CVE-2025-2602

creationtimestamp| type| source ---|---|--- 2025-03-21 20:24:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8426 2025-03-21 22:39:53+00:00| seen| https://t.me/cvedetector/20838 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-29641

creationtimestamp| type| source ---|---|--- 2025-03-21 15:19:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8352 2025-03-21 18:29:11+00:00| seen| https://t.me/cvedetector/20823 2025-03-24 18:23:08+00:00| published-proof-of-concept|...

CVE-2025-30168

creationtimestamp| type| source ---|---|--- 2025-03-21 15:19:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8350 2025-03-21 18:29:08+00:00| seen| https://t.me/cvedetector/20820 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-30168 Parse Server has an OAuth login vulnerability

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 7.5.2 and 8.0.2, the 3rd party authentication handling of Parse Server allows the authentication credentials of some specific authentication providers to be used across multiple Parse...

CVE-2025-2591

creationtimestamp| type| source ---|---|--- 2025-03-21 14:19:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8345 2025-03-21 15:58:40+00:00| seen| https://t.me/cvedetector/20810 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-2589

creationtimestamp| type| source ---|---|--- 2025-03-21 13:19:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8333 2025-03-21 15:58:42+00:00| seen| https://t.me/cvedetector/20813 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

parse-server 授权问题漏洞

parse-server is a Node.js/Express parse server open-sourced by Parse Platform. An authorization issue vulnerability exists in parse-server versions prior to 7.5.2 and prior to 8.0.2, which stems from mishandling of third-party authentication and could result in authentication credentials being...

CVE-2024-8898

creationtimestamp| type| source ---|---|--- 2025-03-20 17:18:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8243 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-30157

creationtimestamp| type| source ---|---|--- 2025-03-20 16:27:16+00:00| published-proof-of-concept| https://github.com/envoyproxy/envoy/security/advisories/GHSA-cf3q-gqg7-3fm9 2025-03-21 15:19:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8347 2025-03-21 18:29:08+00:0...

CVE-2024-6839

A flaw was found inflask-cors. This vulnerability allows unauthorized cross-origin access to sensitive data or functionality via improper regex path matching, prioritizing longer patterns over more specific ones. This issue leads to less restrictive CORS policies being applied to sensitive...

GHSA-7RXF-GVFG-47G4 Flask-CORS improper regex path matching vulnerability

corydolphin/flask-cors version 5.0.1 contains an improper regex path matching vulnerability. The plugin prioritizes longer regex patterns over more specific ones when matching paths, which can lead to less restrictive CORS policies being applied to sensitive endpoints. This mismatch in regex...

Cross-site Request Forgery (CSRF)

Overview dbgpt is a DB-GPT is an experimental open-source project that uses localized GPT large models to interact with your data and environment. With this solution, you can beassured that there is no risk of data leakage, and your data is 100% private and secure. Affected versions of this packa...

PYSEC-2025-81

A Cross-Origin Resource Sharing CORS vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can lead to unauthorized dat...

CVE-2024-8487

A Cross-Origin Resource Sharing CORS vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can lead to unauthorized dat...

PYSEC-2025-81

A Cross-Origin Resource Sharing CORS vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can lead to unauthorized dat...

Danswer 访问控制错误漏洞

Danswer is Danswer AI open source an artificial intelligence assistant that connects to company documents, applications and people. An Access Control Error vulnerability exists in Danswer v1.4.1, which stems from a misconfiguration of CORS and could lead to the disclosure of sensitive information...

AgentScope 跨站请求伪造漏洞

AgentScope is a ModelScope open source application. Build LLM-based multi-intelligence applications more simply. AgentScope suffers from a cross-site request forgery vulnerability that stems from the CORS header on the AgentScope Studio backend server being configured too loosely to allow...

Prefect 访问控制错误漏洞

Prefect is a workflow orchestration tool from Prefect Open Source that enables developers to build, observe and react to data pipelines. An access control error vulnerability exists in Prefect version 2.20.2 that stems from a CORS misconfiguration that allows unauthorized domains to access...

CVE-2025-29118

creationtimestamp| type| source ---|---|--- 2025-03-19 20:29:53+00:00| seen| https://t.me/cvedetector/20664 2025-03-21 14:19:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8346 2025-08-12 13:33:27+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996 2025-08-21...

Multiple vulnerabilities in home gateway HGW-BL1500HM

Overview Home gateway HGW-BL1500HM provided by KDDI CORPORATION contains multiple vulnerabilities listed below. Stored cross-site scripting in the NickName registration screen CWE-79 - CVE-2025-27567 Stored cross-site scripting in the USB storage file-sharing function CWE-79 - CVE-2025-27574 Path...