CVE-2025-0239

creationtimestamp| type| source ---|---|--- 2025-01-07 16:16:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62d36mc22i...

CVE-2025-0237

creationtimestamp| type| source ---|---|--- 2025-01-07 16:16:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62cweg3w22...

CVE-2024-55008

JATOS 3.9.4 contains a denial-of-service DoS vulnerability in the authentication system, where an attacker can prevent legitimate users from accessing their accounts by repeatedly sending multiple failed login attempts. Specifically, by submitting 3 incorrect login attempts every minute, the...

CVE-2024-46242

creationtimestamp| type| source ---|---|--- 2025-01-07 15:37:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/432 2025-01-07 16:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62byhrht2k...

CVE-2025-0295

creationtimestamp| type| source ---|---|--- 2025-01-07 15:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5wwk64ko25 2025-01-07 15:38:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/440 2025-01-07 15:57:42+00:00| seen|...

CVE-2025-22339

creationtimestamp| type| source ---|---|--- 2025-01-07 11:18:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jnbo3zi2l 2025-01-07 13:02:14+00:00| seen| https://t.me/cvedetector/14521 2025-01-07 14:55:27+00:00| seen|...

CVE-2025-22309

creationtimestamp| type| source ---|---|--- 2025-01-07 11:17:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jm5fbh522 2025-01-07 11:17:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jm5fbh522 2025-01-07 13:55:22+00:00| seen|...

CVE-2025-22299

creationtimestamp| type| source ---|---|--- 2025-01-07 11:17:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jljbgih2m 2025-01-07 11:17:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jljbgih2m 2025-01-07 13:25:20+00:00| seen|...

CVE-2024-56297

creationtimestamp| type| source ---|---|--- 2025-01-07 11:16:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jkwgesw2c 2025-01-07 11:16:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jkwgesw2c 2025-01-07 12:55:18+00:00| seen|...

CVE-2024-56291

creationtimestamp| type| source ---|---|--- 2025-01-07 11:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jkkr7bg2i 2025-01-07 11:48:26+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113786913132201945 2025-01-07 11:48:27+00:00| seen|...

CVE-2024-56283

creationtimestamp| type| source ---|---|--- 2025-01-07 11:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jjx2h6a2l 2025-01-07 11:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jjx2h6a2l 2025-01-07 11:39:50+00:00|...

CVE-2024-56299

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pektsekye Notify Odoo notify-odoo allows Stored XSS.This issue affects Notify Odoo: from n/a through = 1.0.0...

CVE-2024-49649

creationtimestamp| type| source ---|---|--- 2025-01-07 11:10:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113786762719044734 2025-01-07 11:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jitrzyz22 2025-01-07 11:38:21+00:00| seen|...

CVE-2024-51715 WordPress ClickWhale plugin <= 2.4.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...

CVE-2025-22326 WordPress 5centsCDN – WordPress CDN Plugin plugin <= 24.8.16 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 5centsCDN 5centsCDN allows Reflected XSS.This issue affects 5centsCDN: from n/a through 24.8.16...

CVE-2025-22351 WordPress Contact Form 7 Database – CFDB7 plugin <= 1.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PenguinArts Contact Form 7 Database – CFDB7 allows SQL Injection.This issue affects Contact Form 7 Database – CFDB7: from n/a through 1.0.0...

CVE-2024-12152

creationtimestamp| type| source ---|---|--- 2025-01-07 09:31:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113786373317643206 2025-01-07 09:36:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/384 2025-01-07 10:15:31+00:00| seen|...

CVE-2024-9354

creationtimestamp| type| source ---|---|--- 2025-01-07 07:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544johmk2c 2025-01-07 07:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544johmk2c 2025-01-07 07:16:29+00:00| seen|...

CVE-2024-10102

creationtimestamp| type| source ---|---|--- 2025-01-07 06:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yqbaytp25 2025-01-07 06:33:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpmy7nq2y 2025-01-07 06:37:03+00:00| seen|...

CVE-2024-12261

The SmartEmailing.cz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'se-lists-updated' parameter in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...