CVE-2025-23634

creationtimestamp| type| source ---|---|--- 2025-01-23 16:16:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbrjwrc22j 2025-01-23 16:55:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lggdwe6kg52k 2025-01-23 18:19:03+00:00| seen|...

CVE-2025-23545

creationtimestamp| type| source ---|---|--- 2025-01-23 16:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbr5naun2c 2025-01-23 18:18:57+00:00| seen| https://t.me/cvedetector/16200...

CVE-2025-23540

creationtimestamp| type| source ---|---|--- 2025-01-23 15:30:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113878382152309201 2025-01-23 15:34:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113878400792489848 2025-01-23 16:16:13+00:00| seen|...

CVE-2024-45341

A flaw was found in the crypto/x509 package of the Golang standard library. A certificate with a URI, which has a IPv6 address with a zone ID, may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI; this...

CVE-2025-0648

CVE-2025-0648 affects M-Files Server prior to 25.1.14445.5 and prior to 24.8 LTS SR3. A highly privileged attacker can cause a denial of service by changing configuration, triggering an unexpected crash in the database driver. Remediation: upgrade to 25.1.14445.5 or newer, or to 24.8 LTS SR3 or n...

CVE-2024-42182

The CVE-2024-42182 entry concerns HCL BigFix Patch Download Plug-ins and an SSRF flaw that can cause the application to fetch files from an internally hosted server (localhost). The root cause is a server-side request forgery vulnerability in the plug-ins’ handling of local requests. Reported imp...

CVE-2024-56924

creationtimestamp| type| source ---|---|--- 2025-01-22 21:02:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2653 2025-01-22 21:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgebyxmka72j 2025-01-22 21:40:04+00:00| seen|...

CVE-2025-24398

Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 both inclusive allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins...

CVE-2025-23914 WordPress Muzaara Google Ads Report Plugin <= 3.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in muzaara Muzaara Google Ads Report muzaara-adwords-optimize-dashboard allows Object Injection.This issue affects Muzaara Google Ads Report: from n/a through = 3.1...

CVE-2025-23846

creationtimestamp| type| source ---|---|--- 2025-01-22 15:21:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo7hw2oo2r 2025-01-22 17:13:51+00:00| seen| https://t.me/cvedetector/16111...

CVE-2025-23605

creationtimestamp| type| source ---|---|--- 2025-01-22 15:19:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo4bk7ic2h...

CVE-2025-23602

creationtimestamp| type| source ---|---|--- 2025-01-22 15:19:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo3zord22t 2025-01-22 20:02:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2638...

CVE-2025-23475

creationtimestamp| type| source ---|---|--- 2025-01-22 15:18:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo24axcz2x 2025-01-22 18:02:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2597...

CVE-2023-37019

creationtimestamp| type| source ---|---|--- 2025-01-22 15:17:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdnymx4fg27...

CVE-2025-23610

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tehsmash Ultimate Events ultimate-events allows Reflected XSS.This issue affects Ultimate Events: from n/a through = 1.3.3...

CVE-2025-23602

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Europe Ecologie Les Verts EELV Newsletter eelv-newsletter allows Reflected XSS.This issue affects EELV Newsletter: from n/a through = 4.8.2...

CVE-2023-37002

Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an E-RAB Modification Indication message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...

CVE-2025-23949

CVE-2025-23949 affects the WordPress plugin “Improved Sale Badges – Free Version” and is described as an "Improp er Control of Filename for Include/Require Statement" vulnerability (PHP Remote File Inclusion) that allows local file inclusion. The affected range is from n/a through 1.0.1. The Red ...

CVE-2025-23697 WordPress Podčlánková inzerce plugin <= 2.4.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webdeal Podčlánková inzerce podclankova-inzerce allows Reflected XSS.This issue affects Podčlánková inzerce: from n/a through = 2.4.0...

CVE-2025-23681

CVE-2025-23681 describes a Reflected XSS in the WordPress plugin REDIRECTION PLUS (jannatqualitybacklinks.com) via improper input neutralization during web page generation. Affected versions are REDIRECTION PLUS up to 2.0.0 (from n/a through 2.0.0). Exploitation would involve injecting script tha...