CVE-2012-5318

Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a double extension, then accessing it via a direct request to the file in the directory specified...

DEBIAN-CVE-2025-37885

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if new route isn't postable Restore an IRTE back to host control remapped or posted MSI mode if the new GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing typ...

CVE-2025-45388

creationtimestamp| type| source ---|---|--- 2025-05-07 19:22:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15384 2025-05-07 22:27:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lomgxujgzs2p 2025-05-07 23:12:15+00:00| seen|...

CVE-2025-26660 Broken Access Control in SAP Fiori apps (Posting Library)

SAP Fiori applications using the posting library fail to properly configure security settings during the setup process, leaving them at default or inadequately defined. This vulnerability allows an attacker with low privileges to bypass access controls within the application, enabling them to...

CVE-2025-2064

creationtimestamp| type| source ---|---|--- 2025-03-07 04:34:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6795 2025-03-07 06:02:24+00:00| published-proof-of-concept| Telegram/5yp7nL0030ls3Gne3VU8N-XFXoAZlf1wMfRIbXn0P0E5M 2025-03-07 06:34:23+00:00| seen|...

CVE-2024-51963

creationtimestamp| type| source ---|---|--- 2025-03-03 23:44:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljj4yi4lod26 2025-03-03 23:56:21+00:00| seen| https://t.me/cvedetector/19415 2025-03-08 04:34:09+00:00| seen| Telegram/qjDaf5l0a0Z3YiR6iBGJWcmqZwbGEjAqI44ubwXeAXVBF8t...

CVE-2024-41338

creationtimestamp| type| source ---|---|--- 2025-02-27 21:35:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114078000233980303 2025-02-27 21:59:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj6va23yjo2t 2025-02-27 23:26:52+00:00| seen| https://t.me/cvedetector/190...

Plenti - Code Injection - Denial of Services

Summary While pushing a file via postLocal method if user add javascript code in file parameter that codes can exe in v8go context. Details While posting a file via postLocal, any attacker will add javascript codes to file parameter. That parameter content pass to componentSignature method after...

CVE-2025-23419

creationtimestamp| type| source ---|---|--- 2025-02-05 17:55:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lhh5dqksd622 2025-02-05 18:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6ktldeu2i 2025-02-05 18:22:28+00:00| seen|...

CVE-2024-49257

Unrestricted Upload of File with Dangerous Type vulnerability in Denis Azz Anonim Posting azz-anonim-posting allows Upload a Web Shell to a Web Server.This issue affects Azz Anonim Posting: from n/a through = 0.9...

CVE-2024-10239

creationtimestamp| type| source ---|---|--- 2025-02-04 08:09:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113944595962559024 2025-02-04 08:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmj2urnn2f 2025-02-06 02:40:47+00:00| seen|...

CVE-2025-25062

creationtimestamp| type| source ---|---|--- 2025-02-03 04:16:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaoogmsmt27 2025-02-03 07:46:41+00:00| seen| https://t.me/cvedetector/17041 2025-02-03 08:03:51+00:00| seen|...

CVE-2024-40513

creationtimestamp| type| source ---|---|--- 2025-01-16 22:56:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2079 2025-01-16 23:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvfw4h6yi2p 2025-01-16 23:34:28+00:00| seen|...

CVE-2025-20621 Webapp crash via object that can't be cast to String in Attachment Field

Mattermost versions 10.2.x = 10.2.0, 9.11.x = 9.11.5, 10.0.x = 10.0.3, 10.1.x = 10.1.3 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the webapp to crash via creating and sending such a post to a channel...

PT-2026-4362

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s io uring/poll subsystem where the handling of io poll add return values during updates is incorrect. Specifically, if a POLL ADD is pending and a PO...

CVE-2024-56618

creationtimestamp| type| source ---|---|--- 2024-12-27 15:18:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbwtkien2k...

VulnCheck KEV: CVE-2024-45388

Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and testers. The /api/v2/simulation POST handler allows users to create new simulation views from the contents of a user-specified file. This feature can be abused by an attacker to read arbitrary...

WordPress plugin HurryTimer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-49257

CVE-2024-49257 affects the WordPress plugin Azz Anonim Posting (

CVE-2024-49257 WordPress Azz Anonim Posting plugin <= 0.9 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Denis Azz Anonim Posting azz-anonim-posting allows Upload a Web Shell to a Web Server.This issue affects Azz Anonim Posting: from n/a through = 0.9...