CVE-2023-21445

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R11, 13.1.03.501 in Android S12 and 14.1.00.422 in Android T13 allows local attacker to write file with MyFiles privilege via implicit intent...

CVE-2023-1762

Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2021-37538

Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL commands via the day, month, or year parameter to the controllers/front/archive.php archive controller, or the idcategory parameter to the...

CVE-2021-24341

When deleting a date in the Xllentech English Islamic Calendar WordPress plugin before 2.6.8, the yearnumber and monthnumber POST parameters are not sanitised, escaped or validated before being used in a SQL statement, leading to SQL injection...

RHSA-2024:4457

creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17351...

CVE-2022-32826

creationtimestamp| type| source ---|---|--- 2025-05-22 16:43:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17310...

CVE-2010-1052

Multiple cross-site scripting XSS vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 year and 2 mday parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-1051

Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 year and 2 month parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2021-24890

creationtimestamp| type| source ---|---|--- 2025-05-21 19:42:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17176...

CVE-2025-48265

Cross-Site Request Forgery CSRF vulnerability in Pektsekye Year Make Model Search for WooCommerce ymm-search allows Cross Site Request Forgery.This issue affects Year Make Model Search for WooCommerce: from n/a through = 1.0.11...

CVE-2025-48265

Cross-Site Request Forgery CSRF vulnerability in Pektsekye Year Make Model Search for WooCommerce ymm-search allows Cross Site Request Forgery.This issue affects Year Make Model Search for WooCommerce: from n/a through = 1.0.11...

PT-2025-22051 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is a discrepancy in the year used in references to a specific issue, with some sources incorrectly using 2025 instead of 2024. Recommendations: At the moment, there is no information...

WordPress plugin Year Make Model Search for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress plug...

CVE-2025-48131

creationtimestamp| type| source ---|---|--- 2025-05-16 17:34:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16728...

CVE-2025-48116

creationtimestamp| type| source ---|---|--- 2025-05-16 17:34:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16721...

CVE-2025-4771

creationtimestamp| type| source ---|---|--- 2025-05-16 12:34:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16680...

CVE-2025-4768

creationtimestamp| type| source ---|---|--- 2025-05-16 10:34:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16670...

CVE-2024-35249

creationtimestamp| type| source ---|---|--- 2025-05-16 01:34:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16606...

Security update for elemental-operator

This update for elemental-operator fixes the following issues: Updated to v1.7.2: Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the Key Exchange of...

CVE-2025-4706

A vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Procedure3byearwiseVisit.php. The manipulation of the argument Visityear leads to sql injection. The attack can be initiated remotely. T...