222 matches found
MAL-2025-39167 Malicious code in whiskey-5jj-project (npm)
The package whiskey-5jj-project was found to contain malicious code...
CVE-1999-1122
creationtimestamp| type| source ---|---|--- 2025-07-26 20:42:56+00:00| seen| https://gist.github.com/DEEPML1818/fef33d765177026df668a4476d4fe698 2025-07-26 20:48:36+00:00| seen| https://gist.github.com/DEEPML1818/8672f137125674c3936651ee63417e61...
CVE-2025-7277
creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-524/...
CVE-2025-49882
creationtimestamp| type| source ---|---|--- 2025-06-17 18:28:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt4q7weug2i...
CVE-2024-13929
creationtimestamp| type| source ---|---|--- 2025-05-22 19:20:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lprtj7csk42q...
CVE-2025-37919
No description is available for this CVE...
CVE-2025-47815
creationtimestamp| type| source ---|---|--- 2025-05-10 22:27:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15914 2025-05-10 23:27:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lou3qtaxuff2 2025-05-11 01:39:05+00:00| seen|...
CGA-R46W-XF92-8HFP
Bulletin has no description...
CVE-2025-24108
creationtimestamp| type| source ---|---|--- 2025-01-27 22:17:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxsm74af2f...
CVE-2024-13230
creationtimestamp| type| source ---|---|--- 2025-01-21 11:11:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113866040035703869 2025-01-21 11:15:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113866055399154408 2025-01-21 11:15:32+00:00| seen|...
CVE-2023-33998
creationtimestamp| type| source ---|---|--- 2024-12-13 16:59:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113646578192607435...
CVE-2024-11664
creationtimestamp| type| source ---|---|--- 2024-11-25 09:04:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113542787862924259 2024-11-25 14:43:09+00:00| published-proof-of-concept| https://t.me/LeakDBMS/1519 2026-07-10 21:07:08+00:00| seen|...
Exploit for Code Injection in Geoserver
CVE-2024-36401 This is a program for checking vulnerabilities...
CVE-2024-30163
creationtimestamp| type| source ---|---|--- 2024-05-19 15:31:55+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10529 2025-05-28 07:25:12+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-30163.yaml 2025-05-31...
CVE-2023-0342
creationtimestamp| type| source ---|---|--- 2024-04-12 13:48:42+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/mongodbopsmanagerdiagnosticarchiveinfo.rb 2024-04-13 12:45:41+00:00| seen| https://t.me/arpsyndicate/4652 2025-02-06 03:13:45+00:00| see...
GHSA-476G-V7HF-CW5M Cross-site Scripting (XSS) in Document Properties Parameter
Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.5.21 or apply this patch manually...
GHSA-HFMG-G39C-5444 pimcore is vulnerable to cross-site scripting in translate module
Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.5.20 or apply this patch manually...
Pimcore vulnerable to improper quoting of filters in Custom Reports
Impact Since a user with 'report' permission can already write arbitrary SQL queries and given the fact that this endpoint is using the GET method no CSRF protection, an attacker can inject an arbitrary query by manipulating a user to click on a link. The impact of this path traversal and arbitra...
