GHSA-632C-49P9-X7CW

creationtimestamp| type| source ---|---|--- 2025-12-16 13:40:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115729526690460012...

CVE-2025-66122

creationtimestamp| type| source ---|---|--- 2025-12-16 09:43:33+00:00| seen| https://gist.github.com/Darkcrai86/c86dd0d97bb504e80283efb642f99ab1...

CVE-2025-68062

creationtimestamp| type| source ---|---|--- 2025-12-16 09:27:19+00:00| seen| https://gist.github.com/Darkcrai86/00bd8b23fbaab2e8e29e236ca1290aba...

CVE-2025-68087

creationtimestamp| type| source ---|---|--- 2025-12-16 09:20:52+00:00| seen| https://gist.github.com/Darkcrai86/06cf4bbb76dc5c96e9bed08eef4d346e...

CVE-2025-68115

creationtimestamp| type| source ---|---|--- 2025-12-16 08:01:17+00:00| seen| https://gist.github.com/Darkcrai86/2f303495df24fe4ab5db4a71affa3535 2026-01-02 18:47:00+00:00| published-proof-of-concept| Telegram/909Vqfy1t-GN-jmnJRhonTHruzsnwKWBWvcbC9dRm7P3pmc...

CVE-2025-43511

creationtimestamp| type| source ---|---|--- 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83...

CVE-2025-13956

The connected Wordfence vulnerability entry confirms CVE-2025-13956 for LearnPress – WordPress LMS Plugin, affecting all versions up to 4.3.1. It permits unauthenticated actors to view orders statistics (e.g., total revenue summaries and order status counts) due to a missing capability check in t...

CVE-2025-13956 LearnPress – WordPress LMS Plugin <= 4.3.1 - Missing Authorization to Unauthenticated Orders Statistics Exposure

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the statistic function in all versions up to, and including, 4.3.1. This makes it possible for unauthenticated attackers to view the plugin's orders...

EUVD-2025-203497

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the statistic function in all versions up to, and including, 4.3.1. This makes it possible for unauthenticated attackers to view the plugin's orders...

Linux Distros Unpatched Vulnerability : CVE-2025-40355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sysfs: check visibility before changing group attribute ownership Since commit 0c17270f9b92 net: sysfs: Implement isvisible for physportid, portname, switchid,...

Linux Distros Unpatched Vulnerability : CVE-2025-68296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm, fbcon, vgaswitcheroo: Avoid race condition in fbcon setup Protect vgaswitcherooclientfbset with console lock. Avoids OOB access in fbconremapall. Without...

CVE-2025-55895

creationtimestamp| type| source ---|---|--- 2025-12-15 20:59:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115725592045370637...

GHSA-84H7-RJJ3-6JX4

creationtimestamp| type| source ---|---|--- 2025-12-15 17:55:01+00:00| seen| https://mastodon.social/users/chrisvest/statuses/115724864576648010...

CVE-2025-13367

creationtimestamp| type| source ---|---|--- 2025-12-15 15:19:13+00:00| seen| https://gist.github.com/Darkcrai86/cee329c90ce8e122b7f3b09f38deb608...

CVE-2025-11670

creationtimestamp| type| source ---|---|--- 2025-12-15 14:00:11+00:00| seen| https://gist.github.com/Darkcrai86/8df82f32378c4f7670f27af8baeca791...

CERTFR-2025-ACT-055

creationtimestamp| type| source ---|---|--- 2025-12-15 13:42:31+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115723871774526633...

CVE-2025-14706

creationtimestamp| type| source ---|---|--- 2025-12-15 06:05:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/115722074946292946 2025-12-15 21:00:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115725592372684879...

CVE-2025-14693

creationtimestamp| type| source ---|---|--- 2025-12-15 01:34:10+00:00| seen| https://infosec.exchange/users/offseq/statuses/115721007851391761...

CVE-2025-65176

An issue was discovered in Dynatrace OneAgent before 1.325.47. When attempting to access a remote network share from a machine where OneAgent is installed and receiving a "STATUSLOGONFAILURE" error, the agent will retrieve every user token on the machine and repeatedly attempt to access the netwo...

PT-2025-51276

Name of the Vulnerable Software and Affected Versions Dynatrace OneAgent versions prior to 1.325.47 Description An issue exists in Dynatrace OneAgent where, when attempting to access a remote network share and receiving a "STATUS LOGON FAILURE" error, the agent retrieves all user tokens from the...