CVE-2025-39529 WordPress Scriptless Social Sharing plugin <= 3.3.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robin Cornett Scriptless Social Sharing scriptless-social-sharing allows Stored XSS.This issue affects Scriptless Social Sharing: from n/a through = 3.3.0...

CVE-2025-39529 WordPress Scriptless Social Sharing <= 3.2.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robin Cornett Scriptless Social Sharing allows Stored XSS. This issue affects Scriptless Social Sharing: from n/a through 3.2.4...

CVE-2025-39529

CVE-2025-39529 affects the WordPress plugin Scriptless Social Sharing. A stored XSS exists due to improper input neutralization during web page generation, impacting versions up to 3.2.4. Public advisories confirm the vulnerability and indicate a patch is available in version 3.3.0 (and later). C...

I Know What You Bought Last Summer: Investigating User Data Leakage in E-Commerce Platforms

In the digital age, e-commerce has transformed the way consumers shop, offering convenience and accessibility. Nevertheless, concerns about the privacy and security of personal information shared on these platforms have risen. In this work, we investigate user privacy violations, noting the risks...

WordPress plugin Scriptless Social Sharing 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

Hertz data breach caused by CL0P ransomware attack on vendor

The Hertz Corporation, on behalf of Hertz, Dollar, and Thrifty brands, is sending breach notifications to customers who may have had their name, contact information, driver's license, and—in rare cases—Social Security Number exposed in a data breach. The car rental giant’s data was stolen in a...

Security Bulletin: Multiple vulnerabilities affect PowerSC and PowerSC MFA

Summary There are multiple vulnerabilities in PowerSC and PowerSC MFA. Vulnerability Details CVEID:CVE-2023-50939 DESCRIPTION: IBM PowerSC 1.3, 2.0, and 2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID:...

CVE-2025-31494 AutoGPT allows cross-user sharing of node execution results through WebSockets API

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. The AutoGPT Platform's WebSocket API transmitted node execution updates to subscribers based on the graphid+graphversion. Additionally, there was no che...

CVE-2025-31494

AutoGPT CVE-2025-31494 affects the WebSocket API where node execution updates are published per graph_id+graph_version. A missing permission check allowed subscribers within the same instance to receive another user�s graph execution updates, exposing potentially sensitive data. The issue does no...

CVE-2024-49706

creationtimestamp| type| source ---|---|--- 2025-04-14 12:54:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11604 2025-04-14 17:10:52+00:00| seen| https://t.me/cvedetector/22851 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2024-51942

creationtimestamp| type| source ---|---|--- 2025-04-10 19:49:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11332 2025-08-19 13:26:46+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...

CVE-2024-51946

creationtimestamp| type| source ---|---|--- 2025-04-10 19:49:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11328 2025-08-19 13:26:46+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...

CVE-2024-51948

creationtimestamp| type| source ---|---|--- 2025-04-10 19:49:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11326 2025-08-19 13:26:46+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...

CVE-2024-45551

creationtimestamp| type| source ---|---|--- 2025-04-07 17:45:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10747 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10 07:00:42+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea...

CVE-2025-3351

creationtimestamp| type| source ---|---|--- 2025-04-07 17:04:20+00:00| seen| https://t.me/cvedetector/22313 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10 07:00:41+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea...

CVE-2025-2251

creationtimestamp| type| source ---|---|--- 2025-04-07 17:04:09+00:00| seen| https://t.me/cvedetector/22306 2025-04-24 11:06:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13215 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10 07:00:40+00:00| seen|...

The vulnerability of the webapi component of the cloud software for file storage, synchronization, and sharing with Synology Drive Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the webapi component of the cloud software for file storage, synchronization, and sharing with Synology Drive Server is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthoriz...

CVE-2024-12537

creationtimestamp| type| source ---|---|--- 2025-04-04 09:35:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10423 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

SUSE CVE-2024-42325

Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc...

Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent

Cybersecurity researchers have disclosed details of a new vulnerability impacting Google's Quick Share data transfer utility for Windows that could be exploited to achieve a denial-of-service DoS or send arbitrary files to a target's device without their approval. The flaw, tracked as...