GHSA-2JR2-8WF5-V6PF

creationtimestamp| type| source ---|---|--- 2025-11-04 23:39:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115494066188195772...

GHSA-JHJX-X4CF-4VM8

creationtimestamp| type| source ---|---|--- 2025-11-04 21:45:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115493614774031888...

CVE-2025-12108

creationtimestamp| type| source ---|---|--- 2025-11-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-02 2025-11-04 22:06:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4tk7625we2a 2025-11-06 04:15:13+00:00| seen|...

EUVD-2025-37583

The DominoKit plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpajaxnoprivdominokitoptionadminaction AJAX endpoint in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to update plugin settings...

EUVD-2025-37589

The Top Bar Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12. This is due to missing or incorrect nonce validation on th tbnajaxadd function. This makes it possible for unauthenticated attackers to update the plugin's setting...

EUVD-2025-37657

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to access sensitive user data...

EUVD-2025-37682

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2. An app may be able to access sensitive user data...

EUVD-2025-37735

EUVD-2025-37735...

CVE-2025-8558

creationtimestamp| type| source ---|---|--- 2025-11-03 19:11:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115487348264070933 2025-11-03 20:06:34+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4qszd77tgt2 2025-11-03 21:40:13+00:00| seen|...

CVE-2025-12463

creationtimestamp| type| source ---|---|--- 2025-11-03 17:16:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115486896072186010 2025-11-03 18:17:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4qmxjoju72s 2025-11-03 20:05:48+00:00| seen|...

CVE-2025-63416

creationtimestamp| type| source ---|---|--- 2025-11-02 14:44:52+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115480637702330364 2026-09-01 20:00:17+00:00| seen| https://t.me/hackingAttack/173971 2026-09-02 01:00:33+00:00| seen| https://t.me/hackingAttack/173971 2026-09-03...

MINI-QJRF-MPC7-7WPF

Bulletin has no description...

CVE-2025-63458

creationtimestamp| type| source ---|---|--- 2025-10-31 20:42:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115470719686843436 2025-10-31 21:34:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4jgkh3jcw2j 2026-09-09 05:00:13+00:00| seen|...

CVE-2025-63469

creationtimestamp| type| source ---|---|--- 2025-10-31 15:59:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115469607506160568 2025-10-31 17:41:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4izjajjl62w...

Unbounded allocation when parsing GNU sparse map in archive/tar

...

CVE-2025-53880

creationtimestamp| type| source ---|---|--- 2025-10-30 12:29:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4fxo635ny2k 2025-10-30 13:55:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115463457550983176...

MAL-2025-49093 Malicious code in zustand.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ff018c7bc2d4532beeb07e3738b8dfa2ba8ff0ee82971a9ae6bdba09d4bed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How CISOs Should Plan Security Budgets for 2026

Build a defensible 2026 security budget with data, not guesswork. We share practical tips, ROI levers, and fresh insights from our survey of 300+ CISOs and security leaders...

GHSA-3M8R-W7XG-JQVW

creationtimestamp| type| source ---|---|--- 2025-10-28 22:36:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115454180633459870...

CVE-2025-34318

creationtimestamp| type| source ---|---|--- 2025-10-28 15:43:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115452557190111700 2025-10-28 17:44:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4bicjj7rd27...