27465 matches found
PT-2025-39994
Name of the Vulnerable Software and Affected Versions Rocket-Chip commit f517abbf41abb65cea37421d3559f9739efd00a9 2025-01-29 Description An issue exists in the Control and Status Register CSR logic that allows attackers to corrupt exception handling and privilege state transitions. This occurs du...
Advisory ROSA-SA-2025-3017
software: chromium-browser-stable 140.0.7339.185 WASP: ROSA-CHROME unaffected versions = chromium-browser-stable-140.0.7339.185-1 affected versions chromium-browser-stable-140.0.7339.185-1 CVE-ID: CVE-2025-10585 BDU-ID: 2025-11457 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the V8 component of...
PT-2025-39936
Name of the Vulnerable Software and Affected Versions The Big Post Shipping for WooCommerce plugin versions prior to 2.1.2 Description The software is susceptible to Stored Cross-Site Scripting through the 'wooboigpost shipping status' shortcode. Insufficient input sanitization and output escapin...
CVE-2025-11100
creationtimestamp| type| source ---|---|--- 2025-09-28 10:33:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzvcatlcku2j...
CVE-2025-11053
creationtimestamp| type| source ---|---|--- 2025-09-27 09:12:40+00:00| seen| https://gist.github.com/Darkcrai86/67f34cd4bed2ecf45973c60f3d48a611...
CVE-2025-10499
creationtimestamp| type| source ---|---|--- 2025-09-27 02:55:47+00:00| seen| Telegram/msu3r-G5L2x4JXO77BoxsvAc7kgkO4FGkhmoltclfQNKqc...
GHSA-Q6HV-WCJR-WP8H kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace
Impact Because UPDATE validation is not being applied, it is possible for an actor with access to an instance of the initializingworkspaces virtual workspace to run arbitrary patches on the status field of LogicalCluster objects while the workspace is initializing. This allows to add or remove an...
kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace
Impact Because UPDATE validation is not being applied, it is possible for an actor with access to an instance of the initializingworkspaces virtual workspace to run arbitrary patches on the status field of LogicalCluster objects while the workspace is initializing. This allows to add or remove an...
PT-2025-40915
Impact Because UPDATE validation is not being applied, it is possible for an actor with access to an instance of the initializingworkspaces virtual workspace to run arbitrary patches on the status field of LogicalCluster objects while the workspace is initializing. This allows to add or remove an...
GCVE-1-2025-0004
creationtimestamp| type| source ---|---|--- 2025-09-25 18:52:48+00:00| seen| https://social.circl.lu/users/cedric/statuses/115266444798808086 2025-09-25 20:05:27+00:00| patched| https://github.com/vulnerability-lookup/vulnerability-lookup/commit/afa12347f1461d9481eba75ac19897e80a9c7434...
GHSA-54J7-GRVR-9XWG
creationtimestamp| type| source ---|---|--- 2025-09-25 13:53:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115265269823527423...
CVE-2025-54726
creationtimestamp| type| source ---|---|--- 2025-09-25 13:36:06+00:00| seen| https://sploitus.com/exploit?id=E1BACD8B-71FE-5E28-AD25-444BE4EE0DC6&utmsource=rss&utmmedium=rss 2025-09-25 13:36:06+00:00| seen|...
CVE-2025-10880
creationtimestamp| type| source ---|---|--- 2025-09-25 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-268-01 2025-09-25 18:04:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115266254335547502...
CVE-2025-10879
creationtimestamp| type| source ---|---|--- 2025-09-25 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-268-01 2025-09-25 18:04:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115266254335547502...
Malware in giffgaff-status
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47556 Malicious code in giffgaff-status (npm)
The package giffgaff-status was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcde685cc836f4f80fa6ae182e03b2bd9bae41b818468a5bbde4e94cbd4443ff Any computer that has this package installed or running should be considered fully...
Malicious Package
Overview giffgaff-status is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in giffgaff-status (npm)
The package giffgaff-status was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcde685cc836f4f80fa6ae182e03b2bd9bae41b818468a5bbde4e94cbd4443ff Any computer that has this package installed or running should be considered fully...
September 25, 2025—KB5066198 (OS Build 19045.6396) Preview
September 25, 2025—KB5066198 OS Build 19045.6396 Preview Applies To Windows 10 Home and Pro, version 22H2 Windows 10 Enterprise Multi-Session, version 22H2 Windows 10 Enterprise and Education, version 22H2 Windows 10 IoT Enterprise, version 22H2 Windows Secure Boot certificate expiration Importan...
Linux Distros Unpatched Vulnerability : CVE-2025-39876
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: fec: Fix possible NPD in fecenetphyresetafterclkenable The function ofphyfinddevice may return NULL, so we need to take care before dereferencing phydev...