24725 matches found
PT-2025-39936
Name of the Vulnerable Software and Affected Versions The Big Post Shipping for WooCommerce plugin versions prior to 2.1.2 Description The software is susceptible to Stored Cross-Site Scripting through the 'wooboigpost shipping status' shortcode. Insufficient input sanitization and output escapin...
Advisory ROSA-SA-2025-3017
software: chromium-browser-stable 140.0.7339.185 WASP: ROSA-CHROME unaffected versions = chromium-browser-stable-140.0.7339.185-1 affected versions chromium-browser-stable-140.0.7339.185-1 CVE-ID: CVE-2025-10585 BDU-ID: 2025-11457 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the V8 component of...
CVE-2025-11100
creationtimestamp| type| source ---|---|--- 2025-09-28 10:33:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzvcatlcku2j...
CVE-2025-11053
creationtimestamp| type| source ---|---|--- 2025-09-27 09:12:40+00:00| seen| https://gist.github.com/Darkcrai86/67f34cd4bed2ecf45973c60f3d48a611...
CVE-2025-10499
creationtimestamp| type| source ---|---|--- 2025-09-27 02:55:47+00:00| seen| Telegram/msu3r-G5L2x4JXO77BoxsvAc7kgkO4FGkhmoltclfQNKqc...
kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace
Impact Because UPDATE validation is not being applied, it is possible for an actor with access to an instance of the initializingworkspaces virtual workspace to run arbitrary patches on the status field of LogicalCluster objects while the workspace is initializing. This allows to add or remove an...
GHSA-Q6HV-WCJR-WP8H kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace
Impact Because UPDATE validation is not being applied, it is possible for an actor with access to an instance of the initializingworkspaces virtual workspace to run arbitrary patches on the status field of LogicalCluster objects while the workspace is initializing. This allows to add or remove an...
GCVE-1-2025-0004
creationtimestamp| type| source ---|---|--- 2025-09-25 18:52:48+00:00| seen| https://social.circl.lu/users/cedric/statuses/115266444798808086 2025-09-25 20:05:27+00:00| patched| https://github.com/vulnerability-lookup/vulnerability-lookup/commit/afa12347f1461d9481eba75ac19897e80a9c7434...
GHSA-54J7-GRVR-9XWG
creationtimestamp| type| source ---|---|--- 2025-09-25 13:53:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115265269823527423...
CVE-2025-54726
creationtimestamp| type| source ---|---|--- 2025-09-25 13:36:06+00:00| seen| https://sploitus.com/exploit?id=E1BACD8B-71FE-5E28-AD25-444BE4EE0DC6&utmsource=rss&utmmedium=rss 2025-09-25 13:36:06+00:00| seen|...
CVE-2025-10880
creationtimestamp| type| source ---|---|--- 2025-09-25 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-268-01 2025-09-25 18:04:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115266254335547502...
CVE-2025-10879
creationtimestamp| type| source ---|---|--- 2025-09-25 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-268-01 2025-09-25 18:04:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115266254335547502...
Malicious Package
Overview giffgaff-status is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-47556 Malicious code in giffgaff-status (npm)
The package giffgaff-status was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcde685cc836f4f80fa6ae182e03b2bd9bae41b818468a5bbde4e94cbd4443ff Any computer that has this package installed or running should be considered fully...
Malicious code in giffgaff-status (npm)
The package giffgaff-status was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcde685cc836f4f80fa6ae182e03b2bd9bae41b818468a5bbde4e94cbd4443ff Any computer that has this package installed or running should be considered fully...
September 25, 2025—KB5066198 (OS Build 19045.6396) Preview
None None...
Linux Distros Unpatched Vulnerability : CVE-2025-39876
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: fec: Fix possible NPD in fecenetphyresetafterclkenable The function ofphyfinddevice may return NULL, so we need to take care before dereferencing phydev...
GHSA-HM85-2J65-J8J2
creationtimestamp| type| source ---|---|--- 2025-09-24 20:42:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115261215131493060...