dataoil.com.ar Cross Site Scripting vulnerability OBB-4036393

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sy-samira.ch Cross Site Scripting vulnerability OBB-4036391

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OSV-2025-202 UNKNOWN READ in _blit_xrgb32_lerp_spans

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=402836107 Crash type: UNKNOWN READ Crash state: blitxrgb32lerpspans cairorectangularscanconvertergenerate compositeboxes...

RHEL 8 : kernel (RHSA-2025:2489)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2489 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: HID: core: zero-initialize the...

CVE-2025-2308

creationtimestamp| type| source ---|---|--- 2025-03-14 20:48:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7640 2025-03-14 23:24:23+00:00| seen| https://t.me/cvedetector/20342 2025-03-15 00:51:34+00:00| seen|...

CVE-2025-29771

creationtimestamp| type| source ---|---|--- 2025-03-14 19:45:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7634 2025-03-14 20:53:36+00:00| seen| https://t.me/cvedetector/20328 2025-03-14 22:06:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkemn4f65s2k...

GHSA-R8GC-QC2C-C7VH

creationtimestamp| type| source ---|---|--- 2025-03-14 17:48:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7607 2025-03-14 18:11:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114162131093338024...

CVE-2024-47573

creationtimestamp| type| source ---|---|--- 2025-03-14 16:42:22+00:00| seen| https://t.me/cvedetector/20292 2025-03-14 16:46:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qhdnux2x 2025-03-14 18:04:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/1141621035662869...

CVE-2024-12810

creationtimestamp| type| source ---|---|--- 2025-03-14 13:48:20+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114161097115928156 2025-03-14 13:56:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkdra6cpcu26 2025-03-14 15:02:11+00:00| seen|...

Memory corruption issues is Cloudflare zlib implementation

...

CVE-2025-30022

creationtimestamp| type| source ---|---|--- 2025-03-14 05:50:15+00:00| seen| https://t.me/cvedetector/20261 2025-03-14 06:41:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkcyxk2iof2j...

CVE-2024-11284

creationtimestamp| type| source ---|---|--- 2025-03-14 04:53:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7526 2025-03-14 05:40:18+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkcvjuanhc2n 2025-03-14 05:48:25+00:00| seen|...

Ubuntu: Security Advisory (USN-7332-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-1650

creationtimestamp| type| source ---|---|--- 2025-03-13 19:42:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7474 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-158/ 2025-04-24 21:07:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13343...

CVE-2025-24053

creationtimestamp| type| source ---|---|--- 2025-03-13 17:45:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7453 2025-03-13 18:13:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114156478726103747 2025-03-13 21:28:49+00:00| seen| https://t.me/cvedetector/20255 2025-03-13...

CVE-2025-29994

creationtimestamp| type| source ---|---|--- 2025-03-13 13:08:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114155279058410374 2025-03-13 13:31:52+00:00| seen| Telegram/xe2ey9QZy3C60YFmNe9CqutDcHb7CC1cr5CKlx9gtbgm3M 2025-03-13 15:37:08+00:00| seen| https://t.me/cvedetector/20214...

CVE-2025-29996

creationtimestamp| type| source ---|---|--- 2025-03-13 13:08:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114155279058410374 2025-03-13 13:31:52+00:00| seen| Telegram/xe2ey9QZy3C60YFmNe9CqutDcHb7CC1cr5CKlx9gtbgm3M 2025-03-13 15:37:12+00:00| seen| https://t.me/cvedetector/20216...

CVE-2025-0660

Concrete CMS versions 9.0.0 through 9.3.9 are affected by a stored XSS in Folder Function.The "Add Folder" functionality lacks input sanitization, allowing a rogue admin to inject XSS payloads as folder names. The Concrete CMS security team gave this vulnerability a CVSS 4.0 Score of 4.8 with...

CVE-2025-2250 WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins <= 2.32 - Authenticated (Admin+) SQL Injection

The WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.32 due to insufficient escaping on the user supplied parameter and lack of sufficient...

WordPress All in One WP Migration plugin <= 7.89 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Webbernaut in WordPress Plugin All-in-One WP Migration versions = 7.89...