CVE-2025-2025

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the givereportsearnings function in all versions up to, and including, 3.22.0. This makes it possible for unauthenticated attackers to...

CVE-2025-2370

creationtimestamp| type| source ---|---|--- 2025-03-16 13:09:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114172267350542304 2025-03-17 09:46:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkkuom7b4s2s 2025-03-17 09:46:58+00:00| published-proof-of-concept|...

CVE-2025-2025

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the givereportsearnings function in all versions up to, and including, 3.22.0. This makes it possible for unauthenticated attackers to...

CVE-2025-2025

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the givereportsearnings function in all versions up to, and including, 3.22.0. This makes it possible for unauthenticated attackers to...

CVE-2025-2025 Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the givereportsearnings function in all versions up to, and including, 3.22.0. This makes it possible for unauthenticated attackers to...

CVE-2025-2025 Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the givereportsearnings function in all versions up to, and including, 3.22.0. This makes it possible for unauthenticated attackers to...

CVE-2025-2025

CVE-2025-2025 affects the WordPress plugin GiveWP (Donations) up to version 3.22.0, where a missing capability check in the function give_reports_earnings() allows unauthenticated data disclosure of earnings reports. Connected exploit material demonstrates unauthorized access scenarios and confir...

CVE-2024-47573

creationtimestamp| type| source ---|---|--- 2025-03-14 16:42:22+00:00| seen| https://t.me/cvedetector/20292 2025-03-14 16:46:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qhdnux2x 2025-03-14 18:04:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/1141621035662869...

CVE-2025-0062

SAP BusinessObjects Business Intelligence Platform allows an attacker to inject JavaScript code in Web Intelligence reports. This code is then executed in the victim's browser each time the vulnerable page is visited by the victim. On successful exploitation, an attacker could cause limited impac...

CVE-2025-24071

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-18 14:51:30+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/20343 2025-03-18 16:26:06+00:00| published-proof-of-concept|...

CVE-2025-27494

creationtimestamp| type| source ---|---|--- 2025-03-11 10:40:18+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk3uvjrpt22v 2025-03-11 11:27:24+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lk3xjodn7s2c 2025-03-11 11:35:11+00:00| seen|...

CVE-2024-13919

creationtimestamp| type| source ---|---|--- 2025-03-10 10:39:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6988 2025-03-10 11:48:30+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114137976660008505 2025-03-10 12:20:52+00:00| seen|...

CVE-2025-27623

creationtimestamp| type| source ---|---|--- 2025-03-06 01:18:16+00:00| seen| https://t.me/cvedetector/19659 2025-03-06 03:34:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljoks6u6qa2q 2025-03-06 16:34:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6710 2025-03-10...

Linux Distros Unpatched Vulnerability : CVE-2024-50197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: pinctrl: intel: platform: fix error path in deviceforeachchildnode The deviceforeachchildnod...

Linux Distros Unpatched Vulnerability : CVE-2024-50301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - security/keys: fix slab-out-of-bounds in keytaskpermission KASAN reports an out of bounds read: BUG: KASAN: slab-out-of-bounds in kuidval...

CVE-2024-12799

creationtimestamp| type| source ---|---|--- 2025-03-05 15:33:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6554 2025-03-05 16:00:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljndxytswc2y 2025-03-05 18:37:11+00:00| seen| https://t.me/cvedetector/19647 2025-03-08...

CVE-2025-1515

creationtimestamp| type| source ---|---|--- 2025-03-05 09:35:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6522 2025-03-05 11:00:40+00:00| seen| Telegram/0Yqtjw9YH6-bbPYOOOdcDrS2V3-Mk62rGjDskGptkEdbLqw 2025-03-05 11:49:56+00:00| seen|...

CVE-2025-27676

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Reports V-2023-002...

CVE-2025-27681

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6490 2025-03-05 08:34:36+00:00| seen| https://t.me/cvedetector/19587 2025-03-06 12:00:28+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzt3i6j2g 2025-04-15...

CVE-2025-27676

Vulnerability CVE-2025-27676 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923, enabling Cross-Site Scripting in Reports (V-2023-002). The CVSS records an in-scope network-exposed, low- to medium-impact issue with user interaction requ...