CVE-2024-54446

creationtimestamp| type| source ---|---|--- 2025-03-14 20:46:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkei5xmcjy2m 2025-03-14 20:53:44+00:00| seen| https://t.me/cvedetector/20334...

GHSA-P3X9-6H7P-CGFC

creationtimestamp| type| source ---|---|--- 2025-03-14 18:23:02+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pjd6i23 2025-03-30 06:32:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9547...

UBUNTU-CVE-2023-52927

In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nfctfindexpectation Currently nfconntrackin calling nfctfindexpectation will remove the exp from the hash table. However, in some scenario, we expect the exp not to be removed when the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the nfctfindexpectation function not removing exp, which could result in ct's being created that are not...

Abusing with style: Leveraging cascading style sheets for evasion and tracking

Cisco Talos has identified actors abusing Cascading Style Sheets CSS to 1 evade spam filters and detection engines, and 2 track users' actions and preferences. This blog is a follow-up to our previous report on how threat actors could abuse CSS using a technique called "hidden text salting" to...

Android devices track you before you even sign in

Google is spying on Android users, starting from even before they have logged in to their Google account. That's what researchers from Dublin’s Trinity College found after they conducted a measurement study to investigate the cookies, identifiers and other data stored on Android devices by Google...

CVE-2025-28915

creationtimestamp| type| source ---|---|--- 2025-03-11 22:40:20+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk5552pcq62n 2025-03-12 10:00:05+00:00| published-proof-of-concept| Telegram/YXXAYpim7CTBciEsZ274r31Y5zZFEUA-ADCgFk7JYE3PFkE 2025-03-12 11:00:08+00:00| seen|...

CVE-2025-27440

creationtimestamp| type| source ---|---|--- 2025-03-11 11:28:49+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lk3xmbkm452f 2025-03-11 19:48:51+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114145527796469293 2025-03-11 20:46:19+00:00| seen|...

CVE-2025-2151

creationtimestamp| type| source ---|---|--- 2025-03-10 13:39:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6992 2025-03-10 15:40:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7ipdxd2k 2025-03-10 16:32:01+00:00| seen|...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56770)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56770 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: account for backlog...

CVE-2025-1363

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

CVE-2025-1362

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...

CVE-2025-1363

CVE-2025-1363 affects the WordPress plugin “URL Shortener | Conversion Tracking | AB Testing | WooCommerce” (versions up to 9.0.2). The vulnerability is a Stored Cross-Site Scripting (XSS) that occurs due to insufficient sanitisation/escaping of certain plugin settings, enabling a high-privilege ...

CVE-2024-13868

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-2088

creationtimestamp| type| source ---|---|--- 2025-03-07 15:04:06+00:00| seen| https://bsky.app/profile/potato.software/post/3ljsbriaoub2k 2025-03-07 15:35:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6843 2025-03-07 16:00:43+00:00| published-proof-of-concept|...

CVE-2024-58083

creationtimestamp| type| source ---|---|--- 2025-03-06 17:23:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114116643141768200 2025-03-06 19:41:56+00:00| seen| https://t.me/cvedetector/19733 2025-03-06 19:54:48+00:00| seen|...

CVE-2024-13868

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-27655

creationtimestamp| type| source ---|---|--- 2025-03-06 00:00:21+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sbajj52b 2025-03-06 02:16:26+00:00| seen| Telegram/1Np4XDUTqbMrImIcHm8RIgunvF0kDg4Xu2I85ZHdh8fyW9e 2025-03-06 12:00:15+00:00| seen|...

PozitifIK Pik Online 安全漏洞

PozitifIK Pik Online is an online exam application from PozitifIK, Inc. A security vulnerability exists in PozitifIK Pik Online version 05.03.2025 and earlier, which stems from an authorization bypass that could lead to account footprint tracking and session hijacking...

Linux Distros Unpatched Vulnerability : CVE-2023-38599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 a...