108 matches found
MAL-2025-39167 Malicious code in whiskey-5jj-project (npm)
The package whiskey-5jj-project was found to contain malicious code...
MAL-2025-35090 Malicious code in test-mlw2-clint-dusty (npm)
The package test-mlw2-clint-dusty was found to contain malicious code...
WordPress StoryMap Plugin <= 2.1 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by astra.r3verii in WordPress Plugin StoryMap versions = 2.1...
CVE-2025-40764
creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-04...
WordPress Stratus Theme <= 4.2.5 is vulnerable to Broken Access Control
Software Stratus Type Theme Vulnerable versions = 4.2.5 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-53341 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 90d8bfd3ac75 Credits Ananda Dhakal Patchstack Required...
CVE-2025-537397
creationtimestamp| type| source ---|---|--- 2025-08-13 05:23:56+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0250...
CVE-2025-8843
A vulnerability was found in NASM Netwide Assember 2.17rc0. This affects the function machonodeadstrip of the file outmacho.c. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used...
Apple macOS path traversal vulnerability (CNVD-2025-18449)
Apple macOS is a specialized operating system developed by Apple for Mac computers. Apple macOS suffers from a path traversal vulnerability that can be exploited by an attacker to cause a denial of service...
CVE-2025-38474
creationtimestamp| type| source ---|---|--- 2025-07-28 11:40:13+00:00| seen| Telegram/kgacV0OH7cXMdPJKctP-PCBK2CZ8FT81CuF6xdwIUvfbszI...
CVE-2025-4295
creationtimestamp| type| source ---|---|--- 2025-07-22 14:32:39+00:00| seen| Telegram/2kjdkZRe0bZSuwZTCsucAdvzAZ4Q1VV-DazPva0lmiXIbB4...
Adobe ColdFusion Cross-Site Scripting Vulnerability (CNVD-2025-16381)
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. A cross-site scripting vulnerability exists in Adobe ColdFusion, which is caused by improper validation...
CVE-2025-48120
creationtimestamp| type| source ---|---|--- 2025-05-16 17:34:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16724...
UBUNTU-CVE-2025-21580
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...
CVE-2025-26265
creationtimestamp| type| source ---|---|--- 2025-03-28 15:28:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9378...
CVE-2025-2740
creationtimestamp| type| source ---|---|--- 2025-03-25 07:24:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8624 2025-03-25 08:01:13+00:00| published-proof-of-concept| Telegram/1huWIRueQzufqMISTEPMEyKE3aRIFqK3qoq5n6GjRtUUGx0 2025-03-25 09:27:27+00:00| seen|...
CVE-2025-1747
creationtimestamp| type| source ---|---|--- 2025-02-28 17:51:55+00:00| seen| https://t.me/cvedetector/19158 2025-03-02 11:44:23+00:00| seen| Telegram/-TikUtwqoacLhSssnw7loeKwJDKvG2s1h7mFf27GtOZ8Hy8 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...
