradio/basic/radio" is vulnerable to XSS via the 2.4 GHz and 5 GHz name parameters, allowing an attacker to inject JavaScript into the SSID field that runs in the admin’s browser when they log in. Documented impact...

CVE-2025-0967

creationtimestamp| type| source ---|---|--- 2025-02-02 16:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh7gf2hujy2r 2025-02-02 19:13:53+00:00| seen| https://t.me/cvedetector/17029 2025-02-02 19:53:05+00:00| seen|...

CVE-2025-0949

creationtimestamp| type| source ---|---|--- 2025-02-01 19:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh57xyphjk2i 2025-02-01 21:26:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3780 2025-02-01 21:42:58+00:00| seen|...

CVE-2025-0944

creationtimestamp| type| source ---|---|--- 2025-02-01 13:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh4lufjtfq2i 2025-02-01 15:25:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3765 2025-02-01 15:37:40+00:00| seen|...

CVE-2024-12825

creationtimestamp| type| source ---|---|--- 2025-02-01 08:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh433nwb6i2w 2025-02-01 09:26:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3748 2025-02-01 09:47:57+00:00| seen| https://t.me/cvedetector/17012...

CVE-2024-13371

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized arbitrary emails sending due to a missing capability check on the sendEmailToJobSeeker function in all versions up to, and including, 2.2.6. This makes it possible...

CVE-2024-12041

creationtimestamp| type| source ---|---|--- 2025-02-01 06:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3ufoiklz2i 2025-02-01 07:16:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3721 2025-02-01 07:25:46+00:00| seen|...

BELL-CVE-2025-21669

Bulletin has no description...

CVE-2024-57433

creationtimestamp| type| source ---|---|--- 2025-01-31 22:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2zl535rs2t 2025-01-31 23:24:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3692 2025-02-01 01:16:23+00:00|...

CGA-P73V-QFXW-P8HG

Bulletin has no description...

CVE-2024-49339

creationtimestamp| type| source ---|---|--- 2025-01-31 17:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2isifgr42f 2025-01-31 19:34:15+00:00| seen| https://t.me/cvedetector/16959 2025-01-31 21:35:29+00:00| seen|...

CVE-2025-23215

PMD is an extensible multilanguage static code analyzer. The passphrase for the PMD and PMD Designer release signing keys are included in jar published to Maven Central. The private key itself is not known to have been compromised itself, but given its passphrase is, it must also be considered...

CGA-7JQ3-HH6X-J4V2

Bulletin has no description...

CVE-2025-0930 Reflected Cross-Site Scripting (XSS) vulnerability in TeamCal Neo

Reflected Cross-Site Scripting XSS in TeamCal Neo, version 3.8.2. This allows an attacker to execute malicious JavaScript code, after injecting code via the ‘abs’ parameter in ‘/teamcal/src/index.php’...

CVE-2025-24831

creationtimestamp| type| source ---|---|--- 2025-01-31 13:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh23fzn2fq2f 2025-01-31 15:22:26+00:00| seen| https://t.me/cvedetector/16932 2025-02-01 17:28:09+00:00| seen|...

CVE-2025-21674

creationtimestamp| type| source ---|---|--- 2025-01-31 12:16:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzy3lf2pe2e 2025-01-31 15:22:42+00:00| seen| https://t.me/cvedetector/16945...

CVE-2025-21680

In the Linux kernel, the following vulnerability has been resolved: pktgen: Avoid out-of-bounds access in getimixentries Passing a sufficient amount of imix entries leads to invalid access to the pktdev-imixentries array because of the incorrect boundary check. UBSAN: array-index-out-of-bounds in...

CVE-2025-21665 filemap: avoid truncating 64-bit offset to 32 bits

In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folioseekholedata was inadvertently truncating a 64-bit value to 32 bits, leading to a possible infinite loop when writing to an xfs filesystem...

CGA-H4Q3-H4GW-X45X

Bulletin has no description...

CVE-2025-24535

creationtimestamp| type| source ---|---|--- 2025-01-31 09:16:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzo2dp2sd2w 2025-01-31 10:15:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3633 2025-01-31 11:11:53+00:00| seen| https://t.me/cvedetector/16924...