PT-2025-44941

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

WordPress plugin Crypto Payment Gateway with Payeer for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

CVE-2025-8558

creationtimestamp| type| source ---|---|--- 2025-11-03 19:11:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115487348264070933 2025-11-03 20:06:34+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4qszd77tgt2 2025-11-03 21:40:13+00:00| seen|...

CVE-2011-10040

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...

CVE-2025-63459

creationtimestamp| type| source ---|---|--- 2025-10-31 17:33:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115469977943384458 2025-10-31 21:38:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4jgrfisma2s...

CVE-2025-63465

creationtimestamp| type| source ---|---|--- 2025-10-31 17:27:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115469952531670089 2025-10-31 21:42:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4jgzesvrs2a...

CVE-2025-63460

creationtimestamp| type| source ---|---|--- 2025-10-31 17:27:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115469952531670089...

CVE-2025-63461

creationtimestamp| type| source ---|---|--- 2025-10-31 17:27:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115469952531670089 2025-10-31 21:45:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4jh5u7eqr2k...

CVE-2025-63462

creationtimestamp| type| source ---|---|--- 2025-10-31 17:27:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115469952531670089 2025-10-31 21:50:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4jhi4ki5u2s...

CVE-2025-63467

creationtimestamp| type| source ---|---|--- 2025-10-31 15:37:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115469519489942354 2025-10-31 18:07:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4j2xxqowu2n...

CVE-2025-48980

creationtimestamp| type| source ---|---|--- 2025-10-31 14:03:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115469151865121913...

CVE-2025-64360

creationtimestamp| type| source ---|---|--- 2025-10-31 13:03:51+00:00| seen| https://gist.github.com/Darkcrai86/d0630fc7ee4a1df40e62c37b1234d51a 2025-10-31 13:52:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4imqcm4272j...

CVE-2025-64365

creationtimestamp| type| source ---|---|--- 2025-10-31 13:01:56+00:00| seen| https://gist.github.com/Darkcrai86/9398f32b3c955ee2e111820f9733b4f9 2025-10-31 14:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ink22czs2s...

EUVD-2011-5265

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...

CVE-2025-34273

creationtimestamp| type| source ---|---|--- 2025-10-30 23:41:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4h56w6txl2b...

CVE-2024-14002

creationtimestamp| type| source ---|---|--- 2025-10-30 22:54:12+00:00| seen| Telegram/x772QyFUAUXwJwZgDZiQcLlOfeu8IBItbSsS8vAQSe8DHA...

CVE-2011-10040

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...

CVE-2011-10040 Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...

CVE-2011-10040 Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...

CVE-2011-10040

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the link-handling functions used by status and report pages. The issue stems from insufficient validation or escaping of user-supplied input, which may allow an attacker to inject and execute arbitrary script in...