184 matches found
CVE-2025-3054
creationtimestamp| type| source ---|---|--- 2025-06-05 06:01:27+00:00| published-proof-of-concept| Telegram/uHWvAuvUwozE9xqR-TnjEBub-qWhHMqFHErXUgC3HaO00ME 2025-06-05 06:49:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqtq34qno7v2...
CVE-2025-48962
creationtimestamp| type| source ---|---|--- 2025-06-04 14:21:02+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrytbvuol42 2025-06-04 16:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqsbewobi72s...
CVE-2024-48782
File Upload vulnerability in DYCMS Open-Source Version v2.0.9.41 allows a remote attacker to execute arbitrary code via the application only detecting the extension of image files in the front-end...
CVE-2023-47116
Label Studio is a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.11.0 and was tested on version 1.8.2. Label Studio's SSRF protections that can be enabled by setting the SSRFPROTECTIONENABLED environment variable can be bypassed to access...
workers-oauth-provider 安全漏洞
workers-oauth-provider is a Cloudflare open source OAuth provider library for Cloudflare Workers. A security vulnerability exists in workers-oauth-provider that stems from not properly verifying that the redirecturi is in the allowed list, which could lead to credential theft...
CVE-2023-44752
creationtimestamp| type| source ---|---|--- 2025-04-23 15:48:34+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114388061970422869 2025-04-23 23:06:58+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3lnjcoaomwx2j...
CVE-2024-46772
creationtimestamp| type| source ---|---|--- 2025-04-07 08:44:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10685 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
Remote code execution vulnerability in Ingress NGINX Controller (CNVD-2025-05883)
Ingress NGINX Controller is an open source portal controller that uses NGINX as a reverse proxy and load balancer. Ingress NGINX Controller suffers from a remote code execution vulnerability that can be exploited by an attacker to gain access to sensitive data such as credentials and keys across...
lunary /v1/evaluators/endpoint access control error vulnerability
lunary is lunary open source a production toolkit for LLM . An access control error vulnerability exists in lunary, which stems from insufficient access control in /v1/evaluators/endpoints, and can be exploited by an attacker to obtain sensitive information...
CVE-2024-55279
creationtimestamp| type| source ---|---|--- 2025-03-24 16:39:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll56zvshem26 2025-03-24 18:24:37+00:00| seen| https://t.me/cvedetector/20983 2025-04-01 18:33:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9...
CVE-2024-12920
creationtimestamp| type| source ---|---|--- 2025-03-19 14:38:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqfwsjo4w2x 2025-03-19 14:38:52+00:00| seen| https://t.me/cvedetector/20638 2025-03-19 14:48:18+00:00| seen|...
CVE-2025-27501 Server Side Request Forgery in Ziti Console
OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint on the admin panel can be accessed without any form of authentication. This endpoint accepts a user-supplied URL parameter to connect to an OpenZiti Controller and performs a server-side...
CVE-2024-47896
creationtimestamp| type| source ---|---|--- 2025-02-22 15:20:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5029 2025-02-22 17:56:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lirvei2x4m2t 2025-02-22 19:10:22+00:00| seen| https://t.me/cvedetector/18731 2025-03-06...
CVE-2025-1406
creationtimestamp| type| source ---|---|--- 2025-02-21 04:19:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4846 2025-02-21 07:14:41+00:00| seen| https://t.me/cvedetector/18624 2025-02-21 07:22:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liobh2noeo27...
Cross-Site Scripting (XSS)
redaxo/source is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of the "Article Name" argument in the Structure Management Page, allowing remote attackers to inject malicious scripts...
CVE-2025-213817
creationtimestamp| type| source ---|---|--- 2025-02-11 18:19:24+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0050...
@better-auth/cli (>=0.0.1 <=1.1.16-beta.10), @vxrn/better-auth (>=1.1.368 <=1.1.416) +2 more potentially affected by unknown CVE via better-auth (>=0.4.10-beta.10 <=1.1.16-beta.9)
better-auth NPM version =0.4.10-beta.10, =0.0.1, =1.1.368, =1.1.0, =1.1.2-fix.1 - better-auth-monitor =1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-9X4V-XFQ5-M8X5...
CVE-2025-25246
creationtimestamp| type| source ---|---|--- 2025-02-05 04:47:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113949465977567561 2025-02-05 05:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfsvyal5g2p 2025-02-05 06:30:19+00:00| seen|...