Information Exposure

Overview agpt is an An open-source attempt to make GPT-4 autonomous Affected versions of this package are vulnerable to Information Exposure due to missing access controls in the WebSocket API. Node execution updates were sent to any subscriber using a valid graphid and graphversion, allowing...

CVE-2025-3064

The WPFront User Role Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.1. This is due to missing or incorrect nonce validation on the whitelistoptions function. This makes it possible for unauthenticated attackers to update the...

CVE-2025-3064

CVE-2025-3064 : WordPress plugin WPFront User Role Editor (affected versions up to 4.2.1) is vulnerable to Cross-Site Request Forgery due to missing/incorrect nonce validation in whitelist_options(). This allows unauthenticated attackers to update the default role option, enabling privilege escal...

CVE-2025-3064 WPFront User Role Editor <= 4.2.1 - Cross-Site Request Forgery to Privilege Escalation via whitelist_options Function

The WPFront User Role Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.1. This is due to missing or incorrect nonce validation on the whitelistoptions function. This makes it possible for unauthenticated attackers to update the...

PT-2025-15409 · Wpfront · Wpfront User Role Editor

Name of the Vulnerable Software and Affected Versions: WPFront User Role Editor versions up to 4.2.1 Description: The issue is related to Cross-Site Request Forgery, caused by missing or incorrect nonce validation in the whitelist options function. This allows unauthenticated attackers to update...

CVE-2025-0415

creationtimestamp| type| source ---|---|--- 2025-04-02 06:34:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10031 2025-04-02 07:40:15+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llsv3tsldc2p 2025-04-02 09:01:02+00:00| seen|...

CVE-2025-30672

creationtimestamp| type| source ---|---|--- 2025-04-01 02:32:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9816 2025-04-01 02:32:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9817 2025-04-01 02:32:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9818 2025-04-01 05:15:40+00:00...

CVE-2025-30456

creationtimestamp| type| source ---|---|--- 2025-03-31 18:15:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114258407899763287 2025-03-31 18:15:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114258407899763287 2025-03-31 23:15:52+00:00| seen|...

CVE-2025-30371

CVE-2025-30371 affects Metabase (self-hosted) prior to versions v0.52.16.4, v1.52.16.4, v0.53.8, and v1.53.8. The issue is a circumvention of local link access protection in the GeoJson endpoint, potentially impacting deployments where Metabase is colocated with other unsecured resources. Remedia...

CVE-2025-24383

creationtimestamp| type| source ---|---|--- 2025-03-28 02:28:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9261 2025-03-28 04:03:36+00:00| seen| Telegram/HLtrfGg4M1aUeJImJnceuXbeT8M976JM0quDSG2ytouQns 2025-03-28 05:12:23+00:00| seen| https://t.me/cvedetector/21370 2025-03-28 09:10:22+00:0...

Directus `search` query parameter allows enumeration of non permitted fields

Summary The search query parameter allows users with access to a collection to filter items based on fields they do not have permission to view. This allows the enumeration of unknown field contents. Details The searchable columns numbers & strings are not checked against permissions when injecti...

CVE-2025-2189

creationtimestamp| type| source ---|---|--- 2025-03-11 13:39:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7137 2025-03-11 14:05:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk4af5hvhd2n 2025-03-11 15:57:16+00:00| seen| https://t.me/cvedetector/20084 2025-03-12...

CVE-2025-27640

creationtimestamp| type| source ---|---|--- 2025-03-06 00:00:12+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6s6unt32u 2025-03-06 02:16:24+00:00| seen| Telegram/1U7UJatlqZUmbjXWeuQCngVjQ7QswDsWAeKV9UNcCr1yrhN 2025-03-06 12:00:07+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2025-21659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netdev: prevent accessing NAPI instances from another namespace The NAPI IDs were not fully...

CVE-2025-24521

creationtimestamp| type| source ---|---|--- 2025-03-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-02 2025-03-05 15:32:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6547 2025-03-05 18:37:00+00:00| seen| https://t.me/cvedetector/19640 2025-03-05...

SUSE CVE-2022-49106

In the Linux kernel, the following vulnerability has been resolved: staging: vchiqarm: Avoid NULL ptr deref in vchiqdumpplatforminstances vchiqgetstate can return a NULL pointer. So handle this cases and avoid a NULL pointer derefence in vchiqdumpplatforminstances...

UBUNTU-CVE-2022-49106

In the Linux kernel, the following vulnerability has been resolved: staging: vchiqarm: Avoid NULL ptr deref in vchiqdumpplatforminstances vchiqgetstate can return a NULL pointer. So handle this cases and avoid a NULL pointer derefence in vchiqdumpplatforminstances...

CVE-2025-24490

creationtimestamp| type| source ---|---|--- 2025-02-24 09:30:39+00:00| seen| Telegram/Vvd5MA2nmu0duCxF3bbKYEKWTKbzMFIp2pUAfan9WmCtw 2025-02-24 09:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114058233176053982 2025-02-24 10:26:03+00:00| seen|...

CVE-2024-32230

creationtimestamp| type| source ---|---|--- 2025-02-23 15:08:07+00:00| seen| https://bsky.app/profile/cyberpunk.tools/post/3liu4fnuys22r 2025-02-23 15:08:08+00:00| seen| https://bsky.app/profile/cyberpunk.tools/post/3liu4fogkcs2r 2025-02-23 15:08:08+00:00| seen|...

CVE-2025-24893

creationtimestamp| type| source ---|---|--- 2025-02-20 20:56:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lin6hwckvn2a 2025-02-20 21:48:44+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114038415303555460 2025-02-20 23:12:05+00:00| published-proof-of-concept...