CVE-2019-9875

creationtimestamp| type| source ---|---|--- 2025-03-26 18:45:15+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llcgyim6af2v 2025-03-26 19:05:08+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llci42bxm52u 2025-03-26 21:39:21+00:00| seen|...

CVE-2025-30602

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alphasis Related Posts via Categories related-posts-via-categories allows Stored XSS.This issue affects Related Posts via Categories: from n/a through = 2.1.2...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the account visibility settings. An attacker can view and interact with private posts and accounts by leveraging the improper enforcement of access controls. Remediation Upgrade pixelfed/pixelfed to version...

GHSA-7287-GRHX-542X Pixelfed may allow unauthorized actor to view private posts and private users

Pixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewhere in the Fediverse, if they otherwise have any followers from a Pixelfed instance...

Pixelfed may allow unauthorized actor to view private posts and private users

Pixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewhere in the Fediverse, if they otherwise have any followers from a Pixelfed instance...

CVE-2025-30741

creationtimestamp| type| source ---|---|--- 2025-03-25 21:25:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8769 2025-03-25 23:40:33+00:00| seen| https://t.me/cvedetector/21122 2025-03-26 01:05:15+00:00| seen|...

CVE-2024-55963

creationtimestamp| type| source ---|---|--- 2025-03-25 16:43:16+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3ll7ppfyype2q 2025-03-25 17:39:32+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3ll7su2ssvy2a 2025-03-25 21:24:36+00:00| seen|...

Pixelfed 安全漏洞

Pixelfed is a free and ethical photo sharing platform from the individual developers of Pixelfed. A security vulnerability exists in versions of Pixelfed prior to 0.12.5 that stems from the fact that anyone can follow private accounts on other Fediverse servers and view private posts...

CVE-2025-26512

creationtimestamp| type| source ---|---|--- 2025-03-24 22:23:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8562 2025-03-24 22:48:14+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114219843195697793 2025-03-24 23:40:25+00:00| seen|...

WordPress Directorist plugin <= 8.2 - Missing Authorization to Unauthenticated Arbitrary Post Publishing vulnerability

Missing Authorization to Unauthenticated Arbitrary Post Publishing vulnerability discovered by mikemyers in WordPress Plugin Directorist versions = 8.2...

CVE-2024-53679

creationtimestamp| type| source ---|---|--- 2025-03-24 18:00:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ll5dlhfbyx2t 2025-03-25 10:24:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8637 2025-03-25 10:54:28+00:00| seen|...

CVE-2024-53678

creationtimestamp| type| source ---|---|--- 2025-03-24 18:00:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ll5dlh3oqr2k 2025-03-25 10:24:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8638 2025-03-25 10:54:29+00:00| seen|...

CVE-2025-24513

creationtimestamp| type| source ---|---|--- 2025-03-24 17:55:00+00:00| seen| https://thehackernews.com/2025/03/critical-ingress-nginx-controller.html 2025-03-24 21:56:48+00:00| seen| https://bsky.app/profile/lookitup.baby/post/3ll5qr5t6uk2k 2025-03-24 22:01:06+00:00| seen|...

CVE-2025-30615

creationtimestamp| type| source ---|---|--- 2025-03-24 14:40:12+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3ll4yei7uor2m 2025-03-24 14:48:31+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114217956886758868 2025-03-24 16:39:36+00:00| seen|...

CVE-2025-30602

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alphasis Related Posts via Categories related-posts-via-categories allows Stored XSS.This issue affects Related Posts via Categories: from n/a through = 2.1.2...

CVE-2025-30602

CVE-2025-30602 is a stored XSS in the WordPress plugin Related Posts via Categories (vulnerable up to 2.1.2; root cause: improper input neutralization during web page generation). Impact is cross-site scripting (low- to high-impact user data/session risk per CVSS 3.1: HIGH, 7.1). No exploitation ...

WordPress Related Posts via Categories plugin <= 2.1.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Related Posts via Categories versions = 2.1.2...

CVE-2025-2681

creationtimestamp| type| source ---|---|--- 2025-03-24 05:30:30+00:00| seen| Telegram/-BH2xfZualv0FtknMT93NmuRcs1qQQpmOW2m0bL-A1YU30 2025-03-24 05:51:32+00:00| seen| https://t.me/cvedetector/20932 2025-03-24 08:24:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll4de2f5uy2l...

CVE-2023-48292

creationtimestamp| type| source ---|---|--- 2025-03-23 22:13:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/23452 2025-03-24 04:00:05+00:00| published-proof-of-concept| Telegram/w1bL0ZfQbZjC6kNLjY6qJg4sGK5mjn3UxkyFp-Fo5l10hpw 2025-03-29 12:26:01+00:00| seen|...

CVE-2025-27553

creationtimestamp| type| source ---|---|--- 2025-03-23 16:50:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ll2p6j3kbl2v 2025-03-23 18:09:21+00:00| seen| https://t.me/cvedetector/20902 2025-03-24 13:05:24+00:00| seen|...