Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989280 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix potential null dereference on pointer status There are calls to idxdcmdexec...

PT-2025-45163

Name of the Vulnerable Software and Affected Versions OSSN Open Source Social Network version 8.6 Description OSSN Open Source Social Network version 8.6 has a SQL Injection issue in the /action/rtcomments/status API endpoint through the timestamp parameter. Recommendations At the moment, there i...

CVE-2025-63585

OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990208)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990208 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: Octeon: Add PCIe link status check The standard PCIe configuration read-write interface is...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989220)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989220 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmtstatus' of size 6 could overflow, since index...

CVE-2025-63585

OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...

CVE-2025-63585

OSSN 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter. The vulnerability is a SQLi in the timestamp field that can lead to data disclosure/modification under certain DB permissions, with evidence of a time-based blind exploit demonstrated in public GitHu...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990115)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990115 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmtstatus' of size 6 could overflow, since index...

CVE-2025-59595

creationtimestamp| type| source ---|---|--- 2025-11-04 23:42:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115494076915539324 2025-11-04 23:58:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4tqhnrv6y2u 2025-11-05 00:01:54+00:00| seen|...

GHSA-6R98-6QCW-RXRW

creationtimestamp| type| source ---|---|--- 2025-11-04 23:39:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115494066188195772...

GHSA-2JR2-8WF5-V6PF

creationtimestamp| type| source ---|---|--- 2025-11-04 23:39:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115494066188195772...

GHSA-JHJX-X4CF-4VM8

creationtimestamp| type| source ---|---|--- 2025-11-04 21:45:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115493614774031888...

CVE-2025-63294

creationtimestamp| type| source ---|---|--- 2025-11-04 16:01:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115492263455116466 2025-11-04 17:42:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4t3h7h5ms2u 2025-11-04 19:06:09+00:00| seen|...

PT-2025-44941

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

WordPress plugin Crypto Payment Gateway with Payeer for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

CVE-2025-8558

creationtimestamp| type| source ---|---|--- 2025-11-03 19:11:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115487348264070933 2025-11-03 20:06:34+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4qszd77tgt2 2025-11-03 21:40:13+00:00| seen|...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Wifi: rtl818x: Kill URBs before clearing the txstatusqueue In rtl8187stop, the call to usbkillanchoredurbs is moved before clearing the btxstatusqueue. This change prevents callbacks from using already freed skb because the ancho...

CVE-2011-10040

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...

CVE-2025-63459

creationtimestamp| type| source ---|---|--- 2025-10-31 17:33:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115469977943384458 2025-10-31 21:38:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4jgrfisma2s...

CVE-2025-63465

creationtimestamp| type| source ---|---|--- 2025-10-31 17:27:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115469952531670089 2025-10-31 21:42:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4jgzesvrs2a...