CVE-2025-34253

creationtimestamp| type| source ---|---|--- 2025-10-16 19:49:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115385574767776605...

CVE-2025-62496

creationtimestamp| type| source ---|---|--- 2025-10-16 16:21:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115384757765575874...

CVE-2025-62490

creationtimestamp| type| source ---|---|--- 2025-10-16 16:21:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115384757765575874...

CVE-2025-62394

Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information...

CVE-2025-58075

creationtimestamp| type| source ---|---|--- 2025-10-16 14:26:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115384306610090625...

CVE-2025-39980

In the Linux kernel, the following vulnerability has been resolved: nexthop: Forbid FDB status change while nexthop is in a group The kernel forbids the creation of non-FDB nexthop groups with FDB nexthops: ip nexthop add id 1 via 192.0.2.1 fdb ip nexthop add id 2 group 1 Error: Non FDB nexthop...

CVE-2025-0277

creationtimestamp| type| source ---|---|--- 2025-10-16 09:17:15+00:00| seen| Telegram/Dc1-osUWVRQ1NvMOmW8nDmHJ51RwHsTxNYNBrarLXh6Vk0...

CVE-2025-11701

The Zip Attachments plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check as well as missing post status validation in the zacreatezipcallback function in all versions up to, and including, 1.6. This makes it possible for unauthenticated attackers to...

CVE-2025-11728

The Oceanpayment CreditCard Gateway plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checks on the 'returnpayment' and 'noticepayment' functions in all versions up to, and including, 6.0. This makes it possibl...

nexthop: Forbid FDB status change while nexthop is in a group

...

CVE-2025-55084

creationtimestamp| type| source ---|---|--- 2025-10-16 07:16:38+00:00| seen| Telegram/eS19IaJhYY4TZUQTxyMKY9eS1miU7Z6Xfr4A93dxfMlwows...

GHSA-M474-39RW-V8GM

creationtimestamp| type| source ---|---|--- 2025-10-16 07:16:38+00:00| seen| Telegram/eS19IaJhYY4TZUQTxyMKY9eS1miU7Z6Xfr4A93dxfMlwows...

CVE-2025-59429

FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...

CVE-2025-59201

Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...

GHSA-JQ43-27X9-3V86

creationtimestamp| type| source ---|---|--- 2025-10-15 16:53:27+00:00| seen| https://mastodon.social/users/chrisvest/statuses/115379221747646716...

EUVD-2025-34592

In the Linux kernel, the following vulnerability has been resolved: nexthop: Forbid FDB status change while nexthop is in a group The kernel forbids the creation of non-FDB nexthop groups with FDB nexthops: ip nexthop add id 1 via 192.0.2.1 fdb ip nexthop add id 2 group 1 Error: Non FDB nexthop...

CVE-2025-11701

The Zip Attachments plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check as well as missing post status validation in the zacreatezipcallback function in all versions up to, and including, 1.6. This makes it possible for unauthenticated attackers to...

EUVD-2025-34537

The Zip Attachments plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check as well as missing post status validation in the zacreatezipcallback function in all versions up to, and including, 1.6. This makes it possible for unauthenticated attackers to...

CVE-2025-11728 Oceanpayment CreditCard Gateway <= 6.0 - Missing Authentication to Unauthenticated Order Status Update

The Oceanpayment CreditCard Gateway plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checks on the 'returnpayment' and 'noticepayment' functions in all versions up to, and including, 6.0. This makes it possibl...

CVE-2025-11728 Oceanpayment CreditCard Gateway <= 6.0 - Missing Authentication to Unauthenticated Order Status Update

The Oceanpayment CreditCard Gateway plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checks on the 'returnpayment' and 'noticepayment' functions in all versions up to, and including, 6.0. This makes it possibl...