CVE-2025-29814

creationtimestamp| type| source ---|---|--- 2025-03-21 02:48:18+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114198137884586801 2025-03-21 02:58:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114198176776904764 2025-03-21 03:14:24+00:00| seen|...

CVE-2025-29922

creationtimestamp| type| source ---|---|--- 2025-03-20 18:20:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8255 2025-03-20 18:40:13+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lktdvxogex2g 2025-03-20 19:00:50+00:00| seen|...

bedford-hotel-london.hotel-ds.com Cross Site Scripting vulnerability OBB-4038399

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

backoffice.ipzv.de Cross Site Scripting vulnerability OBB-4038351

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

markator.fr Cross Site Scripting vulnerability OBB-4038184

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Santesoft Sante DICOM Viewer Pro

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause memory corruption that would result in execution of arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...

Drupal 10.3.x < 10.3.14 / 10.4.x < 10.4.5 / 11.x < 11.0.13 / 11.1.x < 11.1.5 Drupal Vulnerability (SA-CORE-2025-004)

According to its self-reported version, the instance of Drupal running on the remote web server is 10.3.x prior to 10.3.14, 10.4.x prior to 10.4.5, 11.x prior to 11.0.13, or 11.1.x prior to 11.1.5. It is, therefore, affected by a vulnerability. - Improper Neutralization of Input During Web Page...

CVE-2025-26475

creationtimestamp| type| source ---|---|--- 2025-03-19 18:43:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqtnbfvtu26 2025-03-19 18:49:29+00:00| seen| https://t.me/cvedetector/20652...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in model/role.go. A user with the Viewer role, configured with No Access to Reporting, can access team and site statistics. Remediation Upgrade github.com/mattermost/mattermost/server/public/model to version 0.1....

Incorrect Authorization

Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Incorrect Authorization in model/role.go. A user with the Viewer role, configured with No Access to Reporting, can access team and site statistics...

CVE-2025-1472 Unauthorized View Access to Site Statistics and Team Statistics

Mattermost versions 9.11.x = 9.11.8 fail to properly perform authorization of the Viewer role which allows an attacker with the Viewer role configured with No Access to Reporting to still view team and site statistics...

arlo-midtown.hotels-innewyork.com Cross Site Scripting vulnerability OBB-4037904

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

heinonline.org Cross Site Scripting vulnerability OBB-4037903

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

archibald-city-hotel-prague.at-hotels.com Cross Site Scripting vulnerability OBB-4037875

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

app.singleactive.ch Cross Site Scripting vulnerability OBB-4037830

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

apolloblinds.com.au Cross Site Scripting vulnerability OBB-4037815

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

apartamento-castilla-seville-41010.es-andalucia.com Cross Site Scripting vulnerability OBB-4037792

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-25040

creationtimestamp| type| source ---|---|--- 2025-03-18 19:49:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7985 2025-03-18 20:18:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihzqn7p2n 2025-03-18 21:55:40+00:00| seen| https://t.me/cvedetector/20605...

whmcs.themetags.com Cross Site Scripting vulnerability OBB-4037684

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-1433

creationtimestamp| type| source ---|---|--- 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-155/ 2025-04-24 21:07:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13340...