CVE-2025-8297

creationtimestamp| type| source ---|---|--- 2025-08-12 14:47:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115016338592740347 2025-08-20 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-857/...

CVE-2025-41675

creationtimestamp| type| source ---|---|--- 2025-07-21 10:42:09+00:00| seen| https://infosec.exchange/users/certvde/statuses/114890803062994673 2025-07-21 10:42:29+00:00| seen| https://infosec.exchange/users/certvde/statuses/114890804388115598 2025-07-21 10:46:28+00:00| seen|...

Axis Communications Discontinued Devices Detection

The current plugin identifies Axis devices that are currently discontinued. Axis Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and last time buys. Product generally orderable until the...

CVE-2023-47298

An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses...

Siemens End-of-Life Devices Detection

The current plugin identifies Siemens devices that are end-of-life, i.e., still supported but have a discontinued date announced. Siemens Lifecycle Statuses: - 'PM300:Active Product': Most current offering within a product category. - 'PM400:Announcement of product phase-out': Product in phase-ou...

Siemens Discontinued Devices Detection

The current plugin identifies Siemens devices that are currently discontinued. Siemens Lifecycle Statuses: - 'PM300:Active Product': Most current offering within a product category. - 'PM400:Announcement of product phase-out': Product in phase-out, support and orders still possible. -...

Siemens Active Devices Detection

The current plugin identifies Siemens devices that are still under active support. Siemens Lifecycle Statuses: - 'PM300:Active Product': Most current offering within a product category. - 'PM400:Announcement of product phase-out': Product in phase-out, support and orders still possible. -...

GHSA-W6Q7-J642-7C25

creationtimestamp| type| source ---|---|--- 2025-05-30 18:15:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114598146975884055 2025-05-30 18:16:52+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lqftpll67w22...

CVE-2024-32524

Missing Authorization vulnerability in Nuggethon Custom Order Statuses for WooCommerce.This issue affects Custom Order Statuses for WooCommerce: from n/a through 1.5.2...

CVE-2024-25930

Cross-Site Request Forgery CSRF vulnerability in Nuggethon Custom Order Statuses for WooCommerce.This issue affects Custom Order Statuses for WooCommerce: from n/a through 1.5.2...

CVE-2024-12712

The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the webhook function in all versions up to, and including, 5.7.8. This makes it possible for unauthenticated attackers to modify order statuses...

CVE-2025-41225

creationtimestamp| type| source ---|---|--- 2025-05-20 14:48:22+00:00| seen| https://bsky.app/profile/andersonc0d3.bsky.social/post/3lpmdfkawoc2w 2025-05-20 14:48:25+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/114540708203094327 2025-05-20 14:54:00+00:00| seen|...

Incorrect Authorization

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Incorrect Authorization due to insufficient capability checks in the messaging web service. An attacker can view other users' names and online statuses by exploiting this flaw. Remediation Upgrade...

CVE-2025-3645

A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses...

UBUNTU-CVE-2025-3645

A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses...

CVE-2025-45428

creationtimestamp| type| source ---|---|--- 2025-04-23 17:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnipaqstop2g 2025-04-23 17:48:50+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114388535171619192 2025-04-23 18:39:47+00:00| seen|...

CVE-2025-31330

creationtimestamp| type| source ---|---|--- 2025-04-08 07:46:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10860 2025-04-08 08:40:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmc3aqwetn2t 2025-04-08 09:18:06+00:00| seen|...

CVE-2025-3266

creationtimestamp| type| source ---|---|--- 2025-04-04 19:36:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10534 2025-04-04 21:06:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llzd3nxfuu2f 2025-04-05 00:42:50+00:00| seen|...

CVE-2025-2005

creationtimestamp| type| source ---|---|--- 2025-04-02 09:34:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10046 2025-04-02 10:40:10+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llt75kfedt2s 2025-04-02 11:00:05+00:00| published-proof-of-concept|...

CVE-2024-44314

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the Orders Management System, allowing unauthorized users to update order statuses. The issue occurs in the indexonUpdateStatus function within Orders.php, which fails to verify if the user has permission to modify an order'...