CVE-2024-9133

creationtimestamp| type| source ---|---|--- 2025-01-10 21:43:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113806241219929500 2025-01-10 22:05:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1254 2025-01-10 22:16:14+00:00| seen|...

CVE-2024-33298

creationtimestamp| type| source ---|---|--- 2025-01-10 19:34:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113805731848129659 2025-01-10 20:07:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1218 2025-01-10 20:15:59+00:00| seen|...

CVE-2024-54847

creationtimestamp| type| source ---|---|--- 2025-01-10 16:25:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113804988018389382 2025-01-10 17:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lffozr7rr622 2025-01-10 17:54:12+00:00| seen|...

CVE-2025-22949

creationtimestamp| type| source ---|---|--- 2025-01-10 15:23:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113804747178321116 2025-01-10 16:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfflpbrjer2k 2025-01-10 18:00:41+00:00| seen|...

WordPress Backlink Monitoring Manager plugin <= 0.1.3 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Backlink Monitoring Manager versions = 0.1.3...

CVE-2024-12714

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-10815

creationtimestamp| type| source ---|---|--- 2025-01-09 06:01:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113796873432910002 2025-01-09 06:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzobqkor25 2025-01-09 06:21:40+00:00| seen|...

CVE-2024-12714

CVE-2024-12714 concerns the Backlink Monitoring Manager WordPress plugin (up to version 0.1.3). The issue is a Reflected Cross-Site Scripting caused by not sanitising/escaping a parameter before output. This could affect high-privilege users such as admins. The WordFence record indicates the vuln...

CVE-2024-12714 Backlink Monitoring Manager <= 0.1.3 - Reflected XSS

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12714 Backlink Monitoring Manager <= 0.1.3 - Reflected XSS

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2025-1936 · WordPress · Backlink Monitoring Manager

Name of the Vulnerable Software and Affected Versions: Backlink Monitoring Manager WordPress plugin versions 0.1.3 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitized and escaped before being outputted back in the...

WordPress plugin Backlink Monitoring Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2024-12431

creationtimestamp| type| source ---|---|--- 2025-01-08 16:11:36+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113793610252558322 2025-01-08 20:37:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113794654216478642 2025-01-08 21:14:36+00:00| seen|...

SUSE CVE-2024-55553

In FRRouting FRR before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, default 4K on most OSes. An attacker can use this to trigger re-parsing of the RIB for FRR routers using RTR by causing more than th...

SUSE CVE-2024-56622

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: sysfs: Prevent div by zero Prevent a division by 0 when monitoring is not enabled...

Progress WhatsUp Gold SnmpExtendedActiveMonitor path traversal vulnerability

Talos Vulnerability Report TALOS-2024-2089 Progress WhatsUp Gold SnmpExtendedActiveMonitor path traversal vulnerability January 8, 2025 CVE Number CVE-2024-12105 SUMMARY A path traversal vulnerability exists in the handling of SnmpExtendedActiveMonitor requests in Progress WhatsUp Gold 24.0.1 Bui...

CVE-2025-22328

creationtimestamp| type| source ---|---|--- 2025-01-07 11:18:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jn2yprf2f 2025-01-07 11:18:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jn2yprf2f 2025-01-07 13:02:18+00:00| seen|...

CVE-2024-11756

creationtimestamp| type| source ---|---|--- 2025-01-07 05:30:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113785425958756675 2025-01-07 05:33:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113785440114947928 2025-01-07 05:36:34+00:00| seen|...

PT-2025-3091 · Jatos · Jatos

Name of the Vulnerable Software and Affected Versions: JATOS version 3.9.4 Description: The issue is a denial-of-service DoS vulnerability in the authentication system. An attacker can prevent legitimate users from accessing their accounts by repeatedly sending multiple failed login attempts...

UBUNTU-CVE-2024-55553

In FRRouting FRR before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, default 4K on most OSes. An attacker can use this to trigger re-parsing of the RIB for FRR routers using RTR by causing more than th...