WordPress Request a Quote plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin Request a Quote versions = 2.5.0...

CVE-2025-58915: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in emarket-design Request a Quote request-a-quote allows Stored XSS.This issue affects Request a Quote: from n/a through = 2.5.0...

CVE-2025-58688

Cross-Site Request Forgery CSRF vulnerability in Casengo Casengo Live Chat Support the-casengo-chat-widget allows Stored XSS.This issue affects Casengo Live Chat Support: from n/a through = 2.1.4...

CVE-2025-58675

CVE-2025-58675 : CSRF vulnerability in Interact: Embed A Quiz On Your Site. Affected software: Interact: Embed A Quiz On Your Site (from n/a through 3.1). From the description, the weakness is Cross-Site Request Forgery with network attack vector, low likelihood requirements, and user interaction...

PT-2025-38836

Name of the Vulnerable Software and Affected Versions husani WP Subtitle versions through 3.4.1 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-Site Scripting XSS. This means that malicious code can be injected...

CVE-2025-58675: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in tryinteract Interact: Embed A Quiz On Your Site interact-quiz-embed allows Cross Site Request Forgery.This issue affects Interact: Embed A Quiz On Your Site: from n/a through = 3.1...

PT-2025-38963

Name of the Vulnerable Software and Affected Versions Interact: Embed A Quiz On Your Site versions through 3.1 Description A Cross-Site Request Forgery CSRF issue exists in Interact: Embed A Quiz On Your Site. This allows attackers to perform actions on behalf of an unsuspecting user...

CVE-2025-34201

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments run many Docker containers on shared internal networks without firewalling or segmentation between instances. A compromise of any single container allows direct access to internal services HTTP, Redi...

BreachLock Named Sample Vendor for PTaaS and AEV in Two New 2025 Gartner® Reports

New York, New York, 19th September 2025, CyberNewsWire...

CVE-2024-48851 Remote Code Execution

Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.A remote code execution is possible due to an improper input validation. This issue affects FLXEON: through 9.3.5...

CVE-2025-35430: Improper Limitation of a Pathname to a Restricted Directory

CISA Thorium does not adequately validate the paths of downloaded files via 'downloadephemeral' and 'downloadchildren'. A remote, authenticated attacker could access arbitrary files subject to file system permissions. Fixed in 1.1.2...

CVE-2025-10205: Use of a One-Way Hash without a Salt

Use of a One-Way Hash with a Predictable Salt vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5. and newer versions...

CVE-2025-57631

SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module...

CVE-2025-47967: Insufficient UI Warning of Dangerous Operations

Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-57631: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module...

CVE-2025-43938: Plaintext Storage of a Password

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to...

CVE-2025-40804

A vulnerability has been identified in SIMATIC Virtualization as a Service SIVaaS All versions. The affected application exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization...

CVE-2025-40804: Incorrect Permission Assignment for Critical Resource

A vulnerability has been identified in SIMATIC Virtualization as a Service SIVaaS All versions. The affected application exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization...

Malicious Package

Overview tailwind-typography-plus is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances...

CVE-2023-31325: Improper Isolation of Shared Resources on System-on-a-Chip (SoC)

Improper isolation of shared resources on System-on-a-chip SOC could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentiality and integrity...