CVE-2025-63585: Improper Neutralization of Special Elements used in an SQL Command

OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...

CVE-2025-63585

OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...

CVE-2025-63585

OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...

Open Source Social Network security vulnerabilities

Open Source Social Network OSSN is a source social network engine from the Swiss OSSN team. A security vulnerability exists in Open Source Social Network OSSN version 8.6, which stems from an incorrect manipulation of the parameter timestamp in the file /action/rtcomments/status, which could lead...

CVE-2025-63585

OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...

CVE-2025-63585

The OSSN (Open Source Social Network) software version 8.6 is vulnerable to a blind time-based SQL injection in the /action/rtcomments/status endpoint via the timestamp parameter. An authenticated attacker capable of supplying this parameter can execute arbitrary SQL queries, potentially leading ...

EUVD-2025-37922

OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...

CVE-2025-63585

OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...

PT-2025-45163

Name of the Vulnerable Software and Affected Versions OSSN Open Source Social Network version 8.6 Description OSSN Open Source Social Network version 8.6 has a SQL Injection issue in the /action/rtcomments/status API endpoint through the timestamp parameter. Recommendations At the moment, there i...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989280 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix potential null dereference on pointer status There are calls to idxdcmdexec...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989775 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: Octeon: Add PCIe link status check The standard PCIe configuration read-write interface is...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990115)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990115 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmtstatus' of size 6 could overflow, since index...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989220)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989220 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmtstatus' of size 6 could overflow, since index...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990208)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990208 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: Octeon: Add PCIe link status check The standard PCIe configuration read-write interface is...

CVE-2025-59595

creationtimestamp| type| source ---|---|--- 2025-11-04 23:42:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115494076915539324 2025-11-04 23:58:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4tqhnrv6y2u 2025-11-05 00:01:54+00:00| seen|...

GHSA-2JR2-8WF5-V6PF

creationtimestamp| type| source ---|---|--- 2025-11-04 23:39:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115494066188195772...

GHSA-6R98-6QCW-RXRW

creationtimestamp| type| source ---|---|--- 2025-11-04 23:39:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115494066188195772...

GHSA-JHJX-X4CF-4VM8

creationtimestamp| type| source ---|---|--- 2025-11-04 21:45:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115493614774031888...

CVE-2025-63294

creationtimestamp| type| source ---|---|--- 2025-11-04 16:01:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115492263455116466 2025-11-04 17:42:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4t3h7h5ms2u 2025-11-04 19:06:09+00:00| seen|...

WordPress plugin Crypto Payment Gateway with Payeer for WooCommerce has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...