CVE-2025-61841

creationtimestamp| type| source ---|---|--- 2025-11-11 20:04:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ewnmyjzw2q 2025-11-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-996/...

CVE-2025-62449

creationtimestamp| type| source ---|---|--- 2025-11-11 17:30:42+00:00| seen| https://www.thezdi.com/blog/2025/11/11/the-november-2025-security-update-review 2025-11-11 17:35:40+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0362 2025-11-11 19:37:11+00:00| seen|...

CVE-2025-26694

creationtimestamp| type| source ---|---|--- 2025-11-11 17:22:30+00:00| seen| https://bsky.app/profile/potato.software/post/3m5enmbkube2f...

CVE-2025-11457

creationtimestamp| type| source ---|---|--- 2025-11-11 07:32:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/115529897855835530 2025-11-11 07:32:24+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m5dmn3isdz2p 2025-11-14 22:42:51+00:00| published-proof-of-concept|...

CVE-2025-12651

creationtimestamp| type| source ---|---|--- 2025-11-11 05:53:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5dh47d7ap2k...

CVE-2025-63712

creationtimestamp| type| source ---|---|--- 2025-11-10 15:52:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5by4cq3u62k...

CVE-2025-64684

creationtimestamp| type| source ---|---|--- 2025-11-10 15:49:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5bxxgd7bu2j 2025-11-10 15:57:51+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5byd46rqe62...

CVE-2025-63710

creationtimestamp| type| source ---|---|--- 2025-11-10 15:40:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5bxheuwf42b...

Fedora: Security Advisory (FEDORA-2025-2406078e57)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-12621

The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on the 'createrefund' function in all versions up to, and including, 1.0.42. This makes it possible for authenticated attackers, wit...

CVE-2025-12621

The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on the 'createrefund' function in all versions up to, and including, 1.0.42. This makes it possible for authenticated attackers, wit...

CVE-2025-12621 Flexible Refund and Return Order for WooCommerce <= 1.0.42 - Incorrect Authorization to Authenticated (Contributor+) Refund Status Update

The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on the 'createrefund' function in all versions up to, and including, 1.0.42. This makes it possible for authenticated attackers, wit...

CVE-2025-12621 Flexible Refund and Return Order for WooCommerce <= 1.0.42 - Incorrect Authorization to Authenticated (Contributor+) Refund Status Update

The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on the 'createrefund' function in all versions up to, and including, 1.0.42. This makes it possible for authenticated attackers, wit...

CVE-2025-12621

Insight (CVE-2025-12621) The WordPress plugin “Flexible Refund and Return Order for WooCommerce” is vulnerable via an incorrect/misconfigured capability check in the create_refund function, allowing any authenticated user with Contributor level or higher to modify refund statuses (approve/deny) i...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...

CVE-2025-64435

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.7.0-beta.0, a logic flaw in the virt-controller allows an attacker to disrupt the control over a running VMI by creating a pod with the same labels as the legitimate virt-launcher pod associated with the VMI. This can...

GHSA-W832-GG5G-X44M

creationtimestamp| type| source ---|---|--- 2025-11-07 20:58:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115510417640999900 2025-11-10 09:28:07+00:00| seen| https://gist.github.com/Ochyro/47b7b222c6ca5445d317dbcf46c47d39...