CVE-2025-25907

creationtimestamp| type| source ---|---|--- 2025-03-11 00:54:12+00:00| seen| https://t.me/cvedetector/20006 2025-03-11 03:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114141752650435125 2025-03-11 04:41:13+00:00| seen|...

CVE-2025-0660 Stored XSS in Folder Function by Rogue Admin

Concrete CMS versions 9.0.0 through 9.3.9 are affected by a stored XSS in Folder Function.The "Add Folder" functionality lacks input sanitization, allowing a rogue admin to inject XSS payloads as folder names. The Concrete CMS security team gave this vulnerability a CVSS 4.0 Score of 4.8 with...

Important: Red Hat Security Advisory: ACS 4.6 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security RHACS. This release of RHACS 4.6 provides these changes: - Fix rhacs-main-container: Unexpected memory consumption during token parsing in golang.org/x/oauth2 CVE-2025-22868 - ROX-27347: Fix vulnerability report job getting...

CVE-2024-54467

creationtimestamp| type| source ---|---|--- 2025-03-10 19:38:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7031 2025-03-10 21:46:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2jmudumm2f 2025-03-11 04:41:14+00:00| seen|...

CVE-2025-25382

creationtimestamp| type| source ---|---|--- 2025-03-10 19:02:29+00:00| seen| https://t.me/cvedetector/19963 2025-03-10 19:45:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2cvze45e26...

Important: Red Hat Security Advisory: ACS 4.5 enhancement update

Updated images are now available for Red Hat Advanced Cluster Security RHACS. This release of RHACS 4.5 provides these changes: - Fix rhacs-main-container: Unexpected memory consumption during token parsing in golang.org/x/oauth2 CVE-2025-22868 - ROX-27347: Fix vulnerability report job getting...

booking.bioimaging.ubc.ca Cross Site Scripting vulnerability OBB-4034763

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

miami.samis.io Cross Site Scripting vulnerability OBB-4034738

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tyaa.org.tw Cross Site Scripting vulnerability OBB-4034704

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tsviewer.com Cross Site Scripting vulnerability OBB-4034669

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

transpartsonline.com Cross Site Scripting vulnerability OBB-4034595

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-2117 Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System reportCenter.do electricDocList sql injection

A vulnerability was found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and classified as critical. Affected by this issue is the function electricDocList of the file /newsedit/report/reportCenter.do. The manipulation of the argument fvID/catID leads t...

nzpersonals.com Cross Site Scripting vulnerability OBB-4034389

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rueckenwind.rocks Open Redirect vulnerability OBB-4034383

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rssahome.com Open Redirect vulnerability OBB-4034382

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-52971

creationtimestamp| type| source ---|---|--- 2025-03-08 23:37:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6950 2025-03-09 01:13:27+00:00| seen| https://t.me/cvedetector/19908 2025-03-09 02:45:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljvzggk4tj2f 2025-03-09...

nait.ca Open Redirect vulnerability OBB-4034373

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

motoso.de Open Redirect vulnerability OBB-4034351

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bennett4mortgage.com Cross Site Scripting vulnerability OBB-4034289

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-13924

creationtimestamp| type| source ---|---|--- 2025-03-08 12:36:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6945 2025-03-08 15:11:16+00:00| seen| https://t.me/cvedetector/19899 2025-03-08 16:29:02+00:00| seen| Telegram/HG0MGwIqq-n4i0Gf-FzKxnP20cW5N5XUKms6jqt4dgi5pDp...