CVE-2024-8893

creationtimestamp| type| source ---|---|--- 2025-02-14 17:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pdll47u2a 2025-02-14 18:45:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud7cfz62v 2025-02-14 19:18:36+00:00| seen|...

CVE-2025-24616

creationtimestamp| type| source ---|---|--- 2025-02-14 13:18:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2x2pzt2s 2025-02-14 15:45:34+00:00| seen| https://t.me/cvedetector/18092 2025-02-14 15:53:54+00:00| seen|...

CVE-2025-24567

creationtimestamp| type| source ---|---|--- 2025-02-14 13:18:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2l3yhe2i 2025-02-14 15:38:52+00:00| seen| https://infosec.exchange/users/cve/statuses/114002987054618420 2025-02-14 15:45:42+00:00| seen|...

CVE-2025-23789

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tahminajannat URL Shortener | Conversion Tracking | AB Testing | WooCommerce easy-broken-link-checker allows Reflected XSS.This issue affects URL Shortener | Conversion Tracking | AB Testing |...

CVE-2025-23789

CVE-2025-23789 – Reflected XSS in tahminajannat URL Shortener Root cause: Improper neutralization of input during web page generation in the WordPress URL Shortener (WooCommerce integration). This allows Reflected XSS, affecting WordPress plugins/ WooCommerce incorporation up to version 9.0.2 (pe...

CVE-2024-55904

creationtimestamp| type| source ---|---|--- 2025-02-14 03:25:10+00:00| seen| https://infosec.exchange/users/cve/statuses/114000102050471756 2025-02-14 04:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4dr76uhg2p 2025-02-14 05:09:26+00:00| seen|...

CVE-2025-23789: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tahminajannat URL Shortener | Conversion Tracking | AB Testing | WooCommerce easy-broken-link-checker allows Reflected XSS.This issue affects URL Shortener | Conversion Tracking | AB Testing |...

WordPress plugin URL Shortener | Conversion Tracking  | AB Testing  | WooCommerce 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exist...

CVE-2024-53310

creationtimestamp| type| source ---|---|--- 2025-02-13 22:26:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113998927579207625 2025-02-13 23:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3sytdf2k2h 2025-02-14 00:35:11+00:00| seen|...

CVE-2025-26582

creationtimestamp| type| source ---|---|--- 2025-02-13 14:17:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li2uwak3ej2d 2025-02-13 15:09:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4242 2025-02-13 15:11:03+00:00| seen|...

CVE-2025-20097

creationtimestamp| type| source ---|---|--- 2025-02-12 22:19:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7ezyawf2h 2025-02-12 23:07:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4142 2025-02-13 00:25:53+00:00| seen| https://t.me/cvedetector/17937...

CVE-2024-42492

creationtimestamp| type| source ---|---|--- 2025-02-12 22:18:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7dmjz232g 2025-02-12 23:11:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4164 2025-02-13 00:58:20+00:00| seen|...

CVE-2024-36280

creationtimestamp| type| source ---|---|--- 2025-02-12 22:17:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7baclj52a 2025-02-12 23:13:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113993449025115518...

CVE-2025-1214

creationtimestamp| type| source ---|---|--- 2025-02-12 18:08:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113992250682299290 2025-02-12 18:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrr4pj7s2d 2025-02-12 20:14:05+00:00| seen|...

CVE-2025-26370

creationtimestamp| type| source ---|---|--- 2025-02-12 15:37:02+00:00| seen| Telegram/vEXhmHLUKpE92yUkDLFonQzaP6w4B8ZTzitUZ1hGZlUqw 2025-02-12 15:50:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113991709972553512 2025-02-12 16:02:54+00:00| seen| https://t.me/cvedetector/17877...

CVE-2025-26356

creationtimestamp| type| source ---|---|--- 2025-02-12 14:50:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113991473788401617 2025-02-12 15:37:05+00:00| published-proof-of-concept| Telegram/lZEJiQD3O3xPf1pBYP5mgJTFa8U9Tg1CM3lnY7moTw8EfI 2025-02-12 16:02:59+00:00| seen|...

Gambling firms are secretly sharing your data with Facebook

While you might think you’re hitting the jackpot, whether you’ve consented to it or not, online gambling sites are playing with your data. Users’ data, including details of webpages they visited and buttons they clicked, are being shared with Meta, Facebook’s parent company. The Observer reports...

CVE-2025-1189

A vulnerability, which was classified as critical, was found in 1000 Projects Attendance Tracking Management System 1.0. This affects an unknown part of the file /admin/chart1.php. The manipulation of the argument courseid leads to sql injection. It is possible to initiate the attack remotely. Th...

CVE-2025-1189

A vulnerability, which was classified as critical, was found in 1000 Projects Attendance Tracking Management System 1.0. This affects an unknown part of the file /admin/chart1.php. The manipulation of the argument courseid leads to sql injection. It is possible to initiate the attack remotely. Th...

CVE-2025-1189

CVE-2025-1189 affects 1000 Projects Attendance Tracking Management System v1.0. A SQL injection vulnerability exists in the /admin/chart1.php page via the course_id parameter, allowing remote exploitation as described in multiple sources. Exploitation details beyond the basic vector are not provi...