CVE-2023-2533

creationtimestamp| type| source ---|---|--- 2025-07-28 15:00:30+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3luzuaqymgn2e 2025-07-28 16:07:00+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3luzxxo34xw2d 2025-07-29 02:51:00+00:00| seen|...

CVE-2025-26469

creationtimestamp| type| source ---|---|--- 2025-07-28 13:56:19+00:00| seen| https://bsky.app/profile/potato.software/post/3luzqnz3jio2m 2025-07-28 15:37:03+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3luzwc47lt52v...

CVE-2025-54296

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

Infinite loop

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Malicious code in webxr-input-profiles (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6325 Malicious code in webxr-input-profiles (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-54090

creationtimestamp| type| source ---|---|--- 2025-07-23 19:23:32+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lunqmetiv225 2025-07-24 00:10:05+00:00| seen| https://bsky.app/profile/lobsters-feed.bsky.social/post/3luoamu363o2j 2025-07-24 05:30:09+00:00| seen|...

CVE-2025-54296

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-54296

A stored Cross‑Site Scripting (XSS) vulnerability exists in the ProFiles component for Joomla, affecting versions 1.0 through 1.5.0. The issue is described in multiple sources (notably PT-2025-30569 and CVE records) as allowing injection/storage of scripts within the application. The connected do...

CVE-2025-54296 Extension - mooj.org - Stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-54296 Extension - mooj.org - Stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-54296: Improper Neutralization of Input During Web Page Generation

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-6977: Improper Neutralization of Input During Web Page Generation

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘pmgetmessengernotification’ function in all versions up to, and including, 5.9.5.4 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2025-49876: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows SQL Injection.This issue affects ProfileGrid : from n/a through = 5.9.5.2...

CVE-2025-24006

creationtimestamp| type| source ---|---|--- 2025-07-08 07:08:52+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816354360150951 2025-07-08 07:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgql3inq6b2...

CVE-2025-53109

creationtimestamp| type| source ---|---|--- 2025-07-02 16:56:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyolnrp7y2m 2025-07-02 17:43:18+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lsyr7wntms26 2025-07-02 18:24:31+00:00| seen|...

CVE-2025-6463

creationtimestamp| type| source ---|---|--- 2025-07-02 08:22:13+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lsxrqhqvcku2 2025-07-02 09:48:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxwphgtsn2s 2025-07-02 11:41:26+00:0...

firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...

CVE-2024-8419

creationtimestamp| type| source ---|---|--- 2025-06-30 10:07:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19919 2025-06-30 10:29:36+00:00| seen| https://infosec.exchange/users/certvde/statuses/114771845197214791 2025-06-30 10:29:43+00:00| seen|...

New U.S. Visa Rule Requires Applicants to Set Social Media Account Privacy to Public

The United States Embassy in India has announced that applicants for F, M, and J nonimmigrant visas should make their social media accounts public. The new guideline seeks to help officials verify the identity and eligibility of applicants under U.S. law. The U.S. Embassy said every visa...