237 matches found
CVE-2025-42928
creationtimestamp| type| source ---|---|--- 2025-12-09 03:05:12+00:00| seen| https://infosec.exchange/users/offseq/statuses/115687391958582450 2025-12-09 03:05:13+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7jkr4b2k62s 2025-12-09 03:10:12+00:00| seen|...
CVE-2025-12850
creationtimestamp| type| source ---|---|--- 2025-12-05 08:33:53+00:00| seen| https://infosec.exchange/users/offseq/statuses/115666035106208552 2025-12-05 08:33:54+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7a3b4yyml2t 2025-12-05 12:22:55+00:00| seen|...
CVE-2025-12355 Payaza <= 0.3.8 - Missing Authorization to Unauthenticated Order Status Update
The Payaza plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxnoprivupdateorderstatus' AJAX endpoint in all versions up to, and including, 0.3.8. This makes it possible for unauthenticated attackers to update order statuses...
PT-2025-49226
The Payaza plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp ajax nopriv update order status' AJAX endpoint in all versions up to, and including, 0.3.8. This makes it possible for unauthenticated attackers to update order statuses...
CVE-2025-2486
creationtimestamp| type| source ---|---|--- 2025-11-26 17:48:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115617256049609173 2026-01-06 01:35:56+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3mbpsta6drg2p 2026-01-06 01:36:08+00:00| seen|...
CVE-2025-59245
creationtimestamp| type| source ---|---|--- 2025-11-20 22:44:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115584444564008370 2025-11-20 23:25:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m63w3zlo3z2q 2025-11-21 01:33:17+00:00| seen|...
CVE-2025-62293
SOPlanning is vulnerable to Broken Access Control in /status endpoint. Due to lack of permission checks in Project Status functionality an authenticated attacker is able to add, edit and delete any status. This issue was fixed in version 1.55...
EUVD-2025-198311
SOPlanning is vulnerable to Broken Access Control in /status endpoint. Due to lack of permission checks in Project Status functionality an authenticated attacker is able to add, edit and delete any status. This issue was fixed in version 1.55...
CVE-2023-41346
creationtimestamp| type| source ---|---|--- 2025-11-19 21:59:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115578606002979278 2025-11-19 22:00:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115578608301178805 2025-11-20 21:02:46+00:00| seen|...
CVE-2023-41348
creationtimestamp| type| source ---|---|--- 2025-11-19 21:59:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115578606002979278 2025-11-19 22:00:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115578608301178805 2025-11-20 21:02:47+00:00| seen|...
Mastodon 代码问题漏洞
Mastodon is an open source social networking server based on ActivityPub by Mastodon Open Source. A code issue vulnerability exists in Mastodon versions prior to 4.4.8 and prior to 4.5.0-beta.2, which stems from not properly handling reposting statuses and could lead to bypassing the reference...
CVE-2025-62176
Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...
EUVD-2025-34111
Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...
PT-2025-41809
Name of the Vulnerable Software and Affected Versions Mastodon versions prior to 4.2.27 Mastodon versions prior to 4.3.14 Mastodon versions prior to 4.4.6 Description Mastodon is a free, open-source social network server based on ActivityPub. The streaming server incorrectly handles authenticatio...
CVE-2025-36636
creationtimestamp| type| source ---|---|--- 2025-10-08 15:48:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115339328547767395...
EUVD-2017-9985
Malware in sbrugna...
PT-2025-40620
Name of the Vulnerable Software and Affected Versions WordPress Cost Calculator Builder plugin versions through 3.5.32 Description The Cost Calculator Builder plugin for WordPress has a flaw that allows unauthorized data modification. A missing capability check in the get cc orders and update ord...
EUVD-2023-59670
Malicious code in bioql PyPI...