CLSA-2026-1775210556 ghostscript: Fix of 4 CVEs

CVE-2025-27830: fix potential buffer overflow with DollarBlend in font serialization - CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite devices - CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode conversion - CVE-2025-27836: fix potential print...

CVE-2026-20163

creationtimestamp| type| source ---|---|--- 2026-03-13 10:24:08+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/116221373950139353 2026-03-24 10:34:06+00:00| seen| https://bsky.app/profile/secqube.com/post/3mhsesgybsq2p 2026-03-25 07:00:14+00:00| seen|...

CVE-2025-60547

creationtimestamp| type| source ---|---|--- 2025-10-24 17:05:03+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115430228080166553...

CVE-2025-60561

creationtimestamp| type| source ---|---|--- 2025-10-24 17:05:03+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115430228079347579...

CVE-2025-60552

creationtimestamp| type| source ---|---|--- 2025-10-24 17:05:02+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115430228080123714...

CVE-2025-11957

creationtimestamp| type| source ---|---|--- 2025-10-22 18:11:42+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115419165525961928 2025-10-22 20:21:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3sobglst523...

CVE-2025-8051

creationtimestamp| type| source ---|---|--- 2025-10-20 20:38:54+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115408419667958692 2025-10-20 22:46:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nvgmtjsh2m...

GHSA-G9QW-G6RV-3889

creationtimestamp| type| source ---|---|--- 2025-10-20 20:38:54+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115408419667360961...

CVE-2025-62697

creationtimestamp| type| source ---|---|--- 2025-10-20 20:38:53+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115408419667030752 2025-10-20 22:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nt74uyw72o...

CVE-2025-8049

creationtimestamp| type| source ---|---|--- 2025-10-20 20:38:53+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115408419667508056 2025-10-20 22:50:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nvocph6y2i...

CVE-2019-17589

creationtimestamp| type| source ---|---|--- 2025-10-18 08:42:15+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115394277178940986...

CVE-2024-22722

creationtimestamp| type| source ---|---|--- 2025-09-06 00:15:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/50429 2025-09-06 03:00:05+00:00| published-proof-of-concept| Telegram/yHnfFcJmN27W7yNIp17KFc8vMEeaxm03MHjNIxWNerQLDCY 2025-11-17 22:41:52+00:00| seen|...

Important: ghostscript

Issue Overview: Fix confusion between bytes and shorts. Data is being copied from a string in multiple of shorts, rather than multiple of bytes, leading to both a read probably benign, given the memory manager and write buffer overflow. Info: https://bugs.ghostscript.com/showbug.cgi?id=708131...

Important: ghostscript

Issue Overview: PDF interpreter - Guard against unsigned int overflow. A large Type 4 function definition can overflow the uint counter, causing the allocated buffer to be smaller than required. Info: https://bugs.ghostscript.com/showbug.cgi?id=708253 Patch:...

WordPress plugin Ultimate YouTube Video & Shorts Player With Vimeo 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress Ultimate YouTube Video & Shorts Player With Vimeo plugin <= 3.3 - Missing Authorization to Authenticated (Subscriber+) Setting Exposure vulnerability

Missing Authorization to Authenticated Subscriber+ Setting Exposure vulnerability discovered by Mika in WordPress Plugin Ultimate YouTube Video & Shorts Player With Vimeo versions = 3.3...

WordPress plugin Ultimate YouTube Video & Shorts Player With Vimeo 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

YouTube makes sweeping changes to tackle spam on Shorts videos

YouTube is rolling out unclickable links. Video portals like YouTube have had to deal with spam comments and bogus links for many years. With new additions to a platform come new places for scammers to go about their business. YouTube is now cracking down on links posted to the comments section o...

Stolen TikTok Videos, Bent on Fraud, Invade YouTube Shorts

Scammers are taking full advantage of the launch of Google’s new TikTok competitor, YouTube Shorts, which has turned out to be an awesome tool for feeding billions of engaged viewers stolen content. That content is being used to run rackets like promoting adult dating websites, hustling diet pill...

511tactical.com XSS vulnerability

Vulnerable URL: http://www.511tactical.com/mens/mens-shorts.html Details: Description| Value ---|--- Patched:| Yes, at 29.10.2016 Latest check for patch:| 29.10.2016 07:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 26800 Google Pagerank| 5 VIP website...