24964 matches found
CVE-2025-9977 Improper neutralization of input in Times Software E-PAYROLL
Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not sanitized properly, which allows an unauthenticated attacker to perform DoS attacks. SQL injection attacks might also be feasible, although so far creating a working exploit has been...
CVE-2025-55074
Mattermost server (versions 10.11.x <= 10.11.3 and 10.5.x
CVE-2025-55074 Channel member objects leak read status
Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects...
CVE-2025-55074 Channel member objects leak read status
Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects...
CVE-2025-12955
creationtimestamp| type| source ---|---|--- 2025-11-18 11:54:48+00:00| seen| https://gist.github.com/Darkcrai86/a6c0143e84b71561c1b8a309c6e352e1...
CVE-2025-41733
creationtimestamp| type| source ---|---|--- 2025-11-18 10:20:24+00:00| seen| https://infosec.exchange/users/certvde/statuses/115570194742635896 2025-11-18 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-05 2025-11-18 12:54:10+00:00| seen|...
CVE-2025-41735
creationtimestamp| type| source ---|---|--- 2025-11-18 10:20:24+00:00| seen| https://infosec.exchange/users/certvde/statuses/115570194742635896 2025-11-18 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-05 2025-11-18 12:44:10+00:00| seen|...
CVE-2025-41737
creationtimestamp| type| source ---|---|--- 2025-11-18 10:20:24+00:00| seen| https://infosec.exchange/users/certvde/statuses/115570194742635896 2025-11-18 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-05 2025-11-18 13:21:10+00:00| seen|...
CVE-2025-11868
creationtimestamp| type| source ---|---|--- 2025-11-18 09:29:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vghafhkf2b...
CVE-2025-12392
CVE-2025-12392 affects the WordPress plugin “Cryptocurrency Payment Gateway for WooCommerce.” The root cause is a missing capability check in the handle_optin_optout() function, allowing unauthenticated attackers to modify tracking opt-in/out settings in all versions up to 2.0.22. The practical i...
kernel: Linux kernel ALSA hda/ca0132 buffer overflow
This CVE has been marked as Rejected by the assigning CNA...
PT-2025-47333
Name of the Vulnerable Software and Affected Versions Times Software E-Payroll affected versions not specified Description The application does not properly sanitize data received in POST parameters during the login process, potentially allowing an unauthenticated attacker to perform...
Desktop Alert PingAlert Information Disclosure Vulnerability (CNVD-2025-29404)
Desktop Alert PingAlert is a network status monitoring tool developed by Desktop Alert, Inc. and is mainly used to monitor the status of network devices in real time and send alerts. An information disclosure vulnerability exists in Desktop Alert PingAlert, which stems from a policy incompatibili...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50184)
virtiopmem: Check device status before requesting flush. If a pmem device is in a bad status, the driver side could wait for host ack forever in virtiopmemflush, causing the system to hang. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46702)
thunderbolt: Mark XDomain as unplugged when router is removed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504670; scriptversion"1.3";...
WordPress Restrictions for BuddyPress plugin <= 1.5.2 - Missing Authorization to Unauthenticated Tracking Status Update vulnerability
Missing Authorization to Unauthenticated Tracking Status Update vulnerability discovered by Legion Hunter in WordPress Plugin Restrictions for BuddyPress versions = 1.5.2...
CVE-2025-13304
creationtimestamp| type| source ---|---|--- 2025-11-17 22:43:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115567455995465700 2025-11-18 01:55:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5un2whpkn2q...
GHSA-58M4-5WG3-5G5V
creationtimestamp| type| source ---|---|--- 2025-11-17 21:53:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115567255970666465...
GHSA-W7XJ-8FX7-WFCH
creationtimestamp| type| source ---|---|--- 2025-11-17 18:45:57+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115566520309269245 2026-07-09 03:00:06+00:00| seen| https://t.me/brutsecurity/2387 2026-07-10 00:00:13+00:00| seen| https://t.me/brutsecurity/2387 2026-07-11...