[SECURITY] Fedora 40 Update: nginx-mod-vts-0.2.3-3.fc40

Nginx virtual host traffic status module...

PT-2025-6498 · WordPress · Directorypress Frontend

Name of the Vulnerable Software and Affected Versions: DirectoryPress Frontend plugin for WordPress versions up to, and including, 2.7.9 Description: The issue is due to missing or incorrect nonce validation on the dpfl listingStatusChange function, making it possible for unauthenticated attacker...

CVE-2024-5462

creationtimestamp| type| source ---|---|--- 2025-02-14 23:51:23+00:00| seen| https://infosec.exchange/users/cve/statuses/114004923571161636 2025-02-15 00:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li6gtk3tnl2h 2025-02-15 01:10:27+00:00| seen|...

WordPress DirectoryPress Frontend plugin <= 2.7.9 - Cross-Site Request Forgery to Listing Status Update vulnerability

Cross-Site Request Forgery to Listing Status Update vulnerability discovered by incognito in WordPress Plugin DirectoryPress Frontend versions = 2.7.9...

GHSA-RMVR-2PP2-XJ38

creationtimestamp| type| source ---|---|--- 2025-02-14 19:40:19+00:00| seen| https://infosec.exchange/users/cve/statuses/114003936429038682...

CVE-2025-25204

gh is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...

`gh attestation verify` returns incorrect exit code during verification if no attestations are present

Summary A bug in GitHub's Artifact Attestation CLI tool, gh attestation verify, may return an incorrect zero exit status when no matching attestations are found for the specified --predicate-type or the default https://slsa.dev/provenance/v1 if not specified. This issue only arises if an artifact...

CVE-2025-26156

creationtimestamp| type| source ---|---|--- 2025-02-14 17:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5peim7o42a 2025-02-14 18:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud7pi242p 2025-02-14 19:17:54+00:00|...

CVE-2025-25204

gh is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...

CVE-2025-25204

gh is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...

CVE-2025-25204

The CVE-2025-25204 issue affects GitHub CLI (gh) where, in versions 2.49.0 through 2.66.x, a bug in the Artifact Attestation tool gh attestation verify causes a zero exit status when no attestations are present. This incorrect exit code can enable attackers to deploy malicious artifacts in enviro...

CVE-2025-25745

creationtimestamp| type| source ---|---|--- 2025-02-14 16:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5lyyhvgd2e 2025-02-14 16:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114003261336817886 2025-02-14 19:35:00+00:00| seen|...

CVE-2025-25304

creationtimestamp| type| source ---|---|--- 2025-02-14 16:10:32+00:00| published-proof-of-concept| https://github.com/vega/vega/security/advisories/GHSA-mp7w-mhcv-673j 2025-02-14 19:34:33+00:00| seen| https://infosec.exchange/users/cve/statuses/114003913828136574 2025-02-14 20:16:06+00:00| seen|...

CVE-2025-24566

creationtimestamp| type| source ---|---|--- 2025-02-14 13:18:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2isyfz2c 2025-02-14 15:38:52+00:00| seen| https://infosec.exchange/users/cve/statuses/114002987038424383 2025-02-14 15:45:48+00:00| seen|...

CVE-2025-24564

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2e3iqz2c 2025-02-14 15:23:51+00:00| seen| https://infosec.exchange/users/cve/statuses/114002928023557735 2025-02-14 15:45:41+00:00| seen|...

CVE-2025-23853

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzy5mys2s 2025-02-14 15:08:50+00:00| seen| https://infosec.exchange/users/cve/statuses/114002868946616253...

CVE-2025-23786

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzirf6m2i 2025-02-14 14:38:48+00:00| seen| https://infosec.exchange/users/cve/statuses/114002750893462072...

CVE-2025-23771

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzg3cez24 2025-02-14 14:38:48+00:00| seen| https://infosec.exchange/users/cve/statuses/114002750878299039...

CVE-2025-23748

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bz4l7i22h 2025-02-14 14:23:47+00:00| seen| https://infosec.exchange/users/cve/statuses/114002691828525768...

CVE-2025-23658

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5byx3ff32s 2025-02-14 14:23:47+00:00| seen| https://infosec.exchange/users/cve/statuses/114002691796716568...