17271 matches found
EUVD-2025-37806
Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...
GHSA-2JR2-8WF5-V6PF
creationtimestamp| type| source ---|---|--- 2025-11-04 23:39:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115494066188195772...
GHSA-JHJX-X4CF-4VM8
creationtimestamp| type| source ---|---|--- 2025-11-04 21:45:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115493614774031888...
CVE-2025-12108
creationtimestamp| type| source ---|---|--- 2025-11-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-02 2025-11-04 22:06:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4tk7625we2a 2025-11-06 04:15:13+00:00| seen|...
EUVD-2025-37583
The DominoKit plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpajaxnoprivdominokitoptionadminaction AJAX endpoint in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to update plugin settings...
EUVD-2025-37589
The Top Bar Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12. This is due to missing or incorrect nonce validation on th tbnajaxadd function. This makes it possible for unauthenticated attackers to update the plugin's setting...
EUVD-2025-37657
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to access sensitive user data...
EUVD-2025-37682
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2. An app may be able to access sensitive user data...
EUVD-2025-37735
EUVD-2025-37735...
CVE-2025-8558
creationtimestamp| type| source ---|---|--- 2025-11-03 19:11:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115487348264070933 2025-11-03 20:06:34+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4qszd77tgt2 2025-11-03 21:40:13+00:00| seen|...
CVE-2025-12463
creationtimestamp| type| source ---|---|--- 2025-11-03 17:16:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115486896072186010 2025-11-03 18:17:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4qmxjoju72s 2025-11-03 20:05:48+00:00| seen|...
CVE-2025-63416
creationtimestamp| type| source ---|---|--- 2025-11-02 14:44:52+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115480637702330364...
MINI-QJRF-MPC7-7WPF
Bulletin has no description...
CVE-2025-63458
creationtimestamp| type| source ---|---|--- 2025-10-31 20:42:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115470719686843436 2025-10-31 21:34:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4jgkh3jcw2j...
CVE-2025-63469
creationtimestamp| type| source ---|---|--- 2025-10-31 15:59:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115469607506160568 2025-10-31 17:41:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4izjajjl62w...
Unbounded allocation when parsing GNU sparse map in archive/tar
...
CVE-2025-53880
creationtimestamp| type| source ---|---|--- 2025-10-30 12:29:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4fxo635ny2k 2025-10-30 13:55:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115463457550983176...
MAL-2025-49093 Malicious code in zustand.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ff018c7bc2d4532beeb07e3738b8dfa2ba8ff0ee82971a9ae6bdba09d4bed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
