27635 matches found
CVE-2025-11270
creationtimestamp| type| source ---|---|--- 2025-10-18 07:37:41+00:00| seen| Telegram/TwcTVJ8Ir5ACNvODW4AnrLq0FUH28Aj4vAmIFbdi7YZg24Y...
CVE-2025-11391
creationtimestamp| type| source ---|---|--- 2025-10-18 07:03:52+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3h7tx25lp2m 2025-10-21 03:00:12+00:00| published-proof-of-concept| Telegram/6J7A0ZXG4v13P3LlhGwiMQLoNpZlx5W4nopeRdovsmYgqI...
CVE-2025-9562
The CVE-2025-9562 entry covers the WordPress plugin Redirection for Contact Form 7 (wpcf7-redirect) with a Stored Cross-Site Scripting vulnerability in the qs_date shortcode. Affected versions: all up to and including 3.2.6. Root cause: insufficient input sanitization and output escaping on user-...
CVE-2025-9562 Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's qsdate shortcode in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-9562 Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's qsdate shortcode in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-62670
creationtimestamp| type| source ---|---|--- 2025-10-18 04:39:47+00:00| seen| Telegram/KEArgRdtRS8S2R08XIVcmD2QcCvchblHLF9E5rohk2MRPiI...
CVE-2025-11925
creationtimestamp| type| source ---|---|--- 2025-10-18 01:34:44+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3gnhfxg2s26...
RockyLinux 10 : libsoup3 (RLSA-2025:18183)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:18183 advisory. libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library CVE-2025-11021 Tenable has extracted the preceding description block directly from t...
CVE-2024-31573
XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet used for an XSLT transformation, because XSLT extension functions are enabled...
CVE-2012-2090
creationtimestamp| type| source ---|---|--- 2025-10-17 17:52:23+00:00| seen| https://gist.github.com/EbonJaeger/99dd58f015b229c6f25edb5dae784966...
CVE-2025-60359
radare2 v5.9.8 and before contains a memory leak in the function rbinobjectnew...
CVE-2025-11900
creationtimestamp| type| source ---|---|--- 2025-10-17 04:34:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3egzziefr2b...
CVE-2025-11492
creationtimestamp| type| source ---|---|--- 2025-10-17 00:04:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3dxwygcl62e 2025-10-17 05:18:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m3ejixlaun27 2025-10-18 03:09:33+00:00| seen|...
Restaurant Brands International assistant platform 安全漏洞
Restaurant Brands International assistant platform is a restaurant back office platform from Restaurant Brands International. A security vulnerability exists in the Restaurant Brands International assistant platform version 2025-09-06 and earlier, which stems from an unimplemented access control ...
PT-2025-52921
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's NTFS3 implementation related to uninitialized memory after a failed mi read operation within mi format new. The issue stems from the ntfs get bh...
CVE-2021-3831
creationtimestamp| type| source ---|---|--- 2025-10-16 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrkkbmw2n...
CVE-2005-3128
creationtimestamp| type| source ---|---|--- 2025-10-16 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrjnze623...
EUVD-2025-34808
Hardcoded credentials in gsigel14 ATLAS-EPIC commit f29312c 2025-05-26...
CVE-2025-61909
Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...