GHSA-5HHX-V7F6-X7GV

creationtimestamp| type| source ---|---|--- 2025-11-19 17:41:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115577592659326077...

CVE-2025-13400

creationtimestamp| type| source ---|---|--- 2025-11-19 17:21:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115577514792992435 2025-11-19 19:44:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5yzcakg7r2q...

CVE-2025-63878

creationtimestamp| type| source ---|---|--- 2025-11-19 17:11:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5yqqa4ap32x...

CVE-2025-9977

Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not sanitized properly, which allows an unauthenticated attacker to perform DoS attacks. SQL injection attacks might also be feasible, although so far creating a working exploit has been...

CVE-2025-63218

creationtimestamp| type| source ---|---|--- 2025-11-19 15:14:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115577012235338015...

CVE-2025-63217

creationtimestamp| type| source ---|---|--- 2025-11-18 22:07:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115572975136035514...

CVE-2025-63258

creationtimestamp| type| source ---|---|--- 2025-11-18 19:23:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115572331588232554...

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions via the Agents plugin process. An attacker can access information about when users have read channels by querying channel member objects. Remediation Upgrade...

CVE-2025-63604

creationtimestamp| type| source ---|---|--- 2025-11-18 17:39:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5wbtjysco2s...

CVE-2025-9977

Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not sanitized properly, which allows an unauthenticated attacker to perform DoS attacks. SQL injection attacks might also be feasible, although so far creating a working exploit has been...

CVE-2025-55074

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects...

CVE-2025-9977 Improper neutralization of input in Times Software E-PAYROLL

Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not sanitized properly, which allows an unauthenticated attacker to perform DoS attacks. SQL injection attacks might also be feasible, although so far creating a working exploit has been...

CVE-2025-9977

CVE-2025-9977 affects Times Software E-Payroll. The issue stems from improper sanitization of data in a POST parameter during login, which could let an unauthenticated attacker cause a DoS and may enable SQL injection; command injection attempts have also produced detailed error messages exposing...

EUVD-2025-198043

Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not sanitized properly, which allows an unauthenticated attacker to perform DoS attacks. SQL injection attacks might also be feasible, although so far creating a working exploit has been...

CVE-2025-9977 Improper neutralization of input in Times Software E-PAYROLL

Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not sanitized properly, which allows an unauthenticated attacker to perform DoS attacks. SQL injection attacks might also be feasible, although so far creating a working exploit has been...

CVE-2025-55074 Channel member objects leak read status

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects...

CVE-2025-55074

Mattermost server (versions 10.11.x <= 10.11.3 and 10.5.x

CVE-2025-55074 Channel member objects leak read status

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects...

CVE-2025-12955

creationtimestamp| type| source ---|---|--- 2025-11-18 11:54:48+00:00| seen| https://gist.github.com/Darkcrai86/a6c0143e84b71561c1b8a309c6e352e1...

CVE-2025-41733

creationtimestamp| type| source ---|---|--- 2025-11-18 10:20:24+00:00| seen| https://infosec.exchange/users/certvde/statuses/115570194742635896 2025-11-18 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-05 2025-11-18 12:54:10+00:00| seen|...