28479 matches found
RLSA-2025:18183 Important: libsoup3 security update
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...
CVE-2025-10187
creationtimestamp| type| source ---|---|--- 2025-10-18 07:37:48+00:00| seen| Telegram/5axcZzlzV1gMZtMlROKyL1azCw5D2Ar8ksnDrmX-ku6IaYc...
CVE-2025-11270
creationtimestamp| type| source ---|---|--- 2025-10-18 07:37:41+00:00| seen| Telegram/TwcTVJ8Ir5ACNvODW4AnrLq0FUH28Aj4vAmIFbdi7YZg24Y...
CVE-2025-11391
creationtimestamp| type| source ---|---|--- 2025-10-18 07:03:52+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3h7tx25lp2m 2025-10-21 03:00:12+00:00| published-proof-of-concept| Telegram/6J7A0ZXG4v13P3LlhGwiMQLoNpZlx5W4nopeRdovsmYgqI...
CVE-2025-9562 Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's qsdate shortcode in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-9562 Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's qsdate shortcode in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-9562
The CVE-2025-9562 entry covers the WordPress plugin Redirection for Contact Form 7 (wpcf7-redirect) with a Stored Cross-Site Scripting vulnerability in the qs_date shortcode. Affected versions: all up to and including 3.2.6. Root cause: insufficient input sanitization and output escaping on user-...
CVE-2025-62670
creationtimestamp| type| source ---|---|--- 2025-10-18 04:39:47+00:00| seen| Telegram/KEArgRdtRS8S2R08XIVcmD2QcCvchblHLF9E5rohk2MRPiI...
CVE-2025-11925
creationtimestamp| type| source ---|---|--- 2025-10-18 01:34:44+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3gnhfxg2s26...
PT-2025-42703
Name of the Vulnerable Software and Affected Versions Redirection for Contact Form 7 plugin for WordPress versions up to and including 3.2.6 Description The software contains a flaw that allows for the injection of malicious web scripts into pages. This is due to inadequate handling of...
RockyLinux 10 : libsoup3 (RLSA-2025:18183)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:18183 advisory. libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library CVE-2025-11021 Tenable has extracted the preceding description block directly from t...
CVE-2024-31573
XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet used for an XSLT transformation, because XSLT extension functions are enabled...
CVE-2012-2090
creationtimestamp| type| source ---|---|--- 2025-10-17 17:52:23+00:00| seen| https://gist.github.com/EbonJaeger/99dd58f015b229c6f25edb5dae784966...
CVE-2025-60359
radare2 v5.9.8 and before contains a memory leak in the function rbinobjectnew...
CVE-2025-11900
creationtimestamp| type| source ---|---|--- 2025-10-17 04:34:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3egzziefr2b...
CVE-2025-11492
creationtimestamp| type| source ---|---|--- 2025-10-17 00:04:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3dxwygcl62e 2025-10-17 05:18:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m3ejixlaun27 2025-10-18 03:09:33+00:00| seen|...
PT-2025-52921
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's NTFS3 implementation related to uninitialized memory after a failed mi read operation within mi format new. The issue stems from the ntfs get bh...
Restaurant Brands International assistant platform security vulnerability
Restaurant Brands International assistant platform is a restaurant back office platform from Restaurant Brands International. A security vulnerability exists in the Restaurant Brands International assistant platform version 2025-09-06 and earlier, which stems from an unimplemented access control ...