Pixelfed 安全漏洞

Pixelfed is a free and ethical photo sharing platform from the individual developers of Pixelfed. A security vulnerability exists in versions of Pixelfed prior to 0.12.5 that stems from the fact that anyone can follow private accounts on other Fediverse servers and view private posts...

CVE-2025-26512

creationtimestamp| type| source ---|---|--- 2025-03-24 22:23:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8562 2025-03-24 22:48:14+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114219843195697793 2025-03-24 23:40:25+00:00| seen|...

WordPress Directorist plugin <= 8.2 - Missing Authorization to Unauthenticated Arbitrary Post Publishing vulnerability

Missing Authorization to Unauthenticated Arbitrary Post Publishing vulnerability discovered by mikemyers in WordPress Plugin Directorist versions = 8.2...

CVE-2024-53679

creationtimestamp| type| source ---|---|--- 2025-03-24 18:00:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ll5dlhfbyx2t 2025-03-25 10:24:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8637 2025-03-25 10:54:28+00:00| seen|...

CVE-2024-53678

creationtimestamp| type| source ---|---|--- 2025-03-24 18:00:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ll5dlh3oqr2k 2025-03-25 10:24:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8638 2025-03-25 10:54:29+00:00| seen|...

CVE-2025-24513

creationtimestamp| type| source ---|---|--- 2025-03-24 17:55:00+00:00| seen| https://thehackernews.com/2025/03/critical-ingress-nginx-controller.html 2025-03-24 21:56:48+00:00| seen| https://bsky.app/profile/lookitup.baby/post/3ll5qr5t6uk2k 2025-03-24 22:01:06+00:00| seen|...

CVE-2025-30615

creationtimestamp| type| source ---|---|--- 2025-03-24 14:40:12+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3ll4yei7uor2m 2025-03-24 14:48:31+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114217956886758868 2025-03-24 16:39:36+00:00| seen|...

CVE-2025-30602

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alphasis Related Posts via Categories related-posts-via-categories allows Stored XSS.This issue affects Related Posts via Categories: from n/a through = 2.1.2...

CVE-2025-30602

CVE-2025-30602 is a stored XSS in the WordPress plugin Related Posts via Categories (vulnerable up to 2.1.2; root cause: improper input neutralization during web page generation). Impact is cross-site scripting (low- to high-impact user data/session risk per CVSS 3.1: HIGH, 7.1). No exploitation ...

WordPress Related Posts via Categories plugin <= 2.1.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Related Posts via Categories versions = 2.1.2...

CVE-2025-2681

creationtimestamp| type| source ---|---|--- 2025-03-24 05:30:30+00:00| seen| Telegram/-BH2xfZualv0FtknMT93NmuRcs1qQQpmOW2m0bL-A1YU30 2025-03-24 05:51:32+00:00| seen| https://t.me/cvedetector/20932 2025-03-24 08:24:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll4de2f5uy2l...

CVE-2023-48292

creationtimestamp| type| source ---|---|--- 2025-03-23 22:13:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/23452 2025-03-24 04:00:05+00:00| published-proof-of-concept| Telegram/w1bL0ZfQbZjC6kNLjY6qJg4sGK5mjn3UxkyFp-Fo5l10hpw 2025-03-29 12:26:01+00:00| seen|...

CVE-2025-27553

creationtimestamp| type| source ---|---|--- 2025-03-23 16:50:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ll2p6j3kbl2v 2025-03-23 18:09:21+00:00| seen| https://t.me/cvedetector/20902 2025-03-24 13:05:24+00:00| seen|...

CVE-2025-2618

creationtimestamp| type| source ---|---|--- 2025-03-22 14:40:12+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkxxgn4y5n2v 2025-03-22 14:48:42+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114206632948653692 2025-03-22 15:00:26+00:00|...

CVE-2025-2303

creationtimestamp| type| source ---|---|--- 2025-03-22 07:38:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uyg7zf2j 2025-03-22 07:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uz6uu526 2025-03-22 08:48:26+00:00| seen|...

CVE-2025-0724

creationtimestamp| type| source ---|---|--- 2025-03-22 06:00:36+00:00| seen| Telegram/lKJR0gVbJMQmQvPZvyO2PQYEgFjbPQAZ3OktOvkr7WqN9Q 2025-03-22 06:48:25+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114204744366284573 2025-03-22 07:38:44+00:00| seen|...

WordPress plugin Motors – Car Dealer, Classifieds & Listing 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-29795

creationtimestamp| type| source ---|---|--- 2025-03-21 20:31:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114202317133635833 2025-03-23 19:49:45+00:00| seen| https://t.me/cvedetector/20911 2025-03-23 20:19:34+00:00| seen|...

CVE-2025-26852

creationtimestamp| type| source ---|---|--- 2025-03-20 20:19:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8283 2025-03-20 21:23:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114196861140560414 2025-03-20 23:09:10+00:00| seen|...

CVE-2024-7598

creationtimestamp| type| source ---|---|--- 2025-03-20 17:18:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8238 2025-03-20 19:09:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lktfkgalqy2j 2025-03-20 19:54:37+00:00| seen|...