27482 matches found
CVE-2025-50143
creationtimestamp| type| source ---|---|--- 2025-06-14 07:31:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkgms3l2q2u...
CVE-2025-5589: Improper Neutralization of Input During Web Page Generation
The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘status-classic-offline-text’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2025-28384
creationtimestamp| type| source ---|---|--- 2025-06-13 15:25:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114676749186057555 2025-06-13 17:04:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriw6a2svp2m...
CVE-2025-28380
creationtimestamp| type| source ---|---|--- 2025-06-13 13:33:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18293 2025-06-13 15:25:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114676749186057555...
CVE-2025-5841
creationtimestamp| type| source ---|---|--- 2025-06-13 02:34:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18251 2025-06-13 05:30:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrhpgs6cax2s...
CVE-2025-49589
creationtimestamp| type| source ---|---|--- 2025-06-12 21:34:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18232 2025-06-13 01:43:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrhcqkr7ea23...
CVE-2025-5195
An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. It was possible for authenticated users to access arbitrary compliance frameworks, leading to unauthorized data disclosure...
CVE-2022-4976
creationtimestamp| type| source ---|---|--- 2025-06-12 01:03:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114667698175038142 2025-06-12 01:31:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18141 2025-06-12 05:34:21+00:00| seen|...
Security update for nbdkit
This update for nbdkit fixes the following issues: Update to version 1.36.5. Security fixes: CVE-2025-47712: integer overflow in blocksize filter when processing client block status requests larger than 232 will trigger an assertion failure and cause a denial-of-service. bsc1243108. CVE-2025-4771...
Complaint Management System /admin/updatecomplaint.php File SQL Injection Vulnerability
Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Status in the file /admin/updatecomplaint.php. An attacker can...
CVE-2025-4774
creationtimestamp| type| source ---|---|--- 2025-06-10 11:34:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17870...
PHPGurukul Restaurant Table Booking System has a security vulnerability
Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter searchdata in the file /check-status.php,...
GHSA-G3P6-82VC-43JH
creationtimestamp| type| source ---|---|--- 2025-06-09 21:32:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17789...
GHSA-9HJG-9R4M-MVJ7
creationtimestamp| type| source ---|---|--- 2025-06-09 19:48:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17750 2025-11-05 11:48:09+00:00| seen| https://gist.github.com/Token-Eater/a4d1d6ce67e8450e1a8f456b468e3599 2025-11-05 11:55:10+00:00| seen|...
GHSA-X8MP-CHX3-6X2P
creationtimestamp| type| source ---|---|--- 2025-06-09 12:54:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114653505710010379 2025-06-09 13:02:03+00:00| published-proof-of-concept| Telegram/AvRPE1FYyApk1Jln3Af0piOZ09oDjaUbhCE1oirCL83hBqc 2025-06-09 14:12:14+00:00| seen|...
DEBIAN-CVE-2025-47712
A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service...
UBUNTU-CVE-2025-47712
A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service...
CVE-2025-47711 Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service
There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error,...
CVE-2025-47711
CVE-2025-47711 concerns the nbdkit server: when handling responses from plugins about data block status, a client requesting a very large range and receiving a larger single block can trigger a critical internal error, causing a denial of service. The connected advisories document affected distri...
CVE-2025-47711 Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service
There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error,...