693 matches found
CVE-2025-1576
creationtimestamp| type| source ---|---|--- 2025-02-23 05:20:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5082 2025-02-23 07:41:53+00:00| seen| https://t.me/cvedetector/18736 2025-02-23 08:12:52+00:00| seen|...
WordPress Adsmonetizer plugin <= 3.2.4 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Dimas Maulana in WordPress Plugin Adsmonetizer versions = 3.2.4...
CVE-2023-27032
creationtimestamp| type| source ---|---|--- 2025-02-14 10:00:27+00:00| seen| Telegram/uwW0NFViBWsTzKgUFylilHVWHsBYQEXMayxOSh6wr-tVNt2l 2026-02-18 21:03:06+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mf5y3shlnf2b...
CVE-2023-37482
The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames...
PT-2025-5598 · Wegia · Wegia
Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.12 Description: A SQL Injection vulnerability was discovered in the WeGIA application, salvar cargo.php endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing...
PT-2025-2583 · Themesebrand · Themesebrand Chatvia
Name of the Vulnerable Software and Affected Versions: themesebrand Chatvia version 5.3.2 Description: An issue in themesebrand Chatvia allows a remote attacker to execute arbitrary code via the User profile Upload image function. Recommendations: For themesebrand Chatvia version 5.3.2, consider...
CVE-2024-13281 Monster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045
Incorrect Authorization vulnerability in Drupal Monster Menus allows Forceful Browsing.This issue affects Monster Menus: from 0.0.0 before 9.3.2...
WordPress plugin Ultimate Addons for Contact Form 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability exis...
CVE-2024-53246
In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206, an SPL command can potentially disclose sensitive information. The vulnerability requires the exploitation of another vulnerability, suc...
WordPress plugin Filebird 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-53472
WeGIA version v3.2.0 , a web manager for welfare organizations, is vulnerable to a Cross-Site Request Forgery (CSRF) . This vulnerability allows an attacker to trick a user into performing unintended actions on the web application. While no patch is currently available, it is recommended to disab...
WeGIA 安全漏洞
WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA version v3.2.0. An attacker exploiting this vulnerability could perform a cross-site request forgery attack...
HoDoKu 安全漏洞
HoDoKu is HoDoKu open source a Sudoku generator/solver/analyzer written in Java. A security vulnerability exists in HoDoKu versions v2.3.0 through v2.3.2, which stems from the presence of insecure deserialization that allows an attacker to execute arbitrary code...
WordPress Kudos Donations plugin <= 3.2.9 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Kudos Donations versions = 3.2.9...
WordPress Spam protection, Anti-Spam, FireWall by CleanTalk plugin <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing vulnerability
Authorization Bypass via Reverse DNS Spoofing vulnerability discovered by mikemyers in WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk versions = 6.43.2...
PT-2024-33070 · Unknown · Phpgurukul User Registration & Login/User Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul User Registration & Login and User Management System version 3.2 Description: A Reflected Cross-Site Scripting XSS issue was discovered in the "/search-result.php" page, allowing remote attackers to execute arbitrary scripts via th...
WordPress Easy Pricing Tables plugin <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin Easy Pricing Tables versions = 3.2.6...
CVE-2024-9147
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Bna Informatics PosPratik allows XSS Through HTTP Query Strings.This issue affects PosPratik: before v3.2.1...
CVE-2024-38821
creationtimestamp| type| source ---|---|--- 2024-10-28 09:28:03+00:00| seen| https://t.me/cvedetector/9093 2024-10-29 05:03:03+00:00| seen| https://t.me/CyberBulletin/26249 2024-10-29 05:03:03+00:00| seen| https://t.me/CyberBulletin/1305 2025-01-23 13:31:51+00:00| seen|...