CVE-2025-1406

creationtimestamp| type| source ---|---|--- 2025-02-21 04:19:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4846 2025-02-21 07:14:41+00:00| seen| https://t.me/cvedetector/18624 2025-02-21 07:22:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liobh2noeo27...

Cross-Site Scripting (XSS)

redaxo/source is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of the "Article Name" argument in the Structure Management Page, allowing remote attackers to inject malicious scripts...

CVE-2025-213817

creationtimestamp| type| source ---|---|--- 2025-02-11 18:19:24+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0050...

CVE-2025-25246

creationtimestamp| type| source ---|---|--- 2025-02-05 04:47:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113949465977567561 2025-02-05 05:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfsvyal5g2p 2025-02-05 06:30:19+00:00| seen|...

CVE-2024-49741

creationtimestamp| type| source ---|---|--- 2025-02-03 19:33:09+00:00| seen| https://vulnerability.circl.lu/bundle/cf59c148-4047-4ccd-8ba0-26fb7197899c...

CVE-2025-23976

creationtimestamp| type| source ---|---|--- 2025-01-31 09:16:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgznzp5dz22p...

Stored Cross-site Scripting (XSS)

redaxo/source is vulnerable to Stored cross-site scripting XSS. The vulnerability is due to improper input validation in the /media/test.html component, allowing attackers to inject malicious scripts into the password parameter...

CVE-2024-55457

creationtimestamp| type| source ---|---|--- 2025-01-06 13:20:48+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55457.yaml 2025-02-20 20:41:25+00:00| seen| https://t.me/cvedetector/18591 2025-06-29 00:00:00+00:00| seen| The Shadowserver...

CVE-2024-52570

creationtimestamp| type| source ---|---|--- 2024-11-18 19:03:36+00:00| seen| https://t.me/cvedetector/11356 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1522/ 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-43089

creationtimestamp| type| source ---|---|--- 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429 2024-11-13 19:44:42+00:00| seen| https://t.me/cvedetector/10857...

CVE-2024-47463

creationtimestamp| type| source ---|---|--- 2024-11-06 00:46:36+00:00| seen| https://t.me/cvedetector/9957 2024-11-06 16:21:22+00:00| seen| https://vulnerability.circl.lu/bundle/07fca93b-c28d-44e4-8497-18f4bbbd16f9 2024-11-12 12:30:05+00:00| seen| https://t.me/truesecator/6419...

CVE-2024-8925

creationtimestamp| type| source ---|---|--- 2024-10-08 07:00:59+00:00| seen| https://t.me/cvedetector/7303 2025-04-14 04:19:32+00:00| seen| https://vulnerability.circl.lu/bundle/9bbd91e2-309f-4b35-9b31-fc613b3101d9...

CVE-2024-47079 Unauthorized usage of remote hardware module because of missing channel verification

Meshtastic is an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices. Meshtastic firmware is an open source firmware implementation for the broader project. The remote hardware module of the firmware does not have proper checks to ensure a remote...

cute_png 缓冲区错误漏洞

cutepng is an application of cutepng open source. A buffer error vulnerability exists in cutepng version 1.05, which stems from a heap buffer overflow vulnerability contained in the cploadpngmem function at cutepng.h. The vulnerability is caused by the use of the cploadpngmem function at cutepng...

OpenIPMI 安全漏洞

OpenIPMI is an open source project from OpenIPMI Open Source. Designed to create a fully functional IPMI system that allows full access rights to all IPMI information on a server. A security vulnerability exists in OpenIPMI that stems from a lack of authorization type checking on incoming LAN...

CVE-2024-41076

creationtimestamp| type| source ---|---|--- 2024-07-29 17:58:06+00:00| seen| https://t.me/cvedetector/1861 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

About the security content of macOS Ventura 13.6.8

About the security content of macOS Ventura 13.6.8 This document describes the security content of macOS Ventura 13.6.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

CVE-2024-38472

creationtimestamp| type| source ---|---|--- 2024-07-17 12:43:59+00:00| seen| https://vulnerability.circl.lu/bundle/a23cbcad-e890-4df8-8736-9332ed4c3d47 2024-08-10 06:12:20+00:00| published-proof-of-concept| https://t.me/HackerArsenal/144 2024-08-12 11:45:27+00:00| seen|...

CVE-2024-36418 SuiteCRM authenticated RCE using connectors

SuiteCRM is an open-source Customer Relationship Management CRM software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in connectors allows an authenticated user to perform a remote code execution attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

AJ-Report SQL Injection Vulnerability (CNVD-2024-27556)

AJ-Report is anji-plus open source a completely open source , drag and drop editing visual design tools. AJ-Report 1.4.1 and earlier versions of SQL injection vulnerability , there is no detailed vulnerability details provided...