CVE-2025-20718

creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...

CVE-2025-20715

creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...

CVE-2025-20710

creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...

CVE-2025-20709

creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...

CVE-2025-41704

creationtimestamp| type| source ---|---|--- 2025-10-14 13:40:15+00:00| seen| https://infosec.exchange/users/certvde/statuses/115372799750920973 2025-10-17 08:37:13+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3m3eulxahcx2d 2025-10-18 07:11:13+00:00| seen|...

CVE-2025-41707

creationtimestamp| type| source ---|---|--- 2025-10-14 13:40:15+00:00| seen| https://infosec.exchange/users/certvde/statuses/115372799750920973 2025-10-18 07:11:13+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m3haazui6k2l...

GHSA-66RW-Q8W5-C2HG

creationtimestamp| type| source ---|---|--- 2025-10-14 13:26:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372746126553647...

CVE-2025-39664

creationtimestamp| type| source ---|---|--- 2025-10-14 03:33:07+00:00| seen| https://schleuss.online/users/vulnbot/statuses/115370412344212580 2025-10-14 06:31:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m35467igch2k 2025-10-14 23:21:22+00:00| seen|...

Microsoft Network Connection Status Indicator 访问控制错误漏洞

Microsoft Network Connection Status Indicator is a built-in network connection status component of a Windows operating system from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Network Connection Status Indicator, which can be exploited by an attacker to...

FreePBX 跨站脚本漏洞

FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX project for configuring Asterisk IP telephony system through a GUI web-based graphical interface. A cross-site scripting vulnerability exists in FreePBX 16 versions prior to 16.0.68.39 and FreePBX 17 versions...

PT-2025-42093

Name of the Vulnerable Software and Affected Versions Network Connection Status Indicator NCSI affected versions not specified Description An issue with access control in Network Connection Status Indicator NCSI could allow a local attacker to gain elevated privileges. Recommendations At the...

Fortinet FortiAnalyzer 授权问题漏洞

FortiAnalyzer is Fortinet's centralized security analysis and reporting platform. A security vulnerability exists in FortiAnalyzer that stems from a flaw in the authentication mechanism for OFTP requests. An attacker can exploit this vulnerability to obtain device operational status information o...

ROS-20251014-02

A vulnerability in the pamsmauthenticate function of the Yubico pam-u2f PAM module is related to the return of an invalid status code state. Exploitation of the vulnerability could allow an attacker to escalate privileges...

PT-2025-42182

Name of the Vulnerable Software and Affected Versions FreePBX versions prior to 16.0.68.39 FreePBX versions prior to 17.0.18.38 Description FreePBX, an open source GUI for managing Asterisk, contains a reflected cross-site scripting issue on the Asterisk HTTP Status page. The page is exposed by...

GHSA-MWVV-Q9GH-GWXM

creationtimestamp| type| source ---|---|--- 2025-10-13 22:17:56+00:00| seen| Telegram/AvB3f2VXJ78nxiEggbsGlkBj-on5ZVuFRFknQTi-qc2jM...

Nextcloud: BOLA/IDOR in Out-of-Office API allows any authenticated user to read other users' absence data

Summary The Out-of-Office OOO API endpoints at /ocs/v2.php/apps/dav/api/v1/outOfOffice/userId and /ocs/v2.php/apps/dav/api/v1/outOfOffice/userId/now suffer from a Broken Object Level Authorization BOLA vulnerability. Any authenticated user can retrieve the out-of-office data of any other user by...

CVE-2025-10556

creationtimestamp| type| source ---|---|--- 2025-10-13 08:13:36+00:00| seen| Telegram/DLYbgs5llWKu1oMGQOtozbVt2oAHZcDrgNZsESxJ4FyEZM...

CVE-2025-60868

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

WordPress Big Post Shipping for WooCommerce plugin cross-site scripting vulnerability

WordPress Big Post Shipping for WooCommerce plugin is a WooCommerce plugin that is mainly used to display real-time shipping quotes and logistics options in WooCommerce websites. The WordPress Big Post Shipping for WooCommerce plugin suffers from a cross-site scripting vulnerability that stems fr...

Linux Distros Unpatched Vulnerability : CVE-2023-53620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md: fix soft lockup in statusresync statusresync will calculate 'currresync - recoveryactive' to show user a progress bar like following: ============...