15658 matches found
CVE-2025-31440
Cross-Site Request Forgery CSRF vulnerability in Strategy11 Team Terms of Use terms-of-use-2 allows Stored XSS.This issue affects Terms of Use: from n/a through = 2.0...
编号撤回
Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. This CVE number has been withdrawn...
编号撤回
Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. This CVE number has been withdrawn...
编号撤回
Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. This CVE number has been withdrawn...
CVE-2025-31092
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affects Click to Chat – WP Support All-in-One Floating Widget: from n/a through = 2.3.4...
CVE-2025-30868
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Maidul Team Manager wp-team-manager allows PHP Local File Inclusion.This issue affects Team Manager: from n/a through = 2.1.23...
SUSE CVE-2025-27715
Mattermost versions 9.11.x = 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel, which team admins to joining private channels via crafted permalink links without explicit consent from them...
SUSE CVE-2025-30179
Mattermost versions 10.4.x = 10.4.2, 10.3.x = 10.3.3, 9.11.x = 9.11.8 fail to enforce MFA on certain search APIs, which allows authenticated attackers to bypass MFA protections via user search, channel search, or team search queries...
Malicious code in team-labeler-action (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2905 Malicious code in team-labeler-action (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-31440
CVE-2025-31440 is a CSRF vulnerability in Strategy11 Terms of Use plugin that allows Stored XSS. Affected software: Terms of Use (Strategy11) plugin up to version 2.0. Reported impact: cross-site request forgery enabling stored XSS in eligible requests. CVSS v3.1 base score 7.1 (HIGH); vectors: A...
BIT-MATTERMOST-2025-27715
Mattermost versions 9.11.x = 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel, which team admins to joining private channels via crafted permalink links without explicit consent from them...
CVE-2025-24381
creationtimestamp| type| source ---|---|--- 2025-03-28 03:27:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9263 2025-03-28 05:00:36+00:00| seen| Telegram/REIy8s9RHKd3lCpUQgU1ZLtNB2gCBYg9aoCqFnV7Mh0QfY 2025-03-28 05:12:10+00:00| seen| https://t.me/cvedetector/21359 2025-03-28 09:05:40+00:0...
CVE-2025-31092
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affects Click to Chat – WP Support All-in-One Floating Widget: from n/a through = 2.3.4...
Mattermost Server 9.11.x < 9.11.9 (MMSA-2024-00409)
The version of Mattermost Server installed on the remote host is prior to 9.11.9. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00409 advisory. - Mattermost versions 9.11.x = 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel...
CVE-2025-31092
CVE-2025-31092: Stored XSS in Click to Chat – WP Support All-in-One Floating Widget due to improper input neutralization during web page generation; affected plugin versions up to 2.3.4 (no details on fixes in provided documents).
CVE-2025-30093
creationtimestamp| type| source ---|---|--- 2025-03-27 20:50:26+00:00| seen| https://t.me/cvedetector/21334 2025-03-28 15:28:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9365 2025-03-28 20:49:11+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3llhotwpwb52j...
CVE-2025-30868
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Maidul Team Manager wp-team-manager allows PHP Local File Inclusion.This issue affects Team Manager: from n/a through = 2.1.23...
CVE-2025-30868
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Maidul Team Manager wp-team-manager allows PHP Local File Inclusion.This issue affects Team Manager: from n/a through = 2.1.23...
