10118 matches found
CVE-2025-30957 WordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Broken Access Control Vulnerability
Missing Authorization vulnerability in BuddyDev Activity Plus Reloaded for BuddyPress bp-activity-plus-reloaded allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Activity Plus Reloaded for BuddyPress: from n/a through = 1.1.2...
CVE-2025-30957 WordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Broken Access Control Vulnerability
Missing Authorization vulnerability in BuddyDev Activity Plus Reloaded for BuddyPress bp-activity-plus-reloaded allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Activity Plus Reloaded for BuddyPress: from n/a through = 1.1.2...
CVE-2025-30957
CVE-2025-30957 concerns a missing-authorization vulnerability in the BuddyPress extension Activity Plus Reloaded (BuddyDev). The Wordfence vulnerability listing explicitly notes an Authorization issue for Activity Plus Reloaded for BuddyPress
PT-2025-24178 · Buddydev · Buddydev Activity Plus Reloaded
Name of the Vulnerable Software and Affected Versions: BuddyDev Activity Plus Reloaded for BuddyPress versions 1.1.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels...
Falco 0.41.1
Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco...
WordPress plugin Activity Plus Reloaded for BuddyPress 安全漏洞
WordPress Activity Plus Reloaded for BuddyPress plugin is an extension plugin that provides additional functionality to the BuddyPress community plugin. WordPress Activity Plus Reloaded for BuddyPress plugin suffers from an authorization issue vulnerability that stems from a lack of authorization...
Threat Intelligence Sweeping now supports container security telemetry data
Threat Intelligence Sweeping starts to support sweep container security telemetry data. Users can now use the TI tool to identify possible malicious activity in their container-based environments. The trigger events are visible in workbench alert...
MAL-2025-4756 Malicious code in pages-admin (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in moonpay-demo-integrations (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
CVE-2025-27445
creationtimestamp| type| source ---|---|--- 2025-06-05 13:49:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquhlgrb3xi2 2025-06-05 14:31:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114631238055243276 2025-06-18...
CERTFR-2025-ALE-008
creationtimestamp| type| source ---|---|--- 2025-06-05 13:02:06+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114630886878374339 2025-06-05 13:33:03+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lqugnmb2rk2r...
CVE-2025-5655
creationtimestamp| type| source ---|---|--- 2025-06-05 11:49:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquatmxb45n2 2025-06-05 14:43:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lquklmehdr2e 2026-01-18...
CVE-2025-5646
creationtimestamp| type| source ---|---|--- 2025-06-05 08:47:29+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqtwoot3hzv2 2025-06-05 11:22:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqu7ekpprg2s...
CVE-2025-5643
creationtimestamp| type| source ---|---|--- 2025-06-05 07:55:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqttpw3onps2 2025-06-05 10:46:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqu5dg2pcf2m...
CyberData 011209 SIP Emergency Intercom
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, cause a denial-of-service condition, or achieve code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation...
CVE-2025-5620
creationtimestamp| type| source ---|---|--- 2025-06-05 00:07:27+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqszmnitnsw2...
Breaking Anonymity at Scale: Re-Identifying the Trajectories of 100K Real Users in Japan
Mobility traces represent a critical class of personal data, often subjected to privacy-preserving transformations before public release. In this study, we analyze the anonymized Yjmob100k dataset, which captures the trajectories of 100,000 users in Japan, and demonstrate how existing anonymizati...
The vulnerability of the Activity Guide Composer component in the PeopleSoft Enterprise CC Common Application Objects suite allows a malicious individual to gain unauthorized access to read, add, modify, or delete data.
The vulnerability of the Activity Guide Composer component, a toolset for managing and processing data in PeopleSoft Enterprise CC Common Application Objects, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized acces...
MAL-2025-4670 Malicious code in world-id-lens-dapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d27d63976b7108297f8d9a29062b3add9973c83849fd5ab7cd8fbd31b0248701 The OpenSSF Package Analysis project identified 'world-id-lens-dapp' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...