Twitter (X) Hit by 2.8 Billion Profile Data Leak in Alleged Insider Job

Note: Title edited to maintain clarity and accurately reflect the nature of the breach, emphasizing the leak of profile data rather than implying access to private information...

CVE-2025-30800

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atawai Gum Elementor Addon gum-elementor-addon allows Stored XSS.This issue affects Gum Elementor Addon: from n/a through = 1.3.10...

CVE-2025-30919

Cross-Site Request Forgery CSRF vulnerability in Store Locator Widgets Store Locator Widget store-locator-widget allows Stored XSS.This issue affects Store Locator Widget: from n/a through = 2025r2...

CVE-2025-30785

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Shuffle Subscribe to Download Lite subscribe-to-download-lite allows PHP Local File Inclusion.This issue affects Subscribe to Download Lite: from n/a through = 1.2.9...

RHEL 9 : gvisor-tap-vsock (RHSA-2025:3185)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:3185 advisory. A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in VMware Tanzu Spring Security (CVE-2024-38827)

Summary A vulnerability in VMware Tanzu Spring Security that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2024-38827 DESCRIPTION: VMware Tanzu Spring Security could allow a remote attacker to bypass security restrictions, caused by a locale dependent...

Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to security annotations on parameterized types or methods. This may cause an authorization bypass.

Summary Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to security annotations on parameterized types or methods. This may cause an authorization bypass. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

Security Bulletin: IBM InfoSphere Information Server may be affected by an information disclosure vulnerability (CVE-2024-43186)

Summary An information disclosure vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2024-43186 DESCRIPTION: IBM InfoSphere Information Server could allow an authenticated user to obtain sensitive information that is stored locally under certain...

CVE-2025-2913

A vulnerability was found in HDF5 up to 1.14.6. It has been rated as critical. Affected by this issue is the function H5FLblkgclist of the file src/H5FL.c. The manipulation of the argument H5FLblkheadt leads to use after free. An attack has to be approached locally. The exploit has been disclosed...

Exploit for CVE-2025-1974

POC of IngressNightmare CVE-2025-1974 Developed from: - ht...

CVE-2025-22360

CVE-2025-22360 is a reflected XSS in the WP Azure offload plugin (NotFound WP Azure offload) via improper input neutralization in web page generation. Affected: WP Azure offload versions up to 2.0 (no fixed version details provided in the supplied docs). CVSSv3.1 base score 7.1 (HIGH). No explici...

CVE-2025-22356

CVE-2025-22356 targets the WordPress Stencies plugin (versions up to and including 0.58) with a Reflected Cross-Site Scripting (XSS) vulnerability. The NVD entry reports a CVSS v3.1 base score of 7.1 (HIGH) with network attack vector, low complexity, no privileges required, user interaction requi...

CVE-2024-51624 WordPress Já-Já Pagamentos for WooCommerce plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jajapagamentos Já-Já Pagamentos for WooCommerce wc-ja-ja-pagamentos-multicaixa-express allows Reflected XSS.This issue affects Já-Já Pagamentos for WooCommerce: from n/a through = 1.3.0...

MAL-2025-2850 Malicious code in bitrue-test (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-31464

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nazmur Rahman Text Selection Color text-selection-color allows Stored XSS.This issue affects Text Selection Color: from n/a through = 1.6...

CVE-2025-31079 WordPress Usermaven plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in usermaven Usermaven usermaven allows Cross Site Request Forgery.This issue affects Usermaven: from n/a through = 1.2.1...

CVE-2019-16149

Fortinet CVE-2019-16149 affects FortiClient EMS 6.2.0, where improper neutralization of input during web page generation enables a remote attacker to execute unauthorized code by injecting a malicious payload into a FortiClient‑managed user profile. This is tied to FortiClient EMS web app data ha...

MAL-2025-2785 Malicious code in shipmentdetails-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9772823042f7d0864755c4a9eaa7cc42fedc152439eab6471b40fd5bf0b9d4e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2025-21885

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Fix the page details for the srq created by kernel consumers While using nvme target with usesrq on, below kernel panic is noticed. 549.698111 bnxten 0000:41:00.0 enp65s0np0: FEC autoneg off encoding: Clause 91...

PT-2025-13641

Name of the Vulnerable Software and Affected Versions Generic Plus PCL6 Printer Driver versions 3.12 and earlier Generic Plus UFR II Printer Driver versions 3.12 and earlier Generic Plus LIPS4 Printer Driver versions 3.12 and earlier Generic Plus LIPSLX Printer Driver versions 3.12 and earlier...