24986 matches found
CVE-2025-10191 Big Post Shipping for WooCommerce <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Big Post Shipping for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wooboigpostshippingstatus' shortcode in all versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This...
CVE-2025-56301
An issue was discovered in Chipsalliance Rocket-Chip commit f517abbf41abb65cea37421d3559f9739efd00a9 2025-01-29 allowing attackers to corrupt exception handling and privilege state transitions via a flawed interaction between exception handling and MRET return mechanisms in the CSR logic when an...
CVE-2025-56301
An issue was discovered in Chipsalliance Rocket-Chip commit f517abbf41abb65cea37421d3559f9739efd00a9 2025-01-29 allowing attackers to corrupt exception handling and privilege state transitions via a flawed interaction between exception handling and MRET return mechanisms in the CSR logic when an...
PT-2025-39936
Name of the Vulnerable Software and Affected Versions The Big Post Shipping for WooCommerce plugin versions prior to 2.1.2 Description The software is susceptible to Stored Cross-Site Scripting through the 'wooboigpost shipping status' shortcode. Insufficient input sanitization and output escapin...
PT-2025-39994
Name of the Vulnerable Software and Affected Versions Rocket-Chip commit f517abbf41abb65cea37421d3559f9739efd00a9 2025-01-29 Description An issue exists in the Control and Status Register CSR logic that allows attackers to corrupt exception handling and privilege state transitions. This occurs du...
Advisory ROSA-SA-2025-3017
software: chromium-browser-stable 140.0.7339.185 WASP: ROSA-CHROME unaffected versions = chromium-browser-stable-140.0.7339.185-1 affected versions chromium-browser-stable-140.0.7339.185-1 CVE-ID: CVE-2025-10585 BDU-ID: 2025-11457 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the V8 component of...
CVE-2025-11100
creationtimestamp| type| source ---|---|--- 2025-09-28 10:33:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzvcatlcku2j...
CVE-2025-11053
creationtimestamp| type| source ---|---|--- 2025-09-27 09:12:40+00:00| seen| https://gist.github.com/Darkcrai86/67f34cd4bed2ecf45973c60f3d48a611...
CVE-2025-10499
creationtimestamp| type| source ---|---|--- 2025-09-27 02:55:47+00:00| seen| Telegram/msu3r-G5L2x4JXO77BoxsvAc7kgkO4FGkhmoltclfQNKqc...
kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace
Impact Because UPDATE validation is not being applied, it is possible for an actor with access to an instance of the initializingworkspaces virtual workspace to run arbitrary patches on the status field of LogicalCluster objects while the workspace is initializing. This allows to add or remove an...
GHSA-Q6HV-WCJR-WP8H kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace
Impact Because UPDATE validation is not being applied, it is possible for an actor with access to an instance of the initializingworkspaces virtual workspace to run arbitrary patches on the status field of LogicalCluster objects while the workspace is initializing. This allows to add or remove an...
GCVE-1-2025-0004
creationtimestamp| type| source ---|---|--- 2025-09-25 18:52:48+00:00| seen| https://social.circl.lu/users/cedric/statuses/115266444798808086 2025-09-25 20:05:27+00:00| patched| https://github.com/vulnerability-lookup/vulnerability-lookup/commit/afa12347f1461d9481eba75ac19897e80a9c7434...
GHSA-54J7-GRVR-9XWG
creationtimestamp| type| source ---|---|--- 2025-09-25 13:53:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115265269823527423...
CVE-2025-54726
creationtimestamp| type| source ---|---|--- 2025-09-25 13:36:06+00:00| seen| https://sploitus.com/exploit?id=E1BACD8B-71FE-5E28-AD25-444BE4EE0DC6&utmsource=rss&utmmedium=rss 2025-09-25 13:36:06+00:00| seen|...
CVE-2025-10879
creationtimestamp| type| source ---|---|--- 2025-09-25 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-268-01 2025-09-25 18:04:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115266254335547502...
CVE-2025-10880
creationtimestamp| type| source ---|---|--- 2025-09-25 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-268-01 2025-09-25 18:04:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115266254335547502...
Malicious Package
Overview giffgaff-status is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-47556 Malicious code in giffgaff-status (npm)
The package giffgaff-status was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcde685cc836f4f80fa6ae182e03b2bd9bae41b818468a5bbde4e94cbd4443ff Any computer that has this package installed or running should be considered fully...
Malicious code in giffgaff-status (npm)
The package giffgaff-status was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcde685cc836f4f80fa6ae182e03b2bd9bae41b818468a5bbde4e94cbd4443ff Any computer that has this package installed or running should be considered fully...
