CVE-2025-61155

creationtimestamp| type| source ---|---|--- 2025-10-24 16:35:43+00:00| seen| https://sploitus.com/exploit?id=AAFEDD6B-D17D-5A00-90D6-5803287C1300 2025-10-24 19:26:29+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/56802 2025-10-24 23:00:10+00:00| published-proof-of-concept|...

EUVD-2025-35719

The Frontier Airlines website has a publicly available endpoint that validates if an email addresses is associated with an account. An unauthenticated, remote attacker could determine valid email addresses, possibly aiding in further attacks...

Mapping Attack Surface for Enterprises: A 5-Step Guide

An attacker doesn’t see your company the way you do. They don’t see departments, projects, or business units. They see a collection of potential entry points—a web of digital assets they can probe for a single weakness. Their goal is to find the one unlocked door you forgot about. This is why...

CVE-2025-62236 Frontier Airlines publicly available email address validation

The Frontier Airlines website has a publicly available endpoint that validates if an email addresses is associated with an account. An unauthenticated, remote attacker could determine valid email addresses, possibly aiding in further attacks...

CVE-2025-62236

The CVE-2025-62236 entry concerns Frontier Airlines website: a publicly accessible endpoint that validates whether an email address is linked to an account. The vulnerability stems from an unauthenticated, remote check that can reveal valid email addresses, potentially enabling targeted follow‑on...

Moderate: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

CVE-2025-41719

creationtimestamp| type| source ---|---|--- 2025-10-22 09:40:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3rki52ypr2i 2025-10-22 16:10:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418687746464898...

Mattermost Server 10.5.x < 10.5.11 / 10.11.x < 10.11.3 / 10.12.0 Multiple Vulnerabilities (MMSA-2025-00497, MMSA-2025-00496, MMSA-2025-00516)

The version of Mattermost Server installed on the remote host is affected by multiple vulnerabilities as referenced in the MMSA-2025-00497, MMSA-2025-00496, MMSA-2025-00516 advisories. - Mattermost versions 10.5.x = 10.5.10, 10.11.x = 10.11.2 fail to properly validate guest user permissions when...

LAPRAD: LLM-Assisted PRotocol Attack Discovery

With the goal of improving the security of Internet protocols, we seek faster, semi-automatic methods to discover new vulnerabilities in protocols such as DNS, BGP, and others. To this end, we introduce the LLM-Assisted Protocol Attack Discovery LAPRAD methodology, enabling security researchers...

What Is a Platform for Continuous Exposure Assessment?

You can’t protect what you don’t know you have. In an environment of sprawling cloud instances, remote endpoints, and shadow IT, gaining a complete and accurate picture of your attack surface is a massive challenge. Periodic scans only provide a snapshot in time, missing assets that spin up and...

CVE-2025-41390

creationtimestamp| type| source ---|---|--- 2025-10-20 14:30:04+00:00| seen| https://infosec.place/objects/3ced0945-759a-4785-ae71-b8288fa9ac5a 2025-10-20 15:25:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3n4rwle2t2h 2025-10-20 15:33:19+00:00| seen|...

WordPress Attesa Extra plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Attesa Extra versions = 1.4.7...

WordPress Stockholm Core plugin <= 2.4.6 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Stockholm Core versions = 2.4.6...

WordPress RTMKit plugin <= 1.6.5 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by ? in WordPress Plugin RTMKit versions = 1.6.5...

CVE-2025-60279

A server-side request forgery SSRF vulnerability in Illia Cloud illia-Builder before v4.8.5 allows authenticated users to send arbitrary requests to internal services via the API. An attacker can leverage this to enumerate open ports based on response discrepancies and interact with internal...

CVE-2025-34255 D-Link Nuclias Connect <= v1.3.1.4 Forgot Password Account Enumeration

D-Link Nuclias Connect firmware versions = 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Forgot Password' endpoint returns distinct JSON responses depending on whether the supplied email address is associated with an existing account. Because the responses...

CVE-2025-34514

creationtimestamp| type| source ---|---|--- 2025-10-16 18:21:44+00:00| seen| Telegram/M0dxuX9bAH3VPoEEgSXM0pKSVpYcQkjYtWK1JDEit4904xI...

WordPress Salient theme < 17.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Salient versions 17.4.0...

WordPress Construction Light theme <= 1.6.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Denver Jackson in WordPress Theme Construction Light versions = 1.6.7...

CVE-2025-41443

Mattermost versions 10.5.x = 10.5.12, 10.11.x = 10.11.2 fail to properly validate guest user permissions when accessing channel information which allows guest users to discover active public channels and their metadata via the /api/v4/teams/teamid/channels/ids endpoint...