CVE-2024-10239

creationtimestamp| type| source ---|---|--- 2025-02-04 08:09:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113944595962559024 2025-02-04 08:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmj2urnn2f 2025-02-06 02:40:47+00:00| seen|...

CVE-2025-25062

creationtimestamp| type| source ---|---|--- 2025-02-03 04:16:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaoogmsmt27 2025-02-03 07:46:41+00:00| seen| https://t.me/cvedetector/17041 2025-02-03 08:03:51+00:00| seen|...

CVE-2024-40513

creationtimestamp| type| source ---|---|--- 2025-01-16 22:56:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2079 2025-01-16 23:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvfw4h6yi2p 2025-01-16 23:34:28+00:00| seen|...

CVE-2025-20621 Webapp crash via object that can't be cast to String in Attachment Field

Mattermost versions 10.2.x = 10.2.0, 9.11.x = 9.11.5, 10.0.x = 10.0.3, 10.1.x = 10.1.3 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the webapp to crash via creating and sending such a post to a channel...

PT-2026-4362

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s io uring/poll subsystem where the handling of io poll add return values during updates is incorrect. Specifically, if a POLL ADD is pending and a PO...

CVE-2024-56618

creationtimestamp| type| source ---|---|--- 2024-12-27 15:18:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbwtkien2k...

VulnCheck KEV: CVE-2024-45388

Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and testers. The /api/v2/simulation POST handler allows users to create new simulation views from the contents of a user-specified file. This feature can be abused by an attacker to read arbitrary...

WordPress plugin HurryTimer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-49257 WordPress Azz Anonim Posting plugin <= 0.9 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Denis Azz Anonim Posting azz-anonim-posting allows Upload a Web Shell to a Web Server.This issue affects Azz Anonim Posting: from n/a through = 0.9...

CVE-2024-49257 WordPress Azz Anonim Posting plugin <= 0.9 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Denis Azz Anonim Posting allows Upload a Web Shell to a Web Server.This issue affects Azz Anonim Posting: from n/a through 0.9...

CVE-2024-49257

CVE-2024-49257 affects the WordPress plugin Azz Anonim Posting (

WordPress plugin Azz Anonim Posting 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

PT-2024-33395

Name of the Vulnerable Software and Affected Versions Azz Anonim Posting versions prior to 0.9 Description The issue allows for the unrestricted upload of files with dangerous types, including web shells, to a web server. This can be exploited by uploading a web shell to gain unauthorized access ...

CVE-2024-49257: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in Denis Azz Anonim Posting azz-anonim-posting allows Upload a Web Shell to a Web Server.This issue affects Azz Anonim Posting: from n/a through = 0.9...

WordPress Azz Anonim Posting plugin <= 0.9 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Azz Anonim Posting versions = 0.9...

WordPress Azz Anonim Posting Plugin <= 0.9 is vulnerable to Arbitrary File Upload

Software Azz Anonim Posting Type Plugin Vulnerable versions = 0.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49257 Patch priority High CVSS severity High 10 Developer Claim ownership PSID a0f84f528406 Credits stealthcopter Required privilege...

CVE-2024-8427

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveglobalsettings and processformedit functions in all versions up to, and including, 1.2.2. This makes i...

PT-2024-39004 · WordPress · Frontend Post Submission Manager Lite – Frontend Posting Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin versions up to, and including, 1.2.2 Description: The issue allows authenticated attackers with Subscriber-level access and above to update the plugin's settings an...

CVE-2024-35539

Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently...

PT-2024-26530 · Typecho · Typecho

Name of the Vulnerable Software and Affected Versions: Typecho version 1.3.0 Description: A race condition issue was found in the post commenting function, allowing attackers to post multiple comments before spam protection checks are applied, particularly if comments are posted at a high...