CVE-2025-24803

creationtimestamp| type| source ---|---|--- 2025-02-05 18:44:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113952756172745897 2025-02-05 19:18:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhbz6hwmx2w 2025-02-05 21:39:47+00:00| seen|...

CVE-2025-23415

creationtimestamp| type| source ---|---|--- 2025-02-05 18:07:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113952610586218036 2025-02-05 18:16:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6krbz2b2b 2025-02-05 21:40:00+00:00| seen|...

CVE-2025-23413

creationtimestamp| type| source ---|---|--- 2025-02-05 18:07:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113952610572013993 2025-02-05 18:16:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6koufib2c 2025-02-05 21:40:02+00:00| seen|...

CVE-2024-45626

creationtimestamp| type| source ---|---|--- 2025-02-05 17:55:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lhh5dsezzz2u 2025-02-06 11:22:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113956682386323050 2025-02-06 12:16:26+00:00| seen|...

CVE-2025-22891

creationtimestamp| type| source ---|---|--- 2025-02-05 17:52:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113952551540292342 2025-02-05 18:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6kh7tzg2t 2025-02-05 21:40:00+00:00| seen|...

CVE-2025-20179

creationtimestamp| type| source ---|---|--- 2025-02-05 16:21:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113952194451285433 2025-02-05 16:37:05+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113952255128702135 2025-02-05 17:16:16+00:00| seen|...

CVE-2020-11056

In Sprout Forms before 3.9.0, there is a potential Server-Side Template Injection vulnerability when using custom fields in Notification Emails which could lead to the execution of Twig code. This has been fixed in 3.9.0...

CVE-2020-13276

User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/EE versions through 13.0.1...

CVE-2024-5528

creationtimestamp| type| source ---|---|--- 2025-02-05 10:39:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113950849329817419 2025-02-05 11:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhggzwexys2h 2025-02-05 13:17:46+00:00| seen|...

CVE-2024-56284

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through = 3.5.0...

SUSE CVE-2025-1018

The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135...

SUSE CVE-2025-1019

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135...

CVE-2024-53966

creationtimestamp| type| source ---|---|--- 2025-02-04 23:58:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113948328441304887 2025-02-05 00:16:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfc77uxrg2b 2025-02-05 03:16:22+00:00| seen|...

CVE-2024-53965

creationtimestamp| type| source ---|---|--- 2025-02-04 23:43:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113948269423769801 2025-02-05 00:16:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfc75nigb2p 2025-02-05 03:16:28+00:00| seen|...

CVE-2024-53962

creationtimestamp| type| source ---|---|--- 2025-02-04 23:43:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113948269377814543 2025-02-05 00:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfc6wjx3s2r 2025-02-05 03:16:23+00:00| seen|...

CVE-2024-57609

creationtimestamp| type| source ---|---|--- 2025-02-04 22:00:06+00:00| published-proof-of-concept| Telegram/EPMWd4WNRecTWvESTQHlRCQzOU9qSgjrCdYAHbAYrOYLHsY 2025-02-06 22:16:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk4gs7hi225 2025-02-06 22:49:11+00:00| seen|...

CVE-2025-24971

DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability was discovered in the DumbDrop application, /upload/init endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely wh...

CVE-2025-24971

creationtimestamp| type| source ---|---|--- 2025-02-04 18:57:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113947144108335156 2025-02-04 19:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lherfrzjqf2i 2025-02-04 22:15:20+00:00| seen|...

CVE-2025-24971

DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability was discovered in the DumbDrop application, "/upload/init" endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely...

CVE-2025-24971 OS Command Injection endpoint '/upload/init' parameter 'filename' (RCE) in DumpDrop

DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability was discovered in the DumbDrop application, /upload/init endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely wh...