CVE-2025-13771

creationtimestamp| type| source ---|---|--- 2025-11-28 10:03:00+00:00| seen| https://infosec.exchange/users/offseq/statuses/115626749410261118 2025-11-28 10:03:02+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m6omy3254v26 2025-11-28 11:04:14+00:00| seen|...

CVE-2025-12856

creationtimestamp| type| source ---|---|--- 2025-11-07 15:15:33+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52engqw7dv2 2025-11-07 15:57:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m52gysn63k2n...

CVE-2025-53072

creationtimestamp| type| source ---|---|--- 2025-10-22 04:33:55+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3qzdj5an22i 2025-10-22 07:21:45+00:00| seen| https://poliverso.org/objects/0477a01e-736b48f2-6409a361f7d72e52 2025-10-22 07:25:50+00:00| seen|...

CVE-2022-36903

creationtimestamp| type| source ---|---|--- 2025-10-19 15:39:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m3kb2yynzmw2 2025-10-19 16:20:18+00:00| seen| https://bsky.app/profile/potato.software/post/3m3kpfudtee2s...

CVE-2025-62176

Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...

Mastodon 安全漏洞

Mastodon is an open source social networking server based on ActivityPub by Mastodon Open Source. A security vulnerability exists in Mastodon versions prior to 4.4.6, prior to 4.3.14, and prior to 4.2.27, which stems from an event where the stream server accepts service for a public timeline usin...

CVE-2025-59340

creationtimestamp| type| source ---|---|--- 2025-09-18 04:32:10+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lz3jf3gfbn2w 2025-09-19 07:32:32+00:00| seen| https://bsky.app/profile/crowdcyber.bsky.social/post/3lz6dwkaulg2c 2025-09-19 13:13:41+00:00| seen|...

CVE-2025-10155

creationtimestamp| type| source ---|---|--- 2025-09-10 19:51:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jgw4-cr84-mqxg 2025-09-17 10:31:59+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyzmzk6thf2o 2025-09-17 11:32:14+00:00| seen|...

CVE-2025-8388

creationtimestamp| type| source ---|---|--- 2025-09-10 05:00:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyhhbbhzhb2r 2025-09-10 05:01:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyhhc73eyw2y...

CVE-2025-9300

creationtimestamp| type| source ---|---|--- 2025-09-04 09:58:57+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lxyv4h6xe22g 2025-09-04 10:14:36+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lxyvyg6zrk2g 2025-09-05 22:01:48+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2020-25286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or...

Linux Distros Unpatched Vulnerability : CVE-2023-5561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of use...

CVE-2025-8822

creationtimestamp| type| source ---|---|--- 2025-08-11 01:31:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lw3nl7vzna2u 2025-08-11 02:21:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw3qenamg32s 2025-08-11 15:39:39+00:00| seen|...

CVE-2025-34152

creationtimestamp| type| source ---|---|--- 2025-08-07 20:07:56+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/46935 2025-08-08 03:00:05+00:00| published-proof-of-concept| Telegram/e2h4KF19bvVdrVdcOJim51yVXX08ZKfBey7WjVNbHEXwmTU 2025-08-09 21:02:26+00:00| seen|...

Meta slurps up EU user data for AI training

European Facebook users have so far avoided having their public posts used to train parent company Meta's AI model. That's about to change, the company has warned. In a blog post today, it said that EU residents' data was fair game and it would be slurping up public posts for training soon...

CVE-2024-13855

The Prime Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.1 via the paeglobalblock shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

WordPress plugin Prime Addons for Elementor 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An Access Control...

CVE-2024-13854

The Education Addon for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.1 via the naeduelementortemplate shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wit...

CERTFR-2025-ACT-002

creationtimestamp| type| source ---|---|--- 2025-01-17 16:45:05+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3lfxakzi2ev2w 2025-01-20 13:10:41+00:00| seen| https://bsky.app/profile/ag6218ent.bsky.social/post/3lg6fyfd7ww2y...

UBUNTU-CVE-2023-5692

WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirectguess404permalink function. This can allow unauthenticated attackers to expose the slug of a custom post whose 'publiclyqueryable' post status has been set to 'false'...