28464 matches found
CVE-2025-5555
creationtimestamp| type| source ---|---|--- 2025-10-20 07:34:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3mciklpbv2a...
CVE-2025-40004
creationtimestamp| type| source ---|---|--- 2025-10-20 07:18:07+00:00| seen| https://gist.github.com/Darkcrai86/6fec47d98f714f309afe3a489c3ff8ad...
CVE-2025-11948
creationtimestamp| type| source ---|---|--- 2025-10-20 04:35:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3lyil3sj62e 2025-10-20 04:45:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3lyzurbtk2o...
CVE-2025-11946
creationtimestamp| type| source ---|---|--- 2025-10-20 00:50:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3llwwc72f2o...
CVE-2025-61132
creationtimestamp| type| source ---|---|--- 2025-10-19 23:51:40+00:00| seen| https://gist.github.com/BrookeYangRui/94c3bee0c2cbc1ed81a21d4448550c21...
CVE-2025-11938
creationtimestamp| type| source ---|---|--- 2025-10-19 08:55:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3jwjtikt42o...
CVE-2025-11939
creationtimestamp| type| source ---|---|--- 2025-10-19 08:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3jwav3fkn2q...
CVE-2025-9562
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's qsdate shortcode in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-62672
rplay through 3.3.2 allows attackers to cause a denial of service SIGSEGV and daemon crash or possibly have unspecified other impact. This occurs in memcpy in the RPLAYDATA case in rplayunpack in librplay/rplay.c, potentially reachable via packet data with no authentication...
CVE-2025-56799
creationtimestamp| type| source ---|---|--- 2025-10-18 10:51:33+00:00| seen| https://sploitus.com/exploit?id=7C0BACE9-5424-5B8A-A9CE-3EED830CA13F 2025-10-18 23:00:09+00:00| published-proof-of-concept| Telegram/udvhxTpit5HxeHvC8PvaG58a4kxnX1oVvUoV4oBuBpJFvz4 2025-10-19 03:00:05+00:00|...
CVE-2025-9890
creationtimestamp| type| source ---|---|--- 2025-10-18 09:33:56+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3hiabudxx2e 2025-10-20 06:46:04+00:00| seen| https://gist.github.com/Darkcrai86/fc142f70e1726eaa848503ee993d2625...
RLSA-2025:18183 Important: libsoup3 security update
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...
CVE-2025-10187
creationtimestamp| type| source ---|---|--- 2025-10-18 07:37:48+00:00| seen| Telegram/5axcZzlzV1gMZtMlROKyL1azCw5D2Ar8ksnDrmX-ku6IaYc...
CVE-2025-11270
creationtimestamp| type| source ---|---|--- 2025-10-18 07:37:41+00:00| seen| Telegram/TwcTVJ8Ir5ACNvODW4AnrLq0FUH28Aj4vAmIFbdi7YZg24Y...
CVE-2025-11391
creationtimestamp| type| source ---|---|--- 2025-10-18 07:03:52+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3h7tx25lp2m 2025-10-21 03:00:12+00:00| published-proof-of-concept| Telegram/6J7A0ZXG4v13P3LlhGwiMQLoNpZlx5W4nopeRdovsmYgqI...
CVE-2025-9562 Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's qsdate shortcode in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-9562
The CVE-2025-9562 entry covers the WordPress plugin Redirection for Contact Form 7 (wpcf7-redirect) with a Stored Cross-Site Scripting vulnerability in the qs_date shortcode. Affected versions: all up to and including 3.2.6. Root cause: insufficient input sanitization and output escaping on user-...
CVE-2025-9562 Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's qsdate shortcode in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...