27550 matches found
CVE-2025-26616
creationtimestamp| type| source ---|---|--- 2025-02-18 21:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lii6o3h4wy2y 2025-02-18 22:34:38+00:00| published-proof-of-concept| Telegram/4XaNwPTMFyO1Vz7bqzn38wD37G0y60931j9yFHwcc2fnqpY 2025-02-18 22:45:47+00:00| seen|...
CVE-2024-56882
creationtimestamp| type| source ---|---|--- 2025-02-18 18:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihulgftef27 2025-02-18 20:59:50+00:00| seen| https://t.me/cvedetector/18352 2025-02-18 21:56:21+00:00| seen|...
CVE-2024-13797
creationtimestamp| type| source ---|---|--- 2025-02-18 11:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lih53w5h4v2o 2025-02-18 12:38:09+00:00| seen| https://t.me/cvedetector/18319 2025-02-18 13:56:47+00:00| seen|...
CVE-2025-0423
creationtimestamp| type| source ---|---|--- 2025-02-18 08:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligt22k7vq2y 2025-02-18 08:41:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4760 2025-02-18 10:57:36+00:00| seen| https://t.me/cvedetector/18300...
CVE-2024-13848
creationtimestamp| type| source ---|---|--- 2025-02-18 05:17:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligj2azvqe2t 2025-02-18 07:56:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4738 2025-02-18 09:16:50+00:00| seen| https://t.me/cvedetector/18280...
PT-2025-6527
Name of the Vulnerable Software and Affected Versions Open Hours – Easy Opening Hours plugin for WordPress versions up to and including 1.0.9 Description The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's 'open-hours-current-statu...
CVE-2024-12813: Improper Neutralization of Input During Web Page Generation
The Open Hours – Easy Opening Hours plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'open-hours-current-status' shortcode in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...
CVE-2025-26771
creationtimestamp| type| source ---|---|--- 2025-02-17 11:58:19+00:00| seen| https://infosec.exchange/users/cve/statuses/114019106732507120 2025-02-17 12:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liepyzl3zt2t 2025-02-17 14:02:17+00:00| seen|...
CVE-2024-54756
creationtimestamp| type| source ---|---|--- 2025-02-17 08:34:31+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3liedme2kf22n 2025-02-17 20:02:02+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3lifjzq2s6f2a 2025-02-20 23:16:56+00:00| published-proof-of-concept|...
CVE-2025-1377
creationtimestamp| type| source ---|---|--- 2025-02-17 05:08:14+00:00| seen| https://infosec.exchange/users/cve/statuses/114017494197576565 2025-02-17 05:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidyjdfsbu27 2025-02-17 06:39:27+00:00| seen|...
CVE-2025-22291
creationtimestamp| type| source ---|---|--- 2025-02-16 22:44:16+00:00| seen| https://infosec.exchange/users/cve/statuses/114015984125377397 2025-02-16 23:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidefla7jx23 2025-02-17 00:40:36+00:00| seen|...
CVE-2024-10581 DirectoryPress Frontend <= 2.7.9 - Cross-Site Request Forgery to Listing Status Update
The DirectoryPress Frontend plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.9. This is due to missing or incorrect nonce validation on the dpfllistingStatusChange function. This makes it possible for unauthenticated attackers to update...
CVE-2025-22209
The JS Jobs plugin (versions 1.1.5-1.4.3) for the Joomla CMS contains a SQL injection vulnerability. This flaw allows authenticated attackers with administrator privileges to execute arbitrary SQL commands by exploiting the searchpaymentstatus parameter within the Employer Payment History search ...
[SECURITY] Fedora 41 Update: nginx-mod-vts-0.2.3-3.fc41
Nginx virtual host traffic status module...
[SECURITY] Fedora 40 Update: nginx-mod-vts-0.2.3-3.fc40
Nginx virtual host traffic status module...
CVE-2024-10581: Cross-Site Request Forgery (CSRF)
The DirectoryPress Frontend plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.9. This is due to missing or incorrect nonce validation on the dpfllistingStatusChange function. This makes it possible for unauthenticated attackers to update...
PT-2025-6498 · WordPress · Directorypress Frontend
Name of the Vulnerable Software and Affected Versions: DirectoryPress Frontend plugin for WordPress versions up to, and including, 2.7.9 Description: The issue is due to missing or incorrect nonce validation on the dpfl listingStatusChange function, making it possible for unauthenticated attacker...
CVE-2024-5462
creationtimestamp| type| source ---|---|--- 2025-02-14 23:51:23+00:00| seen| https://infosec.exchange/users/cve/statuses/114004923571161636 2025-02-15 00:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li6gtk3tnl2h 2025-02-15 01:10:27+00:00| seen|...
WordPress DirectoryPress Frontend plugin <= 2.7.9 - Cross-Site Request Forgery to Listing Status Update vulnerability
Cross-Site Request Forgery to Listing Status Update vulnerability discovered by incognito in WordPress Plugin DirectoryPress Frontend versions = 2.7.9...