CVE-2025-6187 bSecure 1.3.7 - 1.7.9 - Missing Authorization to Unauthenticated Privilege Escalation via order_info REST Endpoint

The bSecure plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within its orderinfo REST endpoint in versions 1.3.7 through 1.7.9. The plugin registers the /webhook/v2/orderinfo/ route with a permissioncallback that always returns true, effectively bypassing a...

CVE-2025-46122

creationtimestamp| type| source ---|---|--- 2025-07-22 07:21:42+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222...

CVE-2025-46118

creationtimestamp| type| source ---|---|--- 2025-07-22 07:21:41+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222...

CVE-2025-5681

creationtimestamp| type| source ---|---|--- 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:39+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-7893

creationtimestamp| type| source ---|---|--- 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:41+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-7947

creationtimestamp| type| source ---|---|--- 2025-07-22 03:54:23+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:38+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-7992

creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-642/...

CVE-2025-7984

creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-636/...

CVE-2025-7989

creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-640/...

CVE-2025-7987

creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-641/...

From Text to Actionable Intelligence: Automating STIX Entity and Relationship Extraction

Sharing methods of attack and their effectiveness is a cornerstone of building robust defensive systems. Threat analysis reports, produced by various individuals and organizations, play a critical role in supporting security operations and combating emerging threats. To enhance the timeliness and...

CVE-2025-31511

CVE-2025-31511 affects AlertEnterprise Guardian 4.1.14.2.2.1, where an attacker can bypass manager approval by altering the user ID in the Request Building Access requestSubmit API call. The vulnerability is mitigated by upgrading to one of the vendor-recommended builds: 4.1.12.2.1.19, 4.1.12.5.2...

PT-2025-30410 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The provided descriptions indicate a rejected reason associated with a specific identifier. No further details about the issue are available. Recommendations:...

CVE-2025-7289

IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-54121

creationtimestamp| type| source ---|---|--- 2025-07-21 19:34:23+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2c2j-9gv5-cj73 2025-07-30 10:09:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lv6ewswjsk2w 2025-07-30 10:22:30+00:00| seen|...

CVE-2025-21772

creationtimestamp| type| source ---|---|--- 2025-07-21 17:41:06+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luijxfivcs2y...

CVE-2025-6069

creationtimestamp| type| source ---|---|--- 2025-07-21 16:20:56+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luifi24uns2y 2025-07-24 12:01:40+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lupif56a3e22 2025-08-03 16:58:47+00:00| seen|...

CVE-2025-7918

creationtimestamp| type| source ---|---|--- 2025-07-21 09:05:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luhn5ddon32v...

CVE-2024-6107

CVE-2024-6107 affects Canonical MAAS (and related snaps). The root cause is insufficient verification, enabling a malicious client to bypass authentication and execute RPC commands in a region. Documents indicate this can lead to high-impact outcomes (confidentiality, integrity, and availability)...

CVE-2025-38351

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush In KVM guests with Hyper-V hypercalls enabled, the hypercalls HVCALLFLUSHVIRTUALADDRESSLIST and HVCALLFLUSHVIRTUALADDRESSLISTEX allow a guest to request...