CVE-2025-21498

CVE-2025-21498 affects Oracle HTTP Server (Oracle Fusion Middleware Core) with 12.2.1.4.0. The vulnerability allows an unauthenticated attacker over HTTP to read a subset of Oracle HTTP Server data. CVSS 3.1 base score is 5.3 (Confidentiality only), with network attack vector and no user interact...

CVE-2025-21497

The CVE-2025-21497 affects Oracle MySQL Server (InnoDB). Affected: 8.0.40 and prior, 8.4.3 and prior, 9.1.0 and prior. An attacker with network access and high privileges can cause a hang or crash (DoS) and may perform unauthorized updates/inserts/deletes on MySQL data. CVSS v3.1 base score 5.5 (...

CVE-2025-21495

...

CVE-2025-21493

...

CVE-2025-21494

...

CVE-2025-21490

...

CVE-2025-24457

creationtimestamp| type| source ---|---|--- 2025-01-21 18:14:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113867704426950328 2025-01-21 18:16:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbhkiblrd27 2025-01-21 20:19:09+00:00| seen|...

CVE-2024-45479

creationtimestamp| type| source ---|---|--- 2025-01-21 18:02:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lgbgr7uy2j27 2025-01-21 22:01:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2498 2025-01-21 22:15:52+00:00| seen|...

CVE-2025-24458

creationtimestamp| type| source ---|---|--- 2025-01-21 18:01:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2448 2025-01-21 18:14:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113867704440870129 2025-01-21 18:16:44+00:00| seen|...

CVE-2025-24461

creationtimestamp| type| source ---|---|--- 2025-01-21 18:01:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2445 2025-01-21 18:16:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbhksg5442t 2025-01-21 18:29:44+00:00| seen|...

CVE-2025-23489

creationtimestamp| type| source ---|---|--- 2025-01-21 17:59:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113867645352084529 2025-01-21 18:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbhjsorjv2c 2025-01-21 19:01:56+00:00|...

CVE-2025-24457

In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs...

CVE-2024-56990

creationtimestamp| type| source ---|---|--- 2025-01-21 15:59:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113867171902509497 2025-01-21 16:00:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2416 2025-01-21 16:15:57+00:00| seen|...

CVE-2025-23998

creationtimestamp| type| source ---|---|--- 2025-01-21 14:17:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgb26er36x2s 2025-01-21 14:39:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgb3g6xzz52b 2025-01-21 16:07:46+00:00| seen|...

CVE-2025-23997

creationtimestamp| type| source ---|---|--- 2025-01-21 14:17:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgb26ce4mb2h 2025-01-21 14:39:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgb3g7ur6i2g 2025-01-21 16:07:46+00:00| seen|...

CVE-2025-22825

creationtimestamp| type| source ---|---|--- 2025-01-21 14:17:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgb26a75ou2j 2025-01-21 14:39:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgb3ga56bt2k 2025-01-21 16:07:45+00:00| seen|...

CVE-2025-22719

creationtimestamp| type| source ---|---|--- 2025-01-21 14:16:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgb25njvtb2t 2025-01-21 16:08:01+00:00| seen| https://t.me/cvedetector/15965...

AI tool GeoSpy analyzes images and identifies locations in seconds

It's just become even more important to be conscious about the pictures we post online. GeoSpy is an Artificial Intelligence AI supported tool that can derive a person’s location by analyzing features in a photo like vegetation, buildings, and other landmarks. And it can do so in seconds based on...

CVE-2025-22711 WordPress Image Source Control Lite Plugin <= 2.29.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Thomas Maier Image Source Control image-source-control-isc allows Reflected XSS.This issue affects Image Source Control: from n/a through = 2.29.0...

CVE-2025-21660

creationtimestamp| type| source ---|---|--- 2025-01-21 13:13:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113866519156146659 2025-01-21 13:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawr6msbs2p 2025-01-21 13:39:37+00:00| seen|...