CVE-2025-21032

creationtimestamp| type| source ---|---|--- 2025-09-03 06:54:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxw2ds5c7v2r...

CVE-2025-57611

creationtimestamp| type| source ---|---|--- 2025-09-02 19:22:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxutophljy27...

CVE-2025-9374

creationtimestamp| type| source ---|---|--- 2025-08-29 07:09:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxjiurtqd327...

CVE-2025-8113

creationtimestamp| type| source ---|---|--- 2025-08-16 08:08:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwiw2py4sw2e...

Vvveb 安全漏洞

Vvveb is a powerful and easy-to-use CMS from Givan Personal Developers for building websites, blogs or e-commerce stores. A security vulnerability exists in Vvveb 1.0.5 and earlier versions, which stems from incorrect manipulation of the file /vadmin123/index.php?module=content/post&type=post...

CVE-2025-1294

creationtimestamp| type| source ---|---|--- 2025-04-24 23:09:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13364 2025-04-25 01:30:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnm2hdsoapq2 2025-04-25 03:18:21+00:00| seen|...

CVE-2024-7694

creationtimestamp| type| source ---|---|--- 2024-08-12 15:56:01+00:00| seen| https://t.me/cvedetector/2822 2026-02-17 22:42:32+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mf3n6p4swc2q 2026-02-18 04:01:33+00:00| seen|...

CVE-2024-23673

creationtimestamp| type| source ---|---|--- 2024-02-06 11:26:50+00:00| seen| https://t.me/ctinow/179910 2024-03-01 10:17:02+00:00| seen| https://t.me/ctinow/197459 2025-02-13 20:15:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4343 2025-05-09 17:25:55+00:00| seen|...

CVE-2023-6895

creationtimestamp| type| source ---|---|--- 2023-12-18 15:47:49+00:00| seen| https://t.me/ctinow/155945 2023-12-28 05:02:32+00:00| seen| https://t.me/arpsyndicate/2194 2024-01-02 18:16:21+00:00| seen| https://t.me/ctinow/161933 2024-03-01 19:58:51+00:00| seen| https://t.me/arpsyndicate/4109...

CVE-2020-1066

creationtimestamp| type| source ---|---|--- 2023-11-17 08:24:47+00:00| seen| https://t.me/arpsyndicate/239 2025-12-10 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m7nxg7og442f 2026-07-18 15:00:05+00:00| seen| https://t.me/reverseame/125 2026-07-19 00:00:11+00:00|...

CVE-2023-39189

creationtimestamp| type| source ---|---|--- 2023-10-09 22:16:07+00:00| seen| https://t.me/cibsecurity/71854 2025-08-13 09:00:04+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lwbhky6biw2y...

CVE-2022-46152

creationtimestamp| type| source ---|---|--- 2022-11-29 20:28:55+00:00| seen| https://t.me/cibsecurity/53661 2025-04-22 16:03:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12885 2025-11-20 05:51:04+00:00| seen|...

CVE-2022-1913

The Add Post URL WordPress plugin through 2.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping...

WordPress plugin Add Post URL 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Add Post URL plugin 2.1.0 and earlier versions are vulnerable to cross-site request forgery, which...

Add Post URL <= 2.1.0 - Arbitrary Settings Update to Stored XSS via CSRF

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping " document.getElementById"test".submit; XSS will be...

WordPress Add Post URL plugin <= 2.1.0 - Arbitrary Settings Update to Stored XSS via CSRF vulnerability

Arbitrary Settings Update to Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Add Post URL plugin versions = 2.1.0. Solution Deactivate and delete. This plugin has been closed as of May 27, 2022 and is not available for download. This closure is temporary, pending a full...

CVE-2021-39411

creationtimestamp| type| source ---|---|--- 2021-11-05 17:26:52+00:00| seen| https://t.me/cibsecurity/31894 2025-10-16 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrkmxbe2q...

CVE-2010-10017

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/wmdownloaderm3u.rb 2025-08-30 18:34:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxn7ltmwgy2m 2025-10-23...

Calendar by WD <= 1.5.51 - Authenticated SQL injection

http://www.defensecode.com/advisories/DC-2017-01-017WordPressSpiderEventCalendarPluginAdvisory.pdf Vulnerable POST URL: http://www.vulnerablesite.com/wpadmin/admin.php?page=SpiderCalendar&task=showmanageevent&calendarid=1 Vulnerable POST Body:...

WordPress Facebook <= 1.0.13 - Authenticated SQL Injection

http://www.defensecode.com/advisories/DC-2017-04-011WordPressFacebookPluginAdvisory.pdf Vulnerable POST URL: http://vulnerablesite.com/wp-admin/admin.php?page=SpiderFacebookmanage Vulnerable POST Body: searcheventsbytitle=&pagenumber=1&serchornot=&ascordesc=1&orderby=type AND SELECT FROM...