EUVD-2026-4570

The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.20. This is due to missing nonce validation on the SurveyJSAddSurvey AJAX action. This makes it possible for unauthenticated attackers to...

GHSA-29CQ-5W36-X7W3

creationtimestamp| type| source ---|---|--- 2025-07-17 18:42:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114870042350039767...

CVE-2025-4539

creationtimestamp| type| source ---|---|--- 2025-05-11 11:28:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15927 2025-05-11 12:15:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lovgocqkl7g2 2025-05-11...

CVE-2025-43952

creationtimestamp| type| source ---|---|--- 2025-04-22 21:04:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12983 2025-04-22 21:09:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngln2xqbv2d 2025-04-22 22:35:30+00:00| seen|...

CVE-2025-28355

creationtimestamp| type| source ---|---|--- 2025-04-18 17:00:10+00:00| published-proof-of-concept| Telegram/025r9Ac4mA6AzmYH4V5jxzygPRuLIkjd6NMrYR-gf6fiv4 2025-04-18 18:58:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12522 2025-04-18 19:35:23+00:00| seen|...

CVE-2025-1782

creationtimestamp| type| source ---|---|--- 2025-04-14 18:54:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11676 2025-04-14 19:46:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114338036274546789 2025-04-14 20:18:49+00:00| seen|...

CVE-2025-0832

creationtimestamp| type| source ---|---|--- 2025-03-17 15:49:01+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114178558606090254 2025-03-17 17:00:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lklmxdlhld2k 2025-03-17 17:28:22+00:00| seen|...

CVE-2025-25329

creationtimestamp| type| source ---|---|--- 2025-02-27 16:25:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5701 2025-02-27 19:15:37+00:00| seen| https://t.me/cvedetector/19048 2025-03-02 11:45:37+00:00| seen| Telegram/DGO5ttcFro3pNtERhN9Oi3VFaiahHsoIvwwAF1CirDt60tBS...

GHSA-X8CX-3HQ5-4WJ9

creationtimestamp| type| source ---|---|--- 2025-02-13 21:53:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113998796668998455 2025-02-13 23:11:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4356...

CVE-2025-25126

creationtimestamp| type| source ---|---|--- 2025-02-07 10:17:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleoq6n4v2x 2025-02-07 12:15:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113962552562595031...

CVE-2024-13325

creationtimestamp| type| source ---|---|--- 2025-02-04 06:08:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113944121180981768 2025-02-04 06:13:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113944139648291437 2025-02-04 06:15:58+00:00| seen|...

CVE-2024-53683

creationtimestamp| type| source ---|---|--- 2025-01-17 16:48:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113844715420784953 2025-01-17 16:56:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2152 2025-01-17 17:15:57+00:00| seen|...

GHSA-XWX7-P63R-2RJ8

creationtimestamp| type| source ---|---|--- 2024-12-23 17:28:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113703315087550013...

CVE-2024-12344

creationtimestamp| type| source ---|---|--- 2024-12-08 23:09:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113619720536909057 2024-12-09 01:18:40+00:00| seen| https://t.me/cvedetector/12334 2025-04-18 21:02:14+00:00| seen|...

PT-2024-18664 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is being actively exploited. No further details are available about the nature of the issue, affected devices, or real-world incidents. Recommendations: At the moment, there i...

PT-2024-37247

Name of the Vulnerable Software and Affected Versions: bap broadcast assistant affected versions not specified Description: The issue concerns unchecked user input in the bap broadcast assistant, which poses a risk. There is no information provided about the estimated number of potentially affect...

PT-2024-37121

Name of the Vulnerable Software and Affected Versions: BT affected versions not specified Description: The BT encryption procedure host has a vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents...

PT-2024-37981 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A threat actor, referred to as Krakozhia APT1337, has been observed leveraging a specific issue. The estimated number of potentially affected...

GHSA-JW7R-RXFF-GV24

creationtimestamp| type| source ---|---|--- 2024-02-27 23:07:06+00:00| seen| https://t.me/ctinow/194922 2025-06-16 20:20:39+00:00| seen| https://gist.github.com/safer-bot/8eded6b925c160dc08c1b28d51d6c0c3 2025-06-17 01:00:32+00:00| seen|...

CVE-2024-1550

creationtimestamp| type| source ---|---|--- 2024-02-20 15:27:02+00:00| seen| https://t.me/ctinow/188608 2024-02-21 17:52:04+00:00| seen| https://t.me/ctinow/189853 2024-03-08 15:22:07+00:00| seen| https://t.me/ctinow/203377...