83310 matches found
CVE-2024-13817
creationtimestamp| type| source ---|---|--- 2025-01-31 03:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgyzueaj662f...
PT-2025-2010
Name of the Vulnerable Software and Affected Versions WP MediaTagger WordPress plugin versions 4.1.1 and earlier Description The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitised and escaped before being outputted back in the page. This coul...
CVE-2024-1211
creationtimestamp| type| source ---|---|--- 2025-01-30 23:46:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113919969169827912 2025-01-31 00:16:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgypuw6doj2c 2025-01-31 01:12:21+00:00| seen|...
CVE-2025-0882
creationtimestamp| type| source ---|---|--- 2025-01-30 21:09:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113919351297486254 2025-01-31 01:08:46+00:00| seen| https://t.me/cvedetector/16840...
GHSA-VPXM-CR3R-PJP9 General OpenMRS Security Advisory, January 2025: Penetration Testing Results and Patches
Impact We recently underwent Penetration Testing of OpenMRS by a third-party company. Vulnerabilities were found, and fixes have been made and released. We've released security updates that include critical fixes, and so, we strongly recommend upgrading affected modules. This notice applies to al...
Malicious code in transaction-report (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c40d933bc68a269e1fe8750bef686c53bbc78251b864aec8d83093a175fcac Any computer that has this package installed or running should be considered...
MAL-2025-693 Malicious code in transaction-report (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c40d933bc68a269e1fe8750bef686c53bbc78251b864aec8d83093a175fcac Any computer that has this package installed or running should be considered...
GHSA-FC89-JGHX-8PVG
creationtimestamp| type| source ---|---|--- 2025-01-30 15:58:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113918130082310835...
CVE-2025-23367
creationtimestamp| type| source ---|---|--- 2025-01-30 15:16:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxrnyemmy2e 2025-01-30 18:12:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3499 2025-01-30 18:27:06+00:00| seen| https://t.me/cvedetector/16801...
CVE-2025-0871
creationtimestamp| type| source ---|---|--- 2025-01-30 15:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxrnt5xpm2h 2025-01-30 18:27:02+00:00| seen| https://t.me/cvedetector/16799...
CVE-2024-13720
creationtimestamp| type| source ---|---|--- 2025-01-30 14:17:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxofak4jv27 2025-01-30 15:32:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113918025705481072 2025-01-30 16:46:22+00:00| seen|...
CVE-2025-0747
creationtimestamp| type| source ---|---|--- 2025-01-30 12:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhm6qxgx2b 2025-01-30 13:11:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3477 2025-01-30 14:15:53+00:00| seen| https://t.me/cvedetector/16757...
CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware
CISA released a fact sheet, Contec CMS8000 Contains a Backdoor, detailing an analysis of three firmware package versions of the Contec CMS8000, a patient monitor used by the U.S. Healthcare and Public Health HPH sector. Analysts discovered that an embedded backdoor function with a hard-coded IP...
CVE-2024-13706
creationtimestamp| type| source ---|---|--- 2025-01-30 11:15:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113917016533701154 2025-01-30 11:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxeaeslcw2w 2025-01-30 13:11:26+00:00| seen|...
CVE-2025-21107
creationtimestamp| type| source ---|---|--- 2025-01-30 09:26:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113916587999368700 2025-01-30 11:18:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3472 2025-01-30 12:35:30+00:00| seen| https://t.me/cvedetector/16749 2025-01-30...
CVE-2024-12921
creationtimestamp| type| source ---|---|--- 2025-01-30 05:25:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113915640840193737 2025-01-30 06:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwti7re2v2t 2025-01-30 07:11:22+00:00| seen|...
CVE-2025-0848
creationtimestamp| type| source ---|---|--- 2025-01-30 01:33:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113914727312277831 2025-01-30 02:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwg3kux642t 2025-01-30 03:18:43+00:00|...
PT-2025-5353 · Unknown +1 · Kubewarden-Controller +1
Name of the Vulnerable Software and Affected Versions: kubewarden-controller versions prior to 1.21.0 Description: The issue concerns the validation of namespaced resources by AdmissionPolicy and AdmissionPolicyGroup policies in kubewarden-controller. An attacker can exploit this to prevent the...
PT-2025-5376 · Broadcom · Symantec Privileged Access Management
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to improper input validation in the CSRF filter, which results in unsanitized user input being written to the application logs. No...
