WordPress Beaver Builder – WordPress Page Builder plugin <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Builder Status Tampering vulnerability

Missing Authorization to Authenticated Contributor+ Builder Status Tampering vulnerability discovered by WordFence in WordPress Plugin Beaver Builder versions = 2.9.4...

CVE-2025-29846: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages...

Synology Router Manager path traversal vulnerability

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A path traversal vulnerability exists in Synology Router Manager SRM, which originates from a remote authenticated user being able to obtain the status of an installed package...

Linux Distros Unpatched Vulnerability : CVE-2025-40246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix out of bounds memory read error in symlink repair xfs/286 produced this report on my test fleet:...

CVE-2025-20387

creationtimestamp| type| source ---|---|--- 2025-12-03 21:56:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m74h5ytt6h2q 2025-12-04 09:10:07+00:00| seen| https://bsky.app/profile/blackwiremedia.bsky.social/post/3m75msyn25622 2025-12-04 14:50:12+00:00| seen|...

GHSA-WVXP-JP4W-W8WG

creationtimestamp| type| source ---|---|--- 2025-12-03 20:47:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115657594616316301...

GHSA-9MPM-9PXH-MG4F

creationtimestamp| type| source ---|---|--- 2025-12-03 20:46:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115657592254208627...

GHSA-9R3W-4J8Q-PW98

creationtimestamp| type| source ---|---|--- 2025-12-03 20:39:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115657563853838944 2025-12-08 18:48:31+00:00| published-proof-of-concept| Telegram/KhP08QO7METb6I7HjASrP1eXHc6jEsXOl-UrWhwWcwwg 2025-12-08 18:48:33+00:00|...

GHSA-J3Q6-Q5PC-V5WF

creationtimestamp| type| source ---|---|--- 2025-12-03 18:32:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115657066080526795...

CVE-2025-64763 Envoy forwards early CONNECT data in TCP proxy mode

Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, when Envoy is configured in TCP proxy mode to handle CONNECT requests, it accepts client data before issuing a 2xx response and forwards that data to the upstream TCP connection. If a forwardi...

GHSA-46GC-MWH4-CC5R

creationtimestamp| type| source ---|---|--- 2025-12-03 18:06:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115656962660505423...

GHSA-PRHC-CHFW-32JG

creationtimestamp| type| source ---|---|--- 2025-12-03 17:13:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115656755616258132...

GHSA-CJ9G-V5MQ-QRJM

creationtimestamp| type| source ---|---|--- 2025-12-03 17:05:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115656722756256466...

CVE-2022-49121

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2025-37911

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2024-35871

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2023-53403

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2024-26756

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-06-29 16:19:38+00:00| seen|...

CVE-2022-49650

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2025-40158

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...