GHSA-CGRX-MC8F-2PRM

creationtimestamp| type| source ---|---|--- 2025-11-05 14:59:52+00:00| seen| https://mstdn.social/users/jschauma/statuses/115497683553103053 2025-11-06 20:51:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115504728778207295...

Open Source Social Network 安全漏洞

Open Source Social Network OSSN is a source social network engine from the Swiss OSSN team. A security vulnerability exists in Open Source Social Network OSSN version 8.6, which stems from an incorrect manipulation of the parameter timestamp in the file /action/rtcomments/status, which could lead...

EUVD-2025-37922

OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...

PT-2025-45100

Name of the Vulnerable Software and Affected Versions FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce versions up to and including 3.6.4.1 Description The software contains a flaw that allows unauthenticated attackers to extract sensitive data, including...

CVE-2025-63585

OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989775 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: Octeon: Add PCIe link status check The standard PCIe configuration read-write interface is...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989280 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix potential null dereference on pointer status There are calls to idxdcmdexec...

CVE-2025-63585

OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...

PT-2025-45163

Name of the Vulnerable Software and Affected Versions OSSN Open Source Social Network version 8.6 Description OSSN Open Source Social Network version 8.6 has a SQL Injection issue in the /action/rtcomments/status API endpoint through the timestamp parameter. Recommendations At the moment, there i...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990208)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990208 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: Octeon: Add PCIe link status check The standard PCIe configuration read-write interface is...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989220)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989220 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmtstatus' of size 6 could overflow, since index...

CVE-2025-63585

OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...

CVE-2025-63585

OSSN 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter. The vulnerability is a SQLi in the timestamp field that can lead to data disclosure/modification under certain DB permissions, with evidence of a time-based blind exploit demonstrated in public GitHu...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990115)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990115 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmtstatus' of size 6 could overflow, since index...

CVE-2025-59595

creationtimestamp| type| source ---|---|--- 2025-11-04 23:42:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115494076915539324 2025-11-04 23:58:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4tqhnrv6y2u 2025-11-05 00:01:54+00:00| seen|...

GHSA-6R98-6QCW-RXRW

creationtimestamp| type| source ---|---|--- 2025-11-04 23:39:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115494066188195772...

GHSA-2JR2-8WF5-V6PF

creationtimestamp| type| source ---|---|--- 2025-11-04 23:39:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115494066188195772...

GHSA-JHJX-X4CF-4VM8

creationtimestamp| type| source ---|---|--- 2025-11-04 21:45:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115493614774031888...

CVE-2025-63294

creationtimestamp| type| source ---|---|--- 2025-11-04 16:01:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115492263455116466 2025-11-04 17:42:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4t3h7h5ms2u 2025-11-04 19:06:09+00:00| seen|...

PT-2025-44941

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...