CVE-2025-60915

creationtimestamp| type| source ---|---|--- 2025-11-24 17:47:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ff3rsyth26...

CVE-2025-40213 Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in setmeshsync and setmeshcomplete There is a BUG: KASAN: stack-out-of-bounds in setmeshsync due to memcpy from badly declared on-stack flexible array. Another crash is in setmeshcomplete due to double...

CVE-2025-44018

creationtimestamp| type| source ---|---|--- 2025-11-24 15:30:04+00:00| seen| https://infosec.place/objects/3df11b65-0b0e-437a-809e-d71455fdcce2 2025-11-24 15:46:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115605449877366856 2025-11-24 17:18:57+00:00| seen|...

ECHO-820C-CCBE-62EB

Bulletin has no description...

CVE-2025-56396

creationtimestamp| type| source ---|---|--- 2025-11-24 07:27:01+00:00| seen| https://gist.github.com/Han-tj/22cfd18fa9f116bb886e8e56782f6865...

CVE-2025-12800

creationtimestamp| type| source ---|---|--- 2025-11-24 01:50:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6dplwp7g72n...

CVE-2025-13384

The CP Contact Form with PayPal plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.3.56. This is due to the plugin exposing an unauthenticated IPN-like endpoint via the 'cpcontactformppipncheck' query parameter that processes payment confirmations...

EUVD-2025-198559

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2025-198561

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

PT-2025-47893

CVE-2025-12561 - CVE-2022-1234: Oracle WebLogic Server Remote Code Execution CVE ID : CVE-2025-12561 Published : Nov. 22, 2025, 11:15 p.m. | 3 hours, 26 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit t...

CVE-2025-13384

The WordPress plugin CP Contact Form with PayPal (

EUVD-2025-198526

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

GHSA-HWM7-W97P-4H8P

creationtimestamp| type| source ---|---|--- 2025-11-21 22:32:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115590060817850699...

GHSA-73G8-5H73-26H4

creationtimestamp| type| source ---|---|--- 2025-11-21 20:14:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115589518891298219...

GHSA-MVFX-PH7M-QM37

creationtimestamp| type| source ---|---|--- 2025-11-21 18:39:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115589142587853429...

MINI-P5C3-P9Q3-6336

Bulletin has no description...

MINI-JFH2-9GFJ-7FXJ

Bulletin has no description...

CVE-2025-62729

SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary HTML and JS into website, which will be rendered/executed when opening multiple pages. This issue was fixed in version 1.55...

CVE-2025-62293

SOPlanning is vulnerable to Broken Access Control in /status endpoint. Due to lack of permission checks in Project Status functionality an authenticated attacker is able to add, edit and delete any status. This issue was fixed in version 1.55...

CVE-2025-13149

The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the "saveFutureActionData" function in all versions up to, and including,...