19170 matches found
Deserialization of Untrusted Data
Overview inspiremusic is an InspireMusic: A Fundamental Music, Song and Audio Generation Framework and Toolkits Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the load function in the file cli/model.py. An attacker can manipulate internal data...
WordPress eMagicOne Store Manager for WooCommerce plugin <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_file() vulnerability
Unauthenticated Arbitrary File Upload via setfile vulnerability discovered by Ryan Kozak in WordPress Plugin eMagicOne Store Manager versions = 1.2.5...
WordPress Smart Forms plugin <= 2.6.98 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability
Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Joel Indra in WordPress Plugin Smart Forms versions = 2.6.98...
WordPress WP SMTP plugin <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting via Email vulnerability
Unauthenticated Stored Cross-Site Scripting via Email vulnerability discovered by zer0gh0st in WordPress Plugin WP SMTP versions = 2.1.5...
WordPress Pagelayer plugin <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Link vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Button Link vulnerability discovered by zer0gh0st in WordPress Plugin PageLayer versions = 2.0.0...
CVE-2025-31060
creationtimestamp| type| source ---|---|--- 2025-05-23 14:05:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17388...
CVE-2021-24374
The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhgvcs that allowed the comments of non-published...
CVE-2024-40459
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17358...
CVE-2022-40102
creationtimestamp| type| source ---|---|--- 2025-05-22 17:43:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17321...
CVE-2022-41340
creationtimestamp| type| source ---|---|--- 2025-05-22 14:44:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17301...
CVE-2025-5079
creationtimestamp| type| source ---|---|--- 2025-05-22 14:43:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17282...
CVE-2025-0679
creationtimestamp| type| source ---|---|--- 2025-05-22 14:43:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17278...
CVE-2024-12093
creationtimestamp| type| source ---|---|--- 2025-05-22 14:43:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17276...
WordPress ReDi Restaurant Reservation plugin <= 24.1209 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Ryan Novotny in WordPress Plugin ReDi Restaurant Reservation versions = 24.1209...
CVE-2024-1347
creationtimestamp| type| source ---|---|--- 2025-05-22 04:43:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17233...
CVE-2025-5053
creationtimestamp| type| source ---|---|--- 2025-05-22 01:50:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppyun3r2m2q...
CVE-2025-20255
creationtimestamp| type| source ---|---|--- 2025-05-21 17:43:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17172...
CVE-2025-5030
creationtimestamp| type| source ---|---|--- 2025-05-21 16:41:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17138...