CVE-2025-11427

The WP Migrate Lite – WordPress Migration Made Easy plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.7.6 via the wpmdbflush AJAX action. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

PT-2025-47359

Name of the Vulnerable Software and Affected Versions Fortinet FortiADC versions 6.2 through 7.4.0 Description A flaw exists in Fortinet FortiADC that could allow an administrator with read-only permissions to access passwords for external resources through the product's logs. This could lead to...

Fortinet FortiADC information leakage vulnerability

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. An information disclosure vulnerability exists in Fortinet FortiADC, which stems from the exposure of sensitive information and could lead to obtaining passwords for external resources. The following versions are affected...

CVE-2025-54971: Exposure of Sensitive Information to an Unauthorized Actor

An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all versions, FortiADC 7.0 all versions, FortiADC 6.2 all versions may allow an admin with read-only permission to get the external resources password vi...

CVE-2025-63604: Improper Neutralization of Special Elements used in a Command

A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the executequery method. The vulnerability stems from the exposure of dangerous Python built-in functions import, getattr, hasattr in...

CVE-2025-64329

A flaw was found in containerd. This vulnerability allows a user to exhaust memory on the host due to goroutine leaks via a bug in the CRI Container Runtime Interface Attach implementation...

Spectrum Power 4 Privilege Escalation

The vulnerability of the Spectrum Power 4 software is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux kernel binderTransactionBufferRelease Heap Buffer Overflow DoS

The vulnerability of the binderTransactionBufferRelease function in the drivers/android/binder.c module of the Linux operating system’s kernel is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux InfiniBand DoS

The vulnerability of the cmaCancelOperation function in the drivers/infiniband/core/cma.c module of the Linux operating system’s InfiniBand support driver is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a attacker to cause a service...

Linux fs/ubifs/super.c Heap Buffer Overflow DoS

The vulnerability of the ubifsallocinode function in the fs/ubifs/super.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Spectrum Power 4 Privilege Escalation Command Injection

The vulnerability of the Spectrum Power 4 software is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary commands...

Linux kernel Ethernet driver Heap Buffer Overflow DoS

The vulnerability of the ixgbevfinitmodule function in the drivers/net/ethernet/intel/ixgbevf/ixgbevfmain.c file of the Linux kernel’s Ethernet driver framework is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a...

intel_engines_init DRI DoS

The vulnerability of the intelenginesinit function in the drivers/gpu/drm/i915/gt/intelenginecs.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernel, is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an...

netfilter Flow Failure

The vulnerability of the flowoffloadqueuework function in the net/netfilter/nfflowtableoffload.c module of the netfilter kernel of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service...

Linux dm_revalidate_zones Heap Buffer Overflow DoS

The vulnerability of the dmrevalidatezones function in the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a attacker to cause a service failure...

Windows Speech Runtime Privilege Escalation

The vulnerability of the Windows Speech Runtime component in operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

Windows Ancillary Function Driver WinSock Privilege Escalation

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

Wireless Provisioning System Privilege Escalation

The vulnerability of the Wireless Provisioning System component for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2025-40166

Technical details for CVE-2025-40166 are not publicly provided in the connected documents. Based on the available data, only high-level description is present. Monitor for updates from vendor advisories and security notices.

TOR Virtual Network Tunneling Tool 0.4.8.20

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow...