25065 matches found
CVE-2025-11457
creationtimestamp| type| source ---|---|--- 2025-11-11 07:32:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/115529897855835530 2025-11-11 07:32:24+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m5dmn3isdz2p 2025-11-14 22:42:51+00:00| published-proof-of-concept|...
CVE-2025-12651
creationtimestamp| type| source ---|---|--- 2025-11-11 05:53:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5dh47d7ap2k...
CVE-2025-63712
creationtimestamp| type| source ---|---|--- 2025-11-10 15:52:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5by4cq3u62k...
CVE-2025-64684
creationtimestamp| type| source ---|---|--- 2025-11-10 15:49:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5bxxgd7bu2j 2025-11-10 15:57:51+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5byd46rqe62...
CVE-2025-63710
creationtimestamp| type| source ---|---|--- 2025-11-10 15:40:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5bxheuwf42b...
Fedora: Security Advisory (FEDORA-2025-2406078e57)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-12621
The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on the 'createrefund' function in all versions up to, and including, 1.0.42. This makes it possible for authenticated attackers, wit...
CVE-2025-12621
The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on the 'createrefund' function in all versions up to, and including, 1.0.42. This makes it possible for authenticated attackers, wit...
CVE-2025-12621 Flexible Refund and Return Order for WooCommerce <= 1.0.42 - Incorrect Authorization to Authenticated (Contributor+) Refund Status Update
The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on the 'createrefund' function in all versions up to, and including, 1.0.42. This makes it possible for authenticated attackers, wit...
CVE-2025-12621
Insight (CVE-2025-12621) The WordPress plugin “Flexible Refund and Return Order for WooCommerce” is vulnerable via an incorrect/misconfigured capability check in the create_refund function, allowing any authenticated user with Contributor level or higher to modify refund statuses (approve/deny) i...
CVE-2025-12621 Flexible Refund and Return Order for WooCommerce <= 1.0.42 - Incorrect Authorization to Authenticated (Contributor+) Refund Status Update
The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on the 'createrefund' function in all versions up to, and including, 1.0.42. This makes it possible for authenticated attackers, wit...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...
CVE-2025-64435
KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.7.0-beta.0, a logic flaw in the virt-controller allows an attacker to disrupt the control over a running VMI by creating a pod with the same labels as the legitimate virt-launcher pod associated with the VMI. This can...
GHSA-W832-GG5G-X44M
creationtimestamp| type| source ---|---|--- 2025-11-07 20:58:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115510417640999900 2025-11-10 09:28:07+00:00| seen| https://gist.github.com/Ochyro/47b7b222c6ca5445d317dbcf46c47d39...
GHSA-PQHF-P39G-3X64
creationtimestamp| type| source ---|---|--- 2025-11-07 20:31:33+00:00| seen| https://gist.github.com/EbonJaeger/f7d172d49605e41a6829980152c0f6d1...
