MINI-MWCH-6825-4QHJ

Bulletin has no description...

CVE-2023-6825

creationtimestamp| type| source ---|---|--- 2026-04-08 14:00:52+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-6825.yaml 2026-04-10 21:03:06+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mj67urtpyt27...

Oracle Linux 10 : rsync (ELSA-2026-6825)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-6825 advisory. - Resolves: RHEL-152885 - CVE-2025-10158 Out of bounds array access via negative index Tenable has extracted the preceding description block directly from the...

GHSA-J273-M5QQ-6825

creationtimestamp| type| source ---|---|--- 2026-02-27 22:40:11+00:00| seen| https://gist.github.com/alon710/322eaec6115140d27bccb17e1450bfcd...

MiracleLinux 7 : firefox-68.7.0-2.0.1.el7.AXS7 (AXSA:2020-4711:08)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-4711:08 advisory. Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method CVE-2020-6821 Mozilla: Memory safety bugs fixed in Firefox 7...

Linux Distros Unpatched Vulnerability : CVE-2013-6825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 1 movescu.cc and 2 storescp.cc in dcmnet/apps/, 3 dcmnet/libsrc/scp.cc, 4 dcmwlm/libsrc/wlmactmg.cc, 5 dcmprscp.cc and 6 dcmpsrcv.cc in dcmpstat/apps/, 7...

CVE-2025-6825

creationtimestamp| type| source ---|---|--- 2025-06-28 20:55:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19830 2025-06-28 23:34:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lspcy6gmkr2a 2025-06-30 20:26:59+00:00| seen|...

CVE-2025-6825 TOTOLINK A702R HTTP POST Request formWlSiteSurvey buffer overflow

A vulnerability classified as critical was found in TOTOLINK A702R up to 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWlSiteSurvey of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-6825

CVE-2025-6825 affects TOTOLINK A702R up to version 4.0.0-B20230721.1521. The vulnerability is in the HTTP POST Request Handler, specifically the file /boafrm/formWlSiteSurvey, where manipulating the submit-url argument leads to a buffer overflow. The issue can be exploited remotely and has been d...

CVE-2023-6825

The File Manager and File Manager Pro plugins for WordPress are vulnerable to Directory Traversal in versions up to, and including version 7.2.1 free version and 8.3.4 Pro version via the target parameter in the mkfilefoldermanageractioncallbackshortcode function. This makes it possible for...

CVE-2024-6825

BerriAI/litellm version 1.40.12 contains a vulnerability that allows remote code execution. The issue exists in the handling of the 'postcallrules' configuration, where a callback function can be added. The provided value is split at the final '.' mark, with the last part considered the function...

01os (>=0.0.1 <=0.0.13), aeiva (>=0.8.1 <=0.8.2.6) +198 more potentially affected by CVE-2024-6825 via litellm (>=1.0.0 <=1.65.4.post1)

litellm PYPI version =1.0.0, =0.0.1, =0.8.1, =0.14.1a0, =0.1.0, =0.0.5, =1.1.2, =0.2.0, =0.1.1, =0.5.0, =0.1.0, =1.0.3, =0.2.10, =0.29.0, =0.59.1, =0.1.5, =1.1.1 and more Source cves: CVE-2024-6825 Source advisory: SNYK:PYTHON-LITELLM-9511162...

CVE-2024-6825

creationtimestamp| type| source ---|---|--- 2025-03-20 10:19:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8187...

CVE-2024-6825

CVE-2024-6825 affects litellm 1.40.12. The vulnerability lies in how the post_call_rules configuration is parsed: a callback can be set to a system method (for example os.system), with the final part treated as the function name and the rest imported as a Python module, enabling arbitrary command...

WordPress File Manager Plugin < 7.2.2 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webdesi9:filemanager"; if description...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : ADOdb vulnerabilities (USN-6825-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6825-1 advisory. It was discovered that the PDO driver in ADOdb was incorrectly handling string quotes. A remote attacker could possib...

CVE-2023-6825

CVE-2023-6825 affects the WordPress File Manager and File Manager Pro plugins. It enables Directory Traversal via the mk_file_folder_manager_action_callback_shortcode target parameter, allowing reading of arbitrary server files and upload to unintended directories. Affected versions: File Manager...

WordPress File Manager Pro Plugin <= 8.3.4 is vulnerable to Path Traversal

Software File Manager Pro Type Plugin Vulnerable versions = 8.3.4 Fixed in 8.3.5 OWASP Top 10 A4: Insecure Design Classification Path Traversal CVE CVE-2023-6825 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID dab5b86a4777 Credits Tobias Weißhaar kun19 Required privilege...

WordPress File Manager Plugin <= 7.2.1 is vulnerable to Path Traversal

Software File Manager Type Plugin Vulnerable versions = 7.2.1 Fixed in 7.2.2 OWASP Top 10 A4: Insecure Design Classification Path Traversal CVE CVE-2023-6825 Patch priority Low CVSS severity Low 8.2 Developer Claim ownership PSID 7f2548079631 Credits Tobias Weißhaar kun19 Required privilege...

Oracle Linux 6 : thunderbird (ELSA-2020-1488)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-1488 advisory. - Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild...