Malicious Package

Overview browser-client-neptune is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

PT-2025-50875

Name of the Vulnerable Software and Affected Versions GroupSession Free edition versions prior to 5.3.0 GroupSession byCloud versions prior to 5.3.3 GroupSession ZION versions prior to 5.3.2 Description A flaw exists in GroupSession where a Circular notice can be created with a non-editable memo...

CVE-2025-13152

creationtimestamp| type| source ---|---|--- 2025-12-10 15:32:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ney2vbsi2q 2025-12-10 16:34:11+00:00| seen| https://gist.github.com/Darkcrai86/89bf68f75b2c74560442450d2618d2b6 2025-12-10 17:37:40+00:00| seen|...

CVE-2025-67575

Missing Authorization vulnerability in Andrew Lima Sitewide Notice WP sitewide-notice-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sitewide Notice WP: from n/a through = 2.4.1...

CVE-2025-67554

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Humanityco Cookie Notice & Compliance for GDPR / CCPA cookie-notice allows Stored XSS.This issue affects Cookie Notice & Compliance for GDPR / CCPA: from n/a through = 2.5.8...

PT-2025-50886

CVE-2025-13760 - CVE-2021-1234: Microsoft Windows Local Privilege Escalation CVE ID : CVE-2025-13760 Published : Dec. 9, 2025, 11:15 p.m. | 1 hour, 48 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the...

EUVD-2025-201948

Missing Authorization vulnerability in Andrew Lima Sitewide Notice WP sitewide-notice-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sitewide Notice WP: from n/a through = 2.4.1...

EUVD-2025-202092

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Humanityco Cookie Notice & Compliance for GDPR / CCPA cookie-notice allows Stored XSS.This issue affects Cookie Notice & Compliance for GDPR / CCPA: from n/a through = 2.5.8...

CVE-2023-53823

Multiple race condition vulnerabilities were found in the block layer's request quality of service rqqos subsystem in the Linux kernel. The rqqos APIs lacked proper synchronization, leading to: concurrent writes to q-rqqos causing data corruption, NULL pointer dereferences when rqqosexit races wi...

CVE-2025-67575

Missing Authorization vulnerability in Andrew Lima Sitewide Notice WP sitewide-notice-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sitewide Notice WP: from n/a through = 2.4.1...

CVE-2025-67554

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Humanityco Cookie Notice & Compliance for GDPR / CCPA cookie-notice allows Stored XSS.This issue affects Cookie Notice & Compliance for GDPR / CCPA: from n/a through = 2.5.8...

CVE-2025-67575

CVE-2025-67575 affects the WordPress plugin Sitewide Notice WP. The vulnerability is described as Missing Authorization, allowing unauthorized access to the plugin’s functionality. The initial details indicate the affected release range is Sitewide Notice WP: from n/a through <= 2.4.1, with a ...

CVE-2025-67575 WordPress Sitewide Notice WP plugin <= 2.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Andrew Lima Sitewide Notice WP sitewide-notice-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sitewide Notice WP: from n/a through = 2.4.1...

CVE-2025-67575 WordPress Sitewide Notice WP plugin <= 2.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Andrew Lima Sitewide Notice WP sitewide-notice-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sitewide Notice WP: from n/a through = 2.4.1...

CVE-2025-67554 WordPress Cookie Notice & Compliance for GDPR / CCPA plugin <= 2.5.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Humanityco Cookie Notice & Compliance for GDPR / CCPA cookie-notice allows Stored XSS.This issue affects Cookie Notice & Compliance for GDPR / CCPA: from n/a through = 2.5.8...

CVE-2025-67554 WordPress Cookie Notice & Compliance for GDPR / CCPA plugin <= 2.5.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Humanityco Cookie Notice & Compliance for GDPR / CCPA cookie-notice allows Stored XSS.This issue affects Cookie Notice & Compliance for GDPR / CCPA: from n/a through = 2.5.8...

CVE-2025-67554

Summary: CVE-2025-67554 is a stored XSS vulnerability in the WordPress plugin

CVE-2025-14307

creationtimestamp| type| source ---|---|--- 2025-12-09 10:34:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/115689158775161724 2025-12-09 10:34:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7kdukqmpr2s 2025-12-09 19:07:23+00:00| seen|...

December 9, 2025—KB5071543 (OS Build 14393.8688)

None None...

WordPress plugin Cookie Notice & Compliance for GDPR / CCPA 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blogs on PHP and MySQL-based servers. A...