CVE-2025-63604

creationtimestamp| type| source ---|---|--- 2025-11-18 17:39:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5wbtjysco2s...

CVE-2025-9977

Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not sanitized properly, which allows an unauthenticated attacker to perform DoS attacks. SQL injection attacks might also be feasible, although so far creating a working exploit has been...

CVE-2025-55074

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects...

CVE-2025-9977

CVE-2025-9977 affects Times Software E-Payroll. The issue stems from improper sanitization of data in a POST parameter during login, which could let an unauthenticated attacker cause a DoS and may enable SQL injection; command injection attempts have also produced detailed error messages exposing...

CVE-2025-9977 Improper neutralization of input in Times Software E-PAYROLL

Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not sanitized properly, which allows an unauthenticated attacker to perform DoS attacks. SQL injection attacks might also be feasible, although so far creating a working exploit has been...

CVE-2025-9977 Improper neutralization of input in Times Software E-PAYROLL

Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not sanitized properly, which allows an unauthenticated attacker to perform DoS attacks. SQL injection attacks might also be feasible, although so far creating a working exploit has been...

EUVD-2025-198043

Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not sanitized properly, which allows an unauthenticated attacker to perform DoS attacks. SQL injection attacks might also be feasible, although so far creating a working exploit has been...

CVE-2025-55074 Channel member objects leak read status

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects...

CVE-2025-55074

Mattermost server (versions 10.11.x <= 10.11.3 and 10.5.x

CVE-2025-55074 Channel member objects leak read status

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects...

CVE-2025-12955

creationtimestamp| type| source ---|---|--- 2025-11-18 11:54:48+00:00| seen| https://gist.github.com/Darkcrai86/a6c0143e84b71561c1b8a309c6e352e1...

CVE-2025-41733

creationtimestamp| type| source ---|---|--- 2025-11-18 10:20:24+00:00| seen| https://infosec.exchange/users/certvde/statuses/115570194742635896 2025-11-18 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-05 2025-11-18 12:54:10+00:00| seen|...

CVE-2025-41737

creationtimestamp| type| source ---|---|--- 2025-11-18 10:20:24+00:00| seen| https://infosec.exchange/users/certvde/statuses/115570194742635896 2025-11-18 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-05 2025-11-18 13:21:10+00:00| seen|...

CVE-2025-41735

creationtimestamp| type| source ---|---|--- 2025-11-18 10:20:24+00:00| seen| https://infosec.exchange/users/certvde/statuses/115570194742635896 2025-11-18 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-05 2025-11-18 12:44:10+00:00| seen|...

CVE-2025-11868

creationtimestamp| type| source ---|---|--- 2025-11-18 09:29:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vghafhkf2b...

CVE-2025-12392

CVE-2025-12392 affects the WordPress plugin “Cryptocurrency Payment Gateway for WooCommerce.” The root cause is a missing capability check in the handle_optin_optout() function, allowing unauthenticated attackers to modify tracking opt-in/out settings in all versions up to 2.0.22. The practical i...

kernel: Linux kernel ALSA hda/ca0132 buffer overflow

This CVE has been marked as Rejected by the assigning CNA...

Desktop Alert PingAlert Information Disclosure Vulnerability (CNVD-2025-29404)

Desktop Alert PingAlert is a network status monitoring tool developed by Desktop Alert, Inc. and is mainly used to monitor the status of network devices in real time and send alerts. An information disclosure vulnerability exists in Desktop Alert PingAlert, which stems from a policy incompatibili...

PT-2025-47333

Name of the Vulnerable Software and Affected Versions Times Software E-Payroll affected versions not specified Description The application does not properly sanitize data received in POST parameters during the login process, potentially allowing an unauthenticated attacker to perform...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50184)

virtiopmem: Check device status before requesting flush. If a pmem device is in a bad status, the driver side could wait for host ack forever in virtiopmemflush, causing the system to hang. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...