CVE-2025-63687

An issue was discovered in rymcu forest thru commit f782e85 2025-09-04 in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts...

CVE-2025-12856

creationtimestamp| type| source ---|---|--- 2025-11-07 15:15:33+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52engqw7dv2 2025-11-07 15:57:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m52gysn63k2n...

CVE-2025-12854

creationtimestamp| type| source ---|---|--- 2025-11-07 15:15:31+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52en4strzf2 2025-11-07 15:47:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m52ggvrom42x...

CVE-2025-10968

creationtimestamp| type| source ---|---|--- 2025-11-07 15:15:18+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52emsb7b7d2 2025-11-07 15:42:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m52g5xe7ly2q 2025-11-07 17:41:12+00:00| seen|...

CVE-2025-64336

creationtimestamp| type| source ---|---|--- 2025-11-07 06:17:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4zglip5lf2b 2025-11-07 07:10:46+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4zjkgsnyaa2 2025-11-07 09:01:58+00:00| seen|...

CVE-2025-64180

creationtimestamp| type| source ---|---|--- 2025-11-07 04:32:01+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4zaotvyw225 2025-11-07 05:43:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4zenvwyas2j...

PT-2025-45448

Name of the Vulnerable Software and Affected Versions rymcu forest affected versions not specified Description An issue exists that allows authorized attackers to delete arbitrary users' posts. The issue is located in the doBefore function within the AuthorshipAspect.java file in the...

CVE-2025-63687

An issue was discovered in rymcu forest thru commit f782e85 2025-09-04 in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts...

CVE-2025-63687

An issue was discovered in rymcu forest thru commit f782e85 2025-09-04 in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts...

Forest security vulnerabilities

forest is RYMCU open source a modern knowledge community backend project , using SpringBoot + Shiro + MyBatis + JWT + Redis implementation . A security vulnerability exists in forest version f782e85, which stems from a flaw in the doBefore function in the AuthorshipAspect.java file, which could...

CVE-2025-63687: Incorrect Authorization

An issue was discovered in rymcu forest thru commit f782e85 2025-09-04 in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts...

EUVD-2025-38103

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in RealMag777 TableOn posts-table-filterable allows Code Injection.This issue affects TableOn: from n/a through = 1.0.4.2...

CVE-2025-60244

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in RealMag777 TableOn posts-table-filterable allows Code Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

CVE-2025-60244 WordPress TableOn plugin <= 1.0.5.1 - Content Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in RealMag777 TableOn posts-table-filterable allows Code Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

CVE-2025-60244

CVE-2025-60244 concerns a Basic XSS in the WordPress TableOn plugin (RealMag777 TableOn posts-table-filterable) caused by improper neutralization of script-related HTML tags, enabling code injection. Affected versions are TableOn &lt;= 1.0.4.2 (per initial sources); later entries also reference

CVE-2025-64473

creationtimestamp| type| source ---|---|--- 2025-11-06 06:45:50+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4wxo4d7gqd2 2025-11-06 07:47:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4x35jpwfy2n...

CVE-2025-60244: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in RealMag777 TableOn posts-table-filterable allows Code Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

PT-2025-45285

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in RealMag777 TableOn posts-table-filterable allows Code Injection.This issue affects TableOn: from n/a through = 1.0.4.2...

CVE-2025-12192

creationtimestamp| type| source ---|---|--- 2025-11-05 12:37:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4v2vuqmqd2q 2025-11-05 13:01:38+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4v46hbihcp2...

CVE-2025-43442

creationtimestamp| type| source ---|---|--- 2025-11-05 12:06:48+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4uz4iazgdu2 2025-11-05 12:40:22+00:00| seen| https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3m4v2yocp7nv2...