CVE-2025-14034

The vulnerability CVE-2025-14034 affects the ilGhera Support System for WooCommerce WordPress plugin. A missing capability check in delete_single_ticket_callback and change_ticket_status_callback in all versions through 1.2.6 allows authenticated attackers with Subscriber+ privileges to delete ar...

GHSA-8C39-XPPG-479C

creationtimestamp| type| source ---|---|--- 2026-01-06 02:02:01+00:00| seen| Telegram/FEXfoeJAqOIroyUDCRdgqul6wp9Eck5nAsZ9jdmneKfShFo...

GHSA-HGP5-R8M9-8QPJ

creationtimestamp| type| source ---|---|--- 2026-01-06 02:02:01+00:00| seen| Telegram/FEXfoeJAqOIroyUDCRdgqul6wp9Eck5nAsZ9jdmneKfShFo...

PT-2026-1402

Name of the Vulnerable Software and Affected Versions ilGhera Support System for WooCommerce plugin versions prior to 1.2.7 Description The ilGhera Support System for WooCommerce plugin for WordPress has a flaw that allows unauthorized modification and data loss. A missing capability check in the...

GHSA-PHPV-94HG-FV9G

creationtimestamp| type| source ---|---|--- 2026-01-05 21:59:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844736458981138 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg...

GHSA-VRJC-Q2FH-6X9H

creationtimestamp| type| source ---|---|--- 2026-01-05 21:29:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844615213362323 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg 2026-01-24 21:30:51+00:00| seen|...

GHSA-X4M5-4CW8-VC44

creationtimestamp| type| source ---|---|--- 2026-01-05 21:08:15+00:00| seen| Telegram/nm9du9wjltxMtcwJpPJKV121bbF8xLkPf7YZ6cUjHAdlMjM 2026-01-24 22:44:03+00:00| seen| https://gist.github.com/alon710/50d1c5074480f85c7f106c1b1c29f2ab...

CVE-2025-52872

creationtimestamp| type| source ---|---|--- 2026-01-05 21:08:15+00:00| seen| Telegram/nm9du9wjltxMtcwJpPJKV121bbF8xLkPf7YZ6cUjHAdlMjM...

EUVD-2025-206233

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, an attacker can initiate a password reset for a victim, and modify the host header of the request to a malicious value. The victim will...

CVE-2025-64424 Colify has command injection vulnerability in project git source

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, a command injection vulnerability exists in the git source input fields of a resource, allowing a low privileged user member to execute syst...

GHSA-824X-88XG-CWRV

creationtimestamp| type| source ---|---|--- 2026-01-05 20:34:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844398425652355 2026-01-08 00:04:16+00:00| seen| Telegram/8hg5Gu2QSQMEOVEXvwkuKKrDJKBvTFN3ZFtq0-NHQh3Nk 2026-01-24 21:31:06+00:00| seen|...

GHSA-F8CM-6447-X5H2

creationtimestamp| type| source ---|---|--- 2026-01-05 18:18:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115843866761403958 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg...

CVE-2026-0597

creationtimestamp| type| source ---|---|--- 2026-01-05 16:06:04+00:00| seen| Telegram/XZpUXrdgjcWqcZn8MpDZgV9hER-V-zJO0pOaJvkAc1sCxJ4 2026-01-05 17:13:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbowr4i5vc2q...

CVE-2025-8093

creationtimestamp| type| source ---|---|--- 2026-01-05 16:05:08+00:00| seen| Telegram/IEZ6cogSdNdT5EWieomNDj8YJiNp4nPJLapvMP3vG-VLxk...

Authentication Bypass

Signal K Server is vulnerable to Authentication Bypass. The vulnerability is due to unauthenticated exposure of WebSocket server events and access-request status endpoints, which allows an attacker to enumerate request IDs and poll their status to steal plaintext JWT tokens and fully hijack...

CVE-2025-15449

creationtimestamp| type| source ---|---|--- 2026-01-05 04:29:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbnm2d4gqd22...

PT-2026-1251

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's crypto subsystem, specifically within the starfive implementation. The sg nents for len function's return value was incorrectly assigned to an unsigne...

PT-2026-1423

CVE-2025-69291 - Apache Unassigned Vulnerability CVE ID : CVE-2025-69291 Published : Jan. 5, 2026, 7:15 p.m. | 2 hours, 35 minutes ago Description : Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues...

CVE-2025-15462

creationtimestamp| type| source ---|---|--- 2026-01-04 18:08:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115838162555165469 2026-01-05 07:41:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbnwrsmc3p2u 2026-01-05 08:02:10+00:00| published-proof-of-concep...

CVE-2026-0576

creationtimestamp| type| source ---|---|--- 2026-01-04 11:00:38+00:00| published-proof-of-concept| Telegram/WAeIMp-qLoix2fMN5m4VAPW7c3mTPvm4gc9HGkPHwEa3bG0 2026-01-04 12:49:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mblxjyyw4q2c...