148582 matches found
CVE-2025-303837
creationtimestamp| type| source ---|---|--- 2025-05-13 16:58:56+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0155...
CVE-2024-51446
creationtimestamp| type| source ---|---|--- 2025-05-13 16:30:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16159 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-11...
CVE-2025-29964
creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-14 04:32:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16288 2025-05-14 17:17:04+00:00| seen|...
iClicker Website Hacked with Fake CAPTCHA in ClickFix Attack
Popular student engagement platform iClicker's website was compromised with a ClickFix attack. A fake "I'm not a robot"…...
CVE-2025-31205
The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A malicious website may exfiltrate data cross-origin...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...
Apple多款产品 安全漏洞
Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in several Apple products that stems from an...
CVE-2025-4132
Rapid7 Corporate Website prior to May 2nd 2025, suffered from a URL Redirection to Untrusted Site 'Open Redirect' vulnerability whereby, due to misconfigured headers, an attacker could successfully redirect users to a malicious site of their control. This vulnerability has been fixed as of May 2n...
CVE-2025-3949 Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.18.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
The Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'seedprodlitegetrevisisons' function in all versions up to, and including, 6.18.15...
The vulnerability of TOTOLINK N150RT router microprogramming software arises from the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of TOTOLINK N150RT router microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the Hostname parameter...
The vulnerability of the IBM Aspera Faspex file-sharing application lies in the lack of protection for website structures, allowing attackers to execute cross-site scripting attacks.
The vulnerability of the IBM Aspera Faspex file-sharing application relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the IBM Business Automation Workflow software and the IBM Business Automation Workflow Enterprise Service Bus software platform lies in the lack of security measures for website structures. This allows attackers to execute cross-site scripting attacks.
The vulnerability of the IBM Business Automation Workflow software and the IBM Business Automation Workflow Enterprise Service Bus software platform relates to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to...
PT-2025-20545 · Seedprod · Website Builder By Seedprod
Name of the Vulnerable Software and Affected Versions: The Website Builder by SeedProd versions up to, and including, 6.18.15 Description: The issue allows authenticated attackers with Subscriber-level access and above to read the content of arbitrary landing page revisions due to a missing...
WordPress plugin Website Builder by SeedProd 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
The vulnerability of the Configuration tool for access control and remote authentication in BIG-IP allows a attacker to carry out XSS attacks.
The vulnerability of the Configuration tool for access control and remote authentication in BIG-IP relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability of TOTOLINK N150RT router microprogramming software arises from the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of TOTOLINK N150RT router microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...
CVE-2025-4132
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-4132
CVE-2025-4132 entry is rejected/not used by the CVE Numbering Authority.
PT-2025-20385 · Rapid7 · Rapid7 Corporate Website
Name of the Vulnerable Software and Affected Versions: Rapid7 Corporate Website versions prior to May 2nd 2025 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability allows an attacker to redirect users to a...