GHSA-VJ5Q-3JV2-CG5P

creationtimestamp| type| source ---|---|--- 2025-04-08 16:46:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10954...

GHSA-4WJW-6XMF-44XF

creationtimestamp| type| source ---|---|--- 2025-04-07 17:45:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10743...

GHSA-CHHP-GMXC-46RQ

creationtimestamp| type| source ---|---|--- 2025-04-06 19:44:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10638...

CVE-2024-51800

Incorrect Privilege Assignment vulnerability in Favethemes Homey allows Privilege Escalation.This issue affects Homey: from n/a through 2.4.1...

BELL-CVE-2025-21900

Bulletin has no description...

docs.dhtmlx.com Cross Site Scripting vulnerability OBB-4041560

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-6HR4-H6PX-7PPG

creationtimestamp| type| source ---|---|--- 2025-03-31 18:32:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9740...

WordPress Ni WooCommerce Product Enquiry plugin <= 4.1.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Ni WooCommerce Product Enquiry versions = 4.1.8...

CGA-PG6M-GC6G-HGJ5

Bulletin has no description...

BELL-CVE-2023-52941

Bulletin has no description...

CVE-2025-22658

creationtimestamp| type| source ---|---|--- 2025-03-27 18:26:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9159...

CVE-2025-30566

CVE-2025-30566 concerns Clink (WordPress Link Manager, by Aryan Themes). The connected vulnerability data indicate an Authenticated (Contributor+) cross-site scripting issue in Clink versions up to 1.2.2, with Wordfence listing it as an Unpatched, stored XSS vulnerability in Clink

openSUSE Security Advisory (SUSE-SU-2025:0980-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-3F5X-R59X-P8CF

creationtimestamp| type| source ---|---|--- 2025-03-17 23:48:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7891 2025-03-18 00:23:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114180582366575557...

Siemens SCALANCE LPE9403 Improper Check For Dropped Privileges (CVE-2025-27396)

Affected devices do not properly limit the elevation of privileges required to perform certain valid functionality. This could allow an authenticated lowly-privileged remote attacker to escalate their privileges. This plugin only works with Tenable.ot. Please visit...

CVE-2024-13602

creationtimestamp| type| source ---|---|--- 2025-03-16 06:46:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7706 2025-03-16 08:00:52+00:00| seen| https://t.me/cvedetector/20402...

CVE-2025-29775 xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment

xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1, and 2.1.6 to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. Th...

CVE-2024-11285

creationtimestamp| type| source ---|---|--- 2025-03-14 04:53:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7529 2025-03-14 05:40:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkcvjuw6mi2p 2025-03-14 05:48:25+00:00| seen|...

CVE-2025-27648

creationtimestamp| type| source ---|---|--- 2025-03-06 00:00:18+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sa7rnv2b 2025-03-06 02:16:25+00:00| seen| Telegram/Ny94pmHLeutDxh0sf5gPgGBHz5a4ga4NWnjBeNx2vKLtBwX 2025-03-06 12:00:12+00:00| seen|...

PT-2025-9752 · Unknown · Vasion Print

Name of the Vulnerable Software and Affected Versions: Vasion Print formerly PrinterLogic versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 Description: The issue allows for insecure extension installation by trusting HTTP permission methods on the server side...