CVE-2025-23199

CVE-2025-23199 describes a stored XSS in LibreNMS

CVE-2025-23200 Stored XSS-LibreNMS-Misc Section in librenms

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameter: ajaxform.php - param: state. Librenms versions up to 24.10.1 allow remote attackers to inject malicious scripts. When a user views or interacts with the page...

CVE-2025-23200

CVE-2025-23200 affects LibreNMS (librenms/librenms) up to version 24.10.1, where a stored XSS is possible via the ajax_form.php parameter state . The root cause is unsanitized user input in the dynamic_override_config path, allowing injected scripts to execute when a page displaying affected data...

CVE-2025-23200 Stored XSS-LibreNMS-Misc Section in librenms

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameter: ajaxform.php - param: state. Librenms versions up to 24.10.1 allow remote attackers to inject malicious scripts. When a user views or interacts with the page...

CVE-2025-23201

CVE-2025-23201 affects LibreNMS. The issue is a Cross-site Scripting (XSS) in the /addhost endpoint via the community parameter, impacting Librenms versions up to 24.10.1. The root cause is improper handling/escaping of user-supplied input in this parameter, enabling attackers to inject scripts t...

CVE-2024-52594

creationtimestamp| type| source ---|---|--- 2025-01-16 19:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuyjoogbz2r 2025-01-16 19:44:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfv24f2k532h 2025-01-16 21:15:22+00:00| seen|...

Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.4 release

A new version of Red Hat build of OpenTelemetry has been released Red Hat build of OpenTelemetry is a collection of tools, APIs, and SDKs. You use it to instrument, generate, collect, and export telemetry data metrics, logs, and traces for analysis in order to understand your software's performan...

The vulnerability of Dell PowerScale InsightIQ software for performance monitoring and reporting lies in its lack of protection against SQL query structures, allowing attackers to disclose sensitive information.

The vulnerability of the software for performance monitoring and report generation in Dell PowerScale InsightIQ is related to the lack of security measures in the SQL query structure. Exploiting this vulnerability can allow attackers to disclose sensitive information...

IBM Concert Information Disclosure Vulnerability (CNVD-2025-29675)

IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform released in May 2024 by IBM. IBM Concert suffers from an information disclosure vulnerability that stems from the disclosure of sensitive system informatio...

The vulnerability of the Zabbix universal monitoring system lies in insufficient validation of input data, which allows attackers to escalate their privileges.

The vulnerability of the Zabbix universal monitoring system is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2025-22779

creationtimestamp| type| source ---|---|--- 2025-01-15 16:17:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfs63znpyb2t 2025-01-15 16:57:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfsae7ptav2e 2025-01-15 17:38:19+00:00| seen|...

PT-2025-12837

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 134.0.6998.177. Description A zero-day vulnerability, tracked as CVE-2025-2783, has been discovered in Google Chrome's Mojo IPC component, allowing remote attackers to escape the browser's sandbox on Windows...

CVE-2025-21400

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:18:22+00:00| see...

CVE-2025-21336

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:22:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpum6b2pw2t 2025-01-15 01:41:34+00:00| seen|...

CVE-2024-27778

creationtimestamp| type| source ---|---|--- 2025-01-14 14:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpguugosw2d 2025-01-14 14:43:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113827237069065318 2025-01-14 14:48:24+00:00| seen|...

CVE-2024-57655

creationtimestamp| type| source ---|---|--- 2025-01-14 01:07:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1433 2025-01-14 01:17:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3dqzd2i2j 2025-01-14 03:01:35+00:00| seen|...

CVE-2024-51456

creationtimestamp| type| source ---|---|--- 2025-01-12 13:32:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113815632168521609 2025-01-12 14:04:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1339 2025-01-12 14:15:29+00:00| seen|...

CVE-2024-11386

creationtimestamp| type| source ---|---|--- 2025-01-11 07:27:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113808537671058257 2025-01-11 08:03:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1279 2025-01-11 08:15:44+00:00| seen|...

CVE-2024-12472

creationtimestamp| type| source ---|---|--- 2025-01-11 02:43:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113807419180725614 2025-01-11 03:04:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1263 2025-01-11 03:15:57+00:00| seen|...

CVE-2024-9133

creationtimestamp| type| source ---|---|--- 2025-01-10 21:43:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113806241219929500 2025-01-10 22:05:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1254 2025-01-10 22:16:14+00:00| seen|...