27242 matches found
CVE-2025-55184
creationtimestamp| type| source ---|---|--- 2025-12-05 13:54:28+00:00| seen| https://vulnerability.circl.lu/bundle/6739b288-995a-4f1a-9f03-5d1ced3a8fbd 2025-12-11 20:51:04+00:00| seen| https://bsky.app/profile/react.dev/post/3m7qhaqdxuc2v 2025-12-11 20:51:04+00:00| seen|...
CVE-2025-10055
creationtimestamp| type| source ---|---|--- 2025-12-05 12:53:27+00:00| seen| https://gist.github.com/Darkcrai86/8b7d6f7f145721ec619c193e6a52f0b9...
CERTFR-2025-ALE-014
creationtimestamp| type| source ---|---|--- 2025-12-05 10:25:20+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115666473271240932...
CVE-2025-12355
The Payaza plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxnoprivupdateorderstatus' AJAX endpoint in all versions up to, and including, 0.3.8. This makes it possible for unauthenticated attackers to update order statuses...
CVE-2025-12355 Payaza <= 0.3.8 - Missing Authorization to Unauthenticated Order Status Update
The Payaza plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxnoprivupdateorderstatus' AJAX endpoint in all versions up to, and including, 0.3.8. This makes it possible for unauthenticated attackers to update order statuses...
CVE-2025-12355
CVE-2025-12355 refers to the Payaza WordPress plugin. The vulnerability is a missing capability check on the AJAX endpoint wp_ajax_nopriv_update_order_status, allowing unauthenticated attackers to modify order statuses. Affected versions are all up to and including 0.3.8. The public reports descr...
CVE-2025-66561
creationtimestamp| type| source ---|---|--- 2025-12-05 02:35:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m77h7ulugt2s...
WordPress plugin Payaza has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
ZSPACE Q2C command injection vulnerability
ZSPACE Q2C is a private cloud storage device from China's Extreme Space ZSPACE. A command injection vulnerability exists in ZSPACE Q2C NAS 1.1.0210050 and earlier versions, which stems from incorrect manipulation of the parameter safedir in the file /v2/file/safe/status, which could lead to a...
PT-2025-49317
Name of the Vulnerable Software and Affected Versions ZSPACE Q2C NAS versions through 1.1.0210050 Description A security flaw exists in ZSPACE Q2C NAS that allows for remote command injection. The issue is located within the zfilev2 api.SafeStatus function of the HTTP POST Request Handler...
CVE-2024-58277
creationtimestamp| type| source ---|---|--- 2025-12-04 23:18:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m774aibsn52s...
WordPress Payaza plugin <= 0.3.8 - Missing Authorization to Unauthenticated Order Status Update vulnerability
Missing Authorization to Unauthenticated Order Status Update vulnerability discovered by Legion Hunter in WordPress Plugin Payaza versions = 0.3.8...
CVE-2025-13937
creationtimestamp| type| source ---|---|--- 2025-12-04 22:08:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115663574444372667...
CVE-2025-1545
creationtimestamp| type| source ---|---|--- 2025-12-04 22:08:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115663574444372667...
CVE-2025-29269
creationtimestamp| type| source ---|---|--- 2025-12-04 21:46:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115663488815971553...
GHSA-9GQJ-5W7C-VX47
creationtimestamp| type| source ---|---|--- 2025-12-04 21:37:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115663455684770927...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: nri-postgresql, terraform-provider-random, splunk-otel-collector, gitness, kubecolor, nodetaint, metrics-agent, thanos-operator, opentelemetry-operator, newrelic-nri-statsd, harbor-registry, restic, kubeflow-katib, sealed-secrets, terraform-provider-azuread,...
CVE-2025-29846
A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages...
