CVE-2024-31090

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 荒野无灯 Hacklog Down As PDF allows Reflected XSS.This issue affects Hacklog Down As PDF: from n/a through 2.3.6...

CVE-2025-24671

CVE-2025-24671 : Deserialization of untrusted data in the Save as PDF plugin by Pdfcrowd (versions

CVE-2025-24671 WordPress Save as PDF Plugin by Pdfcrowd Plugin <= 4.4.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Pdfcrowd Dev Team Save as PDF save-as-pdf-by-pdfcrowd allows Object Injection.This issue affects Save as PDF: from n/a through = 4.4.0...

PT-2025-5491

Name of the Vulnerable Software and Affected Versions Pdfcrowd Save as PDF plugin versions n/a through 4.4.0 Description The issue is related to the deserialization of untrusted data, allowing object injection in the Pdfcrowd Save as PDF plugin. This enables potential attackers to inject objects,...

WordPress plugin Save as PDF plugin by Pdfcrowd 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Save as PDF plugi...

CVE-2025-24671: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Pdfcrowd Dev Team Save as PDF save-as-pdf-by-pdfcrowd allows Object Injection.This issue affects Save as PDF: from n/a through = 4.4.0...

CVE-2025-22845

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused...

SAP NetWeaver AS ABAP (3550708)

The remote SAP NetWeaver ABAP server may be affected by a improper access control vulnerability. The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to access restricted information due to weak access controls. This can have a significant impact on the...

MAL-2025-615 Malicious code in marked-as (npm)

This package is imitating the popular marked library. It contains a VBScript to extract a bundled PE payload, make it hidden, and execute it. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16c9c50d2f56b3edc3a26ddebf2c1da3ef628b3aa1c8da23bc2e5b0b2b157dea Any compute...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.15.0

cert-manager Operator for Red Hat OpenShift 1.15.0 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.15.0

cert-manager Operator for Red Hat OpenShift 1.15.0 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

WordPress Save as PDF Plugin by Pdfcrowd Plugin <= 4.4.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by LVT-tholv2k in WordPress Plugin Save as PDF versions = 4.4.0...

MAL-2025-161 Malicious code in as-essential (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca79d9d4238a2b341541971bce5d43c48035839588832624bb45769b20fc33e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New 'Sneaky 2FA' Phishing Kit Targets Microsoft 365 Accounts with 2FA Code Bypass

Cybersecurity researchers have detailed a new adversary-in-the-middle AitM phishing kit that's capable of Microsoft 365 accounts with an aim to steal credentials and two-factor authentication 2FA codes since at least October 2024. The nascent phishing kit has been dubbed Sneaky 2FA by French...

CVE-2024-39756

A buffer overflow vulnerability exists in the adm.cgi repasrouter functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2025-0066

Under certain conditions SAP NetWeaver AS for ABAP and ABAP Platform Internet Communication Framework allows an attacker to access restricted information due to weak access controls. This can have a significant impact on the confidentiality, integrity, and availability of an application...

CVE-2025-0057

CVE-2025-0057 concerns SAP NetWeaver AS Java (User Admin Application). The issue is a stored cross-site scripting vulnerability where an attacker, posing as an admin, can upload a photo containing malicious JavaScript. When a victim accesses the vulnerable component, the attacker can read and mod...

CVE-2025-0057 Cross-Site Scripting vulnerability in SAP NetWeaver AS JAVA (User Admin Application)

SAP NetWeaver AS JAVA User Admin Application is vulnerable to stored cross site scripting vulnerability. An attacker posing as an admin can upload a photo with malicious JS content. When a victim visits the vulnerable component, the attacker can read and modify information within the scope of...

WAVLINK AC3000 安全漏洞

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. A buffer overflow vulnerability exists in the WAVLINK AC3000 M33A8.V5030.210505, which is caused by the adm.cgi repasrouter function failing to correctly validate the length of the input data, and can be exploited by a remote attacker...

PT-2025-2553

Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: A buffer overflow vulnerability exists in the rep as router function of adm.cgi. This issue can be triggered by a specially crafted HTTP request, leading to a stack-based buffer overflow...