CVE-2025-25150

creationtimestamp| type| source ---|---|--- 2025-03-03 15:48:52+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285625743491 2025-03-04 00:00:09+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljj5uet6o62d 2025-03-04 12:00:07+00:00| seen|...

CVE-2025-25122

creationtimestamp| type| source ---|---|--- 2025-03-03 15:48:51+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285578045325...

CVE-2025-25109

creationtimestamp| type| source ---|---|--- 2025-03-03 15:48:50+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285514836470...

CVE-2025-26967

creationtimestamp| type| source ---|---|--- 2025-03-03 14:30:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6216 2025-03-03 15:48:54+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285750415310 2026-04-01 21:28:56+00:00| seen|...

CVE-2025-1852

creationtimestamp| type| source ---|---|--- 2025-03-02 20:36:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114094754589427815 2025-03-03 06:29:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6151 2025-03-03 07:48:44+00:00| seen|...

BIT-MASTODON-2025-27157 Mastodon's rate-limits are missing on `/auth/setup`

Mastodon is a self-hosted, federated microblogging platform. Starting in version 4.2.0 and prior to versions 4.2.16 and 4.3.4, the rate limits are missing on /auth/setup. Without those rate limits, an attacker can craft requests that will send an email to an arbitrary addresses. Versions 4.2.16 a...

BIT-MASTODON-2025-27399 Mastodon's domain blocks & rationales ignore user approval when visibility set as "users"

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" localized English string: "To logged-in users", users that are not yet approved can view the block reasons. Instance admins...

CVE-2025-27157

Mastodon is a self-hosted, federated microblogging platform. Starting in version 4.2.0 and prior to versions 4.2.16 and 4.3.4, the rate limits are missing on /auth/setup. Without those rate limits, an attacker can craft requests that will send an email to an arbitrary addresses. Versions 4.2.16 a...

CVE-2025-27399

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" localized English string: "To logged-in users", users that are not yet approved can view the block reasons. Instance admins...

CVE-2024-12544

creationtimestamp| type| source ---|---|--- 2025-03-01 08:27:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6059 2025-03-01 09:48:04+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114086542311660523 2025-03-01 10:35:34+00:00| seen|...

CVE-2024-9193

creationtimestamp| type| source ---|---|--- 2025-02-28 09:27:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5861 2025-02-28 11:10:25+00:00| seen| https://t.me/cvedetector/19137 2025-02-28 11:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114081354425742314 2025-03-...

CVE-2025-1570

creationtimestamp| type| source ---|---|--- 2025-02-28 09:27:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5857 2025-02-28 10:00:46+00:00| seen| Telegram/tzst3T7SuESeL4Dw73eYpZnj8xogMY6-vkCUQFTMfYlq5w 2025-02-28 11:10:18+00:00| seen| https://t.me/cvedetector/19132 2025-02-28 11:48:48+00:0...

CVE-2024-9195

creationtimestamp| type| source ---|---|--- 2025-02-28 09:27:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5855 2025-02-28 11:10:26+00:00| seen| https://t.me/cvedetector/19138 2025-02-28 11:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114081354477370456...

CVE-2024-8420

creationtimestamp| type| source ---|---|--- 2025-02-28 09:27:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5853 2025-02-28 11:10:33+00:00| seen| https://t.me/cvedetector/19143 2025-02-28 11:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114081354358777265...

CVE-2025-25570

creationtimestamp| type| source ---|---|--- 2025-02-28 01:08:16+00:00| seen| https://t.me/cvedetector/19102 2025-02-28 01:53:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj7ccu2uix2w 2025-02-28 17:27:11+00:00| published-proof-of-concept|...

CVE-2024-38291

creationtimestamp| type| source ---|---|--- 2025-02-28 01:08:15+00:00| seen| https://t.me/cvedetector/19100 2025-02-28 01:53:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj7cct45yb25 2025-02-28 17:27:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5928 2025-02-28...

CVE-2025-26325

creationtimestamp| type| source ---|---|--- 2025-02-28 01:08:13+00:00| seen| https://t.me/cvedetector/19098 2025-02-28 01:53:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj7cctuxwh27 2025-02-28 19:49:12+00:00| seen|...

CVE-2025-1682

creationtimestamp| type| source ---|---|--- 2025-02-28 00:25:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5825 2025-02-28 01:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114078994918555296 2025-02-28 03:38:46+00:00| seen| https://t.me/cvedetector/19105 2025-03-...

CVE-2025-1687

creationtimestamp| type| source ---|---|--- 2025-02-28 00:25:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5824 2025-02-28 01:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114078994955411295 2025-02-28 03:38:47+00:00| seen|...

CVE-2024-12811

creationtimestamp| type| source ---|---|--- 2025-02-28 00:25:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5823 2025-02-28 01:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114078994875616042 2025-02-28 03:38:53+00:00| seen| https://t.me/cvedetector/19111 2025-03-...