CVE-2025-30168

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 7.5.2 and 8.0.2, the 3rd party authentication handling of Parse Server allows the authentication credentials of some specific authentication providers to be used across multiple Parse...

CVE-2025-2608

creationtimestamp| type| source ---|---|--- 2025-03-22 00:20:14+00:00| seen| https://t.me/cvedetector/20841 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-26500

creationtimestamp| type| source ---|---|--- 2025-03-21 23:20:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8459 2025-03-22 02:00:35+00:00| seen| https://t.me/cvedetector/20845 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-2604

creationtimestamp| type| source ---|---|--- 2025-03-21 21:22:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8455 2025-03-22 00:20:15+00:00| seen| https://t.me/cvedetector/20842 2025-03-25 15:23:59+00:00| published-proof-of-concept|...

CVE-2025-2606

creationtimestamp| type| source ---|---|--- 2025-03-21 21:21:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8440 2025-03-22 00:20:15+00:00| seen| https://t.me/cvedetector/20843 2025-03-25 15:24:03+00:00| published-proof-of-concept|...

CVE-2025-2607

creationtimestamp| type| source ---|---|--- 2025-03-21 21:21:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8439 2025-03-22 00:20:16+00:00| seen| https://t.me/cvedetector/20844 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-2601

creationtimestamp| type| source ---|---|--- 2025-03-21 20:24:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8427 2025-03-21 22:39:53+00:00| seen| https://t.me/cvedetector/20837 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-2602

creationtimestamp| type| source ---|---|--- 2025-03-21 20:24:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8426 2025-03-21 22:39:53+00:00| seen| https://t.me/cvedetector/20838 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-29641

creationtimestamp| type| source ---|---|--- 2025-03-21 15:19:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8352 2025-03-21 18:29:11+00:00| seen| https://t.me/cvedetector/20823 2025-03-24 18:23:08+00:00| published-proof-of-concept|...

CVE-2025-30168

creationtimestamp| type| source ---|---|--- 2025-03-21 15:19:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8350 2025-03-21 18:29:08+00:00| seen| https://t.me/cvedetector/20820 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-30168 Parse Server has an OAuth login vulnerability

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 7.5.2 and 8.0.2, the 3rd party authentication handling of Parse Server allows the authentication credentials of some specific authentication providers to be used across multiple Parse...

CVE-2025-30168

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 7.5.2 and 8.0.2, the 3rd party authentication handling of Parse Server allows the authentication credentials of some specific authentication providers to be used across multiple Parse...

CVE-2025-2591

creationtimestamp| type| source ---|---|--- 2025-03-21 14:19:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8345 2025-03-21 15:58:40+00:00| seen| https://t.me/cvedetector/20810 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-2589

creationtimestamp| type| source ---|---|--- 2025-03-21 13:19:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8333 2025-03-21 15:58:42+00:00| seen| https://t.me/cvedetector/20813 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

parse-server 授权问题漏洞

parse-server is a Node.js/Express parse server open-sourced by Parse Platform. An authorization issue vulnerability exists in parse-server versions prior to 7.5.2 and prior to 8.0.2, which stems from mishandling of third-party authentication and could result in authentication credentials being...

PT-2025-12429

Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 7.5.2 Parse Server versions prior to 8.0.2 Description The issue affects Parse Server's 3rd party authentication handling, allowing authentication credentials from one app to be used in another, if the same...

CVE-2025-30168: Improper Authentication

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 7.5.2 and 8.0.2, the 3rd party authentication handling of Parse Server allows the authentication credentials of some specific authentication providers to be used across multiple Parse...

CVE-2024-8898

creationtimestamp| type| source ---|---|--- 2025-03-20 17:18:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8243 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-30157

creationtimestamp| type| source ---|---|--- 2025-03-20 16:27:16+00:00| published-proof-of-concept| https://github.com/envoyproxy/envoy/security/advisories/GHSA-cf3q-gqg7-3fm9 2025-03-21 15:19:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8347 2025-03-21 18:29:08+00:0...

CVE-2024-6839

A flaw was found inflask-cors. This vulnerability allows unauthorized cross-origin access to sensitive data or functionality via improper regex path matching, prioritizing longer patterns over more specific ones. This issue leads to less restrictive CORS policies being applied to sensitive...