CVE-2024-56947

creationtimestamp| type| source ---|---|--- 2025-01-27 18:49:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113901814729325942 2025-01-27 19:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqnnhdvrq2f 2025-01-27 21:52:20+00:00| seen|...

CVE-2024-28770

creationtimestamp| type| source ---|---|--- 2025-01-27 01:29:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113897724784584899 2025-01-27 02:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgounqusmp27 2025-01-27 04:07:37+00:00| seen|...

CVE-2025-21274

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:19:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuhdq4ze2r 2025-01-14 22:11:18+00:00| seen|...

CVE-2025-23082

creationtimestamp| type| source ---|---|--- 2025-01-14 02:08:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1450 2025-01-14 02:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo6lvsqhq2n 2025-01-14 03:57:35+00:00| seen| https://t.me/cvedetector/15227...

CVE-2024-47517

creationtimestamp| type| source ---|---|--- 2025-01-10 21:50:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113806267094662222 2025-01-10 22:05:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1252 2025-01-10 22:15:57+00:00| seen|...

CVE-2024-13276

creationtimestamp| type| source ---|---|--- 2025-01-09 19:33:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113800066948393639 2025-01-09 20:16:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdinv6eck2e 2025-01-10 17:04:37+00:00| seen|...

CVE-2024-11734

creationtimestamp| type| source ---|---|--- 2024-11-16 15:59:00+00:00| seen| https://bugzilla.redhat.com/showbug.cgi?id=2328846 2025-01-14 08:38:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113825801162950648 2025-01-14 09:10:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14...

CVE-2024-50144

creationtimestamp| type| source ---|---|--- 2024-11-07 09:52:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113441055293181302 2024-11-07 10:11:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113441129322849823...

[SECURITY] Fedora 40 Update: libopenmpt-0.7.6-1.fc40

libopenmpt is a cross-platform C++ and C library to decode tracked music files modules into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project Open ModPlug Tracker. In order to avoid code base fragmentation, libopenmpt is developed in the same source code...

[SECURITY] Fedora 39 Update: libopenmpt-0.7.6-1.fc39

libopenmpt is a cross-platform C++ and C library to decode tracked music files modules into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project Open ModPlug Tracker. In order to avoid code base fragmentation, libopenmpt is developed in the same source code...

M-08 Unmitigated

Lines of code Vulnerability details Lines of code Vulnerability details Mitigation of M-08: Issue mitigated with ERROR Mitigated issue M-08: Inflation attack in VotiumStrategy The issue was that the price of afEth and of vAfEth could be inflated by donating underlying assets. Mitigation review Al...

Malicious code in ember-tracked-local-storag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dd398ad5717712317bbad8ef0a6ce4b41a0f3ef13ee48bd5ec8d9120495ab86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Tracked Tweets <= 0.2.9 - Stored Cross-Site Scripting via CSRF

The plugin does not have SCRF check when updating its settings, as well as does not sanitise and escape them when outputting them back. This could allow attackers to make a logged in admin update them to arbitrary values, including XSS payloads, via a CSRF attack PoC...

WordPress Tracked Tweets plugin <= 0.2.9 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Rahul Selvakumar in WordPress Tracked Tweets plugin versions = 0.2.9. Solution Deactivate and delete. This plugin has been closed as of April 21, 2022 and is not available for download. This closure is temporary, pending a full review...

Tracked Tweets <= 0.2.9 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in an admin page, leading to a Reflected Cross-Site Scripting issue PoC All parameters from the settings page are affected...

Tracked Tweets <= 0.2.9 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in an admin page, leading to a Reflected Cross-Site Scripting issue All parameters from the settings page are affected ' /...

WordPress Tracked Tweets plugin <= 0.2.9 - Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Stored Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability discovered by WPScanTeam in WordPress Tracked Tweets plugin versions = 0.2.9. Solution Deactivate and delete. This plugin has been closed as of April 21, 2022 and is not available for download. This closure is...

Tracked Tweets <= 0.2.9 - Stored Cross-Site Scripting via CSRF

The plugin does not have SCRF check when updating its settings, as well as does not sanitise and escape them when outputting them back. This could allow attackers to make a logged in admin update them to arbitrary values, including XSS payloads, via a CSRF attack ' /...

[SECURITY] Fedora 35 Update: libopenmpt-0.5.15-1.fc35

libopenmpt is a cross-platform C++ and C library to decode tracked music files modules into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project Open ModPlug Tracker. In order to avoid code base fragmentation, libopenmpt is developed in the same source code...

CVE-2021-41187

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability has been found in specific versions of DHIS2. This vulnerability affects the API endpoints for /api/trackedEntityInstances and api/events in DHIS2. The...