87106 matches found
CVE-2025-59534
creationtimestamp| type| source ---|---|--- 2025-11-28 15:27:35+00:00| published-proof-of-concept| https://t.me/cKure/15756...
CVE-2025-65881
creationtimestamp| type| source ---|---|--- 2025-11-28 15:00:07+00:00| published-proof-of-concept| Telegram/lq4m-JYIdMsfIAsI3lNQ7LcrQOYDBCp5BuoQk99xpsmGKag...
Tomiris wreaks Havoc: New tools and techniques of the APT group
While tracking the activities of the Tomiris threat actor, we identified new malicious operations that began in early 2025. These attacks targeted foreign ministries, intergovernmental organizations, and government entities, demonstrating a focus on high-value political and diplomatic...
CVE-2025-59372
creationtimestamp| type| source ---|---|--- 2025-11-27 18:57:29+00:00| seen| https://t.me/notlukatsky/7751...
CVE-2025-65862
creationtimestamp| type| source ---|---|--- 2025-11-27 02:04:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60896...
CVE-2025-13068
The Telegram Bot & Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Telegram username in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
PT-2025-48188
Name of the Vulnerable Software and Affected Versions Revive Adserver affected versions not specified Description The software contains a flaw in username validation that allows anyone to register look-alike accounts and impersonate administrators. This issue persists after a previous fix for...
CVE-2025-34322
creationtimestamp| type| source ---|---|--- 2025-11-25 21:27:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60787 2025-11-26 03:00:07+00:00| published-proof-of-concept| Telegram/MnfDtTO7wJ3H0uNrhjZAmV8vXhG2hG4Vq-UJgHVKnfrpk...
CVE-2025-34323
creationtimestamp| type| source ---|---|--- 2025-11-25 21:27:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60787 2025-11-26 03:00:07+00:00| published-proof-of-concept| Telegram/MnfDtTO7wJ3H0uNrhjZAmV8vXhG2hG4Vq-UJgHVKnfrpk...
WordPress Telegram Bot & Channel plugin <= 4.1 - Unauthenticated Stored Cross-Site Scripting via Telegram Username vulnerability
Unauthenticated Stored Cross-Site Scripting via Telegram Username vulnerability discovered by venom5iix in WordPress Plugin Telegram Bot & Channel versions = 4.1...
CVE-2025-13068
The Telegram Bot & Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Telegram username in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2025-13068 Telegram Bot & Channel <= 4.1 - Unauthenticated Stored Cross-Site Scripting via Telegram Username
The Telegram Bot & Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Telegram username in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
EUVD-2025-199534
The Telegram Bot & Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Telegram username in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2025-13068
CVE-2025-13068 concerns the WordPress plugin Telegram Bot & Channel . The vulnerability is an unauthenticated Stored Cross-Site Scripting (XSS) via the Telegram username, affecting all versions up to and including 4.1 due to insufficient input sanitization and output escaping. Wordfence details t...
CVE-2025-13068 Telegram Bot & Channel <= 4.1 - Unauthenticated Stored Cross-Site Scripting via Telegram Username
The Telegram Bot & Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Telegram username in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
Scam Alert: Impersonation of Akamai on Telegram
Learn about a persisting scam on Telegram that involves scammers who are pretending to be from Akamai and requesting money...
PT-2025-47982
Name of the Vulnerable Software and Affected Versions Telegram Bot & Channel plugin for WordPress versions prior to 4.2 Description The Telegram Bot & Channel plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Telegram username. Insufficient input sanitization and outp...
WordPress plugin Telegram Bot & Channel 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...