GHSA-RR6P-3PFG-562J XWiki Platform allows remote code execution as guest via SolrSearchMacros request

Impact Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduce on an instance, without being logged in, go to...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the Unselectable function. An attacker can obtain sensitive information by exploiting the function's improper handling of data visibility. Remediation There is no fixed version for AutoQueryable.Core. References...

CVE-2024-12284

creationtimestamp| type| source ---|---|--- 2025-02-20 02:16:30+00:00| seen| https://t.me/cvedetector/18487 2025-02-20 02:33:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lilatp35kb2m 2025-02-20 03:36:00+00:00| seen|...

CVE-2024-29125

creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:54+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodtii3522...

CVE-2024-27993

creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:50+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodsvnz32f...

CVE-2024-53974

creationtimestamp| type| source ---|---|--- 2025-02-19 20:24:51+00:00| seen| https://t.me/cvedetector/18452 2025-02-19 22:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likrwss7v72c...

CVE-2025-1118

creationtimestamp| type| source ---|---|--- 2025-02-19 20:24:49+00:00| seen| https://t.me/cvedetector/18449 2025-02-19 22:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likrwt4v6o24 2025-02-27 15:29:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5694 2025-05-16...

CVE-2025-1465

creationtimestamp| type| source ---|---|--- 2025-02-19 18:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likej7nyny2c 2025-02-19 20:25:10+00:00| seen| https://t.me/cvedetector/18463...

CVE-2023-47160

creationtimestamp| type| source ---|---|--- 2025-02-19 18:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likej7rgb42y 2025-02-19 19:48:49+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114032281394614424 2025-02-19 20:25:04+00:00| seen|...

CVE-2024-13364

creationtimestamp| type| source ---|---|--- 2025-02-19 09:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijgtptino2o 2025-02-19 12:03:06+00:00| seen| https://t.me/cvedetector/18422 2025-02-19 15:39:58+00:00| seen|...

CVE-2024-57257

creationtimestamp| type| source ---|---|--- 2025-02-18 23:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liifegmv4r2t 2025-02-19 01:11:12+00:00| seen| https://t.me/cvedetector/18393 2025-02-19 03:09:25+00:00| seen|...

CVE-2024-57254

creationtimestamp| type| source ---|---|--- 2025-02-18 23:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liife7e7sr2t 2025-02-19 01:11:05+00:00| seen| https://t.me/cvedetector/18387...

CVE-2025-25472

A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service DoS via a crafted DCM file...

CVE-2025-26614

creationtimestamp| type| source ---|---|--- 2025-02-18 21:16:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lii6nusvw52y 2025-02-18 22:34:38+00:00| published-proof-of-concept| Telegram/4XaNwPTMFyO1Vz7bqzn38wD37G0y60931j9yFHwcc2fnqpY 2025-02-18 22:45:47+00:00| seen|...

CVE-2024-4028

creationtimestamp| type| source ---|---|--- 2025-02-18 18:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihul5aitt2o 2025-02-18 20:59:52+00:00| seen| https://t.me/cvedetector/18354 2025-03-15 04:45:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7664...

New episode “In The Trend of VM” (#11): vulnerabilities that became trending in December and the final report on trending vulnerabilities for 2024

New episode "In The Trend of VM" 11: vulnerabilities that became trending in December and the final report on trending vulnerabilities for 2024. I made this episode exclusively for the Telegram channel @avleonovcom "Vulnerability Management and More". Video on YouTube, LinkedIn Post on Habr rus...

CVE-2024-55460

creationtimestamp| type| source ---|---|--- 2025-02-18 17:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihra66dsr2k 2025-02-18 19:19:16+00:00| seen| https://t.me/cvedetector/18334 2025-02-19 17:48:59+00:00| seen|...

CVE-2025-22207

creationtimestamp| type| source ---|---|--- 2025-02-18 16:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihntyr2gc2y 2025-02-18 19:19:18+00:00| seen| https://t.me/cvedetector/18336...

CVE-0001-0001

creationtimestamp| type| source ---|---|--- 2025-02-18 12:40:20+00:00| seen| https://bsky.app/profile/natakurage.cc/post/3lihbstib622f...

CVE-2024-13797

creationtimestamp| type| source ---|---|--- 2025-02-18 11:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lih53w5h4v2o 2025-02-18 12:38:09+00:00| seen| https://t.me/cvedetector/18319 2025-02-18 13:56:47+00:00| seen|...