38641 matches found
PT-2025-24351 · Undefined · Undefined
CVE-2025-5242 Rejected reason https://t.co/7tJJDZLcUi Vulnerability Notification: https://t.co/xhLrNnfyrO...
PT-2025-24350 · Undefined · Undefined
CVE-2025-5223 Rejected reason https://t.co/hNak88ikhK Vulnerability Notification: https://t.co/xhLrNnfyrO...
archivebox (>=0.5.0, <=0.5.4), ashley (1.0.0b3) +7 more potentially affected by CVE-2025-48432 via django (3.1.3)
django PYPI version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - archivebox =0.5.0, =1.0.0, =1.0.0, =2.0.0a1, =2.1.1 Source cves: CVE-2025-48432 Source advisory: OSV:GHSA-7XR5-9HCQ-CHF9...
ios-notification (0.0.4) potentially affected by CVE-2025-48432 via django (1.11.1)
django PYPI version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ios-notification 0.0.4 Source cves: CVE-2025-48432 Source advisory: OSV:GHSA-7XR5-9HCQ-CHF9...
WordPress Broadly for WordPress plugin <= 3.0.2 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Broadly for WordPress versions = 3.0.2...
GHSA-F82J-8PP7-CW2W
creationtimestamp| type| source ---|---|--- 2025-06-02 16:45:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114614778635202833 2025-06-02 17:01:55+00:00| published-proof-of-concept| Telegram/evyU1N0NEzlqWkLQZaMrYM3OKb94J6CqLDhasOVakxq7P0...
CVE-2025-48472
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, there is no check to ensure that the user is disabling notifications for the mailbox to which they already have access. Moreover, the code explicitly implements functionality that if the user does not have...
ConnectWise Hit by Cyberattack; Nation-State Actor Suspected in Targeted Breach
ConnectWise, the developer of remote access and support software ScreenConnect, has disclosed that it was the victim of a cyber attack that it said was likely perpetrated by a nation-state threat actor. "ConnectWise recently learned of suspicious activity within our environment that we believe wa...
CVE-2025-48472
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, there is no check to ensure that the user is disabling notifications for the mailbox to which they already have access. Moreover, the code explicitly implements functionality that if the user does not have...
CVE-2025-48472 FreeScout Vulnerable to Insufficient Authorization
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, there is no check to ensure that the user is disabling notifications for the mailbox to which they already have access. Moreover, the code explicitly implements functionality that if the user does not have...
CVE-2025-48472 FreeScout Vulnerable to Insufficient Authorization
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, there is no check to ensure that the user is disabling notifications for the mailbox to which they already have access. Moreover, the code explicitly implements functionality that if the user does not have...
MINI-Q4V9-C9XF-VM9G
Bulletin has no description...
MINI-GVRR-CJ3H-CX7W
Bulletin has no description...
MINI-83MW-7H56-M733
Bulletin has no description...
FreeScout security vulnerabilities
FreeScout is an ultra-lightweight and powerful free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout, Inc. A security vulnerability exists in FreeScout versions prior to 1.8.179 that stems from not validating a user's notification setting permissions for a...
CVE-2025-48472: Incorrect Authorization
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, there is no check to ensure that the user is disabling notifications for the mailbox to which they already have access. Moreover, the code explicitly implements functionality that if the user does not have...
PT-2025-23326 · Undefined · Undefined
CVE-2022-44613 - Apache HTTP Server Remote Code Execution CVE ID : CVE-2022-44613 Published : May 28, 2025, 7:15 p.m. | 2 hours, 16 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused Severity: 0.0 | NA Visit th...
BIT-MODSECURITY-2025-47947 ModSecurity Has Possible DoS Vulnerability
ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case in stable released versions: when the payload's content type is application/json, and there is at...