org.keycloak:keycloak-quarkus-integration-tests (20.0.5) potentially affected by CVE-2025-11538 via org.keycloak:keycloak-quarkus-dist (20.0.5)

org.keycloak:keycloak-quarkus-dist MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-dist and may be impacted: - org.keycloak:keycloak-quarkus-integration-tests 20.0.5 Source cves: CVE-2025-11538 Source...

org.keycloak:keycloak-quarkus-integration-tests (18.0.0) potentially affected by CVE-2025-11538 via org.keycloak:keycloak-quarkus-dist (18.0.0)

org.keycloak:keycloak-quarkus-dist MAVEN version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-dist and may be impacted: - org.keycloak:keycloak-quarkus-integration-tests 18.0.0 Source cves: CVE-2025-11538 Source...

org.keycloak:keycloak-quarkus-integration-tests (20.0.2) potentially affected by CVE-2025-11538 via org.keycloak:keycloak-quarkus-dist (20.0.2)

org.keycloak:keycloak-quarkus-dist MAVEN version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-dist and may be impacted: - org.keycloak:keycloak-quarkus-integration-tests 20.0.2 Source cves: CVE-2025-11538 Source...

org.keycloak:keycloak-quarkus-integration-tests (19.0.2) potentially affected by CVE-2025-11538 via org.keycloak:keycloak-quarkus-dist (19.0.2)

org.keycloak:keycloak-quarkus-dist MAVEN version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-dist and may be impacted: - org.keycloak:keycloak-quarkus-integration-tests 19.0.2 Source cves: CVE-2025-11538 Source...

org.keycloak:keycloak-quarkus-integration-tests (20.0.3) potentially affected by CVE-2025-11538 via org.keycloak:keycloak-quarkus-dist (20.0.3)

org.keycloak:keycloak-quarkus-dist MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-dist and may be impacted: - org.keycloak:keycloak-quarkus-integration-tests 20.0.3 Source cves: CVE-2025-11538 Source...

org.keycloak:keycloak-quarkus-integration-tests (17.0.0) potentially affected by CVE-2025-11538 via org.keycloak:keycloak-quarkus-dist (17.0.0)

org.keycloak:keycloak-quarkus-dist MAVEN version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-dist and may be impacted: - org.keycloak:keycloak-quarkus-integration-tests 17.0.0 Source cves: CVE-2025-11538 Source...

org.keycloak:keycloak-quarkus-integration-tests (21.0.1) potentially affected by CVE-2025-11538 via org.keycloak:keycloak-quarkus-dist (21.0.1)

org.keycloak:keycloak-quarkus-dist MAVEN version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-dist and may be impacted: - org.keycloak:keycloak-quarkus-integration-tests 21.0.1 Source cves: CVE-2025-11538 Source...

org.keycloak:keycloak-quarkus-integration-tests (19.0.0) potentially affected by CVE-2025-11538 via org.keycloak:keycloak-quarkus-dist (19.0.0)

org.keycloak:keycloak-quarkus-dist MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-dist and may be impacted: - org.keycloak:keycloak-quarkus-integration-tests 19.0.0 Source cves: CVE-2025-11538 Source...

org.keycloak:keycloak-quarkus-integration-tests (20.0.0) potentially affected by CVE-2025-11538 via org.keycloak:keycloak-quarkus-dist (20.0.0)

org.keycloak:keycloak-quarkus-dist MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-dist and may be impacted: - org.keycloak:keycloak-quarkus-integration-tests 20.0.0 Source cves: CVE-2025-11538 Source...

Exploit for CVE-2023-1234

🤖 XBOW-Metascan: AI-Powered Autonomous Pentesting Platform !...

burp_mirror_gui

Burp Multiple Instance Management Tool This solution, when combined with jsforward or mitmdump, effectively addresses the following pain points in penetration testing: 1. Enables real-time testing for privilege escalation, unauthorized access, business logic vulnerabilities, and session-related...

CVE-2025-59371

An authentication bypass vulnerability has been identified in the IFTTT integration feature. A remote, authenticated attacker could leverage this vulnerability to potentially gain unauthorized access to the device. This vulnerability does not affect Wi-Fi 7 series models. Refer to the 'Security...

EUVD-2025-199801

The SKT PayPal for WooCommerce plugin for WordPress is vulnerable to Payment Bypass in all versions up to, and including, 1.4. This is due to the plugin only enforcing client side controls instead of server-side controls when processing payments. This makes it possible for unauthenticated attacke...

CVE-2025-13143

The Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 19.12.0. This is due to missing or insufficient nonce validation on the disconnectaccountaction function. This makes it possible for...

CVE-2025-7820 SKT PayPal for WooCommerce <= 1.4 - Unauthenticated Payment Bypass

The SKT PayPal for WooCommerce plugin for WordPress is vulnerable to Payment Bypass in all versions up to, and including, 1.4. This is due to the plugin only enforcing client side controls instead of server-side controls when processing payments. This makes it possible for unauthenticated attacke...

WordPress Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin unauthorized access vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An unauthorized access vulnerability exists in the WordPress Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin, which stems from a lack of privilege...

PT-2025-48237

The Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 19.12.0. This is due to missing or insufficient nonce validation on the disconnect account action function. This makes it possible for...

PT-2025-48239

The QODE Wishlist for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.7 via the 'qode wishlist for woocommerce wishlist table item callback' function due to missing validation on a user controlled key. This makes it...

Wordfence Intelligence Weekly WordPress Vulnerability Report (November 17, 2025 to November 23, 2025)

Last week, there were 167 vulnerabilities disclosed in 152 WordPress Plugins and 2 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 69 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Uncontrolled Recursion due to Apache Commons Lang ( CVE-2025-48924 )

Summary IBM App Connect Enterprise runtime and IBM Integration Bus for z/OS are vulnerable to Uncontrolled Recursion due to Apache Commons Lang. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons...