CVE-2024-9773

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

CVE-2025-30781

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in WPFactory Scheduled & Automatic Order Status Controller for WooCommerce order-status-rules-for-woocommerce allows Phishing.This issue affects Scheduled & Automatic Order Status Controller for WooCommerce: from n/a through = 3.7.1...

CVE-2025-2224

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'parsequery' function in all versions up to, and including, 8.2. This makes it possible fo...

CVE-2025-27928

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused...

WordPress Scheduled & Automatic Order Status Controller for WooCommerce plugin <= 3.7.1 - Open Redirection Vulnerability

Open Redirection Vulnerability discovered by Le Ngoc Anh in WordPress Plugin Scheduled & Automatic Order Status Controller for WooCommerce versions = 3.7.1...

Netscaler sends Syslog messages for SSL Handshake with ””

Syslog messages sent from the NetScaler to the external Syslog Server includes unexpected occurrence of "\n" Interestingly, a pattern is seen where ”\n” is seen periodically after every 6 messagesor similar Need to know if this a normal behavior or it's an issue...

WordPress plugin “Scheduled & Automatic Order Status Controller for WooCommerce” has a vulnerability related to input validation errors.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

PT-2025-13065

Name of the Vulnerable Software and Affected Versions Scheduled & Automatic Order Status Controller for WooCommerce versions 3.7.1 and earlier Description The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, which allows phishing. This...

CVE-2025-30781: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in WPFactory Scheduled & Automatic Order Status Controller for WooCommerce order-status-rules-for-woocommerce allows Phishing.This issue affects Scheduled & Automatic Order Status Controller for WooCommerce: from n/a through = 3.7.1...

GHSA-56P6-QW3C-FQ2G Suspended Directus user can continue to use session token to access API

Summary Since the user status is not checked when verifying a session token a suspended user can use the token generated in session auth mode to access the API despite their status. Details There is a check missing in verifySessionJWT to verify that a user is actually still active and allowed to...

CVE-2022-34444

creationtimestamp| type| source ---|---|--- 2025-03-26 15:26:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8863...

CVE-2024-30570

creationtimestamp| type| source ---|---|--- 2025-03-26 12:41:34+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-30570.yaml 2025-03-27 21:02:06+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3llf73ztmhl2s...

CVE-2024-30569

creationtimestamp| type| source ---|---|--- 2025-03-26 12:40:48+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-30569.yaml 2025-03-27 21:02:06+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3llf73zrfnu2z...

PT-2025-12863

Name of the Vulnerable Software and Affected Versions BWL Advanced FAQ Manager plugin for WordPress versions up to and including 2.1.4 Description The issue allows for unauthorized modification of data, potentially leading to a denial of service. This is due to a missing capability check on the b...

CVE-2025-29789

creationtimestamp| type| source ---|---|--- 2025-03-25 21:25:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8786 2025-03-25 23:40:33+00:00| seen| https://t.me/cvedetector/21121 2025-03-26 01:04:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llalpbmmy...

CVE-2025-27834

creationtimestamp| type| source ---|---|--- 2025-03-25 20:24:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8749 2025-03-25 23:40:45+00:00| seen| https://t.me/cvedetector/21129 2025-03-26 01:05:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llalqxaksp2l...

CVE-2025-1449

creationtimestamp| type| source ---|---|--- 2025-03-25 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-02 2025-03-31 16:33:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9701 2025-03-31 16:44:25+00:00| seen|...

CVE-2025-2754

creationtimestamp| type| source ---|---|--- 2025-03-25 09:24:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8629 2025-03-25 10:01:07+00:00| published-proof-of-concept| Telegram/d874YtfjRzSeJrj5ty8uatKWcKwQKjZYN7PQfn69YdZXOI 2025-03-25 10:54:30+00:00| seen|...

CVE-2025-2752

creationtimestamp| type| source ---|---|--- 2025-03-25 08:23:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8625 2025-03-25 11:08:10+00:00| seen| https://t.me/cvedetector/21081 2026-02-14 23:26:13+00:00| seen|...

CVE-2024-10207

creationtimestamp| type| source ---|---|--- 2025-03-25 06:57:07+00:00| seen| https://t.me/cvedetector/21044 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-05...