4280 matches found
CVE-2023-7014
The Author Box, Guest Author and Co-Authors for Your Posts – Molongui plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.4 via the 'madebu' parameter. This makes it possible for unauthenticated attackers to extract sensitive data includi...
CVE-2023-24958
A vulnerability in the IBM TS7700 Management Interface 8.51.2.12, 8.52.200.111, 8.52.102.13, and 8.53.0.63 could allow an authenticated user to submit a specially crafted URL leading to privilege escalation and remote code execution. IBM X-Force ID: 246320...
CVE-2022-46771
IBM UrbanCode Deploy UCD 6.2.0.0 through 6.2.7.18, 7.0.5.0 through 7.0.5.13, 7.1.0.0 through 7.1.2.9, 7.2.0.0 through 7.2.3.2 and 7.3.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionalit...
CVE-2022-3967
A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of the file func/main.sh of the component sed Handler. The manipulation leads to argument injection. An attack has to be approached locally. The name of the patch is...
CVE-2022-3963
A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the file bbs/faq.php of the component FAQ Key ID Handler. The manipulation of the argument fmid leads to cross site scripting. It is possible to launch the attack remotely. Upgrading ...
CVE-2022-36539
WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children...
GHSA-45JJ-R48J-75PP
creationtimestamp| type| source ---|---|--- 2025-05-22 17:43:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17334...
CVE-2020-0741
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0742, CVE-2020-0743, CVE-2020-0749,...
CVE-2022-3195
creationtimestamp| type| source ---|---|--- 2025-05-22 14:44:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17288...
CVE-2016-10950
The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter...
UBUNTU-CVE-2025-37976
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-43834
creationtimestamp| type| source ---|---|--- 2025-05-19 17:39:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16890...
CVE-2025-39364
creationtimestamp| type| source ---|---|--- 2025-05-19 16:38:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16865...
CVE-2025-2892
creationtimestamp| type| source ---|---|--- 2025-05-19 04:38:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16800...
CVE-2024-9879
creationtimestamp| type| source ---|---|--- 2025-05-16 20:34:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16750...
CVE-2025-48116
creationtimestamp| type| source ---|---|--- 2025-05-16 17:34:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16721...
CVE-2025-39493
creationtimestamp| type| source ---|---|--- 2025-05-16 16:35:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16714...
CVE-2025-39507
creationtimestamp| type| source ---|---|--- 2025-05-16 16:35:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16713 2025-06-10 03:00:05+00:00| published-proof-of-concept| Telegram/QF2qL8FTH9lFpTSo7F-ILTZgkF0xG80ALl6tqjxGUgHwniE 2025-06-10 15:00:07+00:00| published-proof-of-concept|...
CVE-2024-49909
creationtimestamp| type| source ---|---|--- 2025-05-16 07:34:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16658 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...