Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.13.2 container image updates

Red Hat Advanced Cluster Management for Kubernetes 2.13.2 General Availability release, with updates to container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2025-32476 WordPress Advanced Tag Lists plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in blueinstyle Advanced Tag Lists advanced-tag-list allows Stored XSS.This issue affects Advanced Tag Lists: from n/a through = 1.2...

CVE-2025-32476

CVE-2025-32476 is a CSRF-to-stored XSS issue in the WordPress plugin Advanced Tag Lists (affected: versions up through 1.2). The vulnerability is described as Cross-Site Request Forgery leading to stored Cross-Site Scripting. The CVE entry is complemented by Wordfence vulnerability data noting Ad...

CVE-2025-32476 WordPress Advanced Tag Lists plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in blueinstyle Advanced Tag Lists allows Stored XSS. This issue affects Advanced Tag Lists: from n/a through 1.2...

CVE-2025-32476: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in blueinstyle Advanced Tag Lists advanced-tag-list allows Stored XSS.This issue affects Advanced Tag Lists: from n/a through = 1.2...

PT-2025-15758 · Unknown · Blueinstyle Advanced Tag Lists

Name of the Vulnerable Software and Affected Versions: blueinstyle Advanced Tag Lists versions 1.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

WordPress plugin Advanced Tag Lists has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2025-3433

The Advanced Advertising System plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.3.1. This is due to insufficient validation on the redirect url supplied via the 'redir' parameter. This makes it possible for unauthenticated attackers to redirect users to...

CVE-2025-3433 Advanced Advertising System <= 1.3.1 - Open Redirect

The Advanced Advertising System plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.3.1. This is due to insufficient validation on the redirect url supplied via the 'redir' parameter. This makes it possible for unauthenticated attackers to redirect users to...

CVE-2025-3433

CVE-2025-3433: Open Redirect in Advanced Advertising System (WordPress) pre-1.3.2 . The WordPress plugin is vulnerable to an Open Redirect due to insufficient validation of the redirect URL provided via the redir parameter. Affected versions are up to 1.3.1; as of the latest documents, the patch ...

CVE-2025-3433 Advanced Advertising System <= 1.3.1 - Open Redirect

The Advanced Advertising System plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.3.1. This is due to insufficient validation on the redirect url supplied via the 'redir' parameter. This makes it possible for unauthenticated attackers to redirect users to...

CVE-2025-3433: URL Redirection to Untrusted Site

The Advanced Advertising System plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.3.1. This is due to insufficient validation on the redirect url supplied via the 'redir' parameter. This makes it possible for unauthenticated attackers to redirect users to...

PT-2025-15411 · WordPress · Advanced Advertising System

Name of the Vulnerable Software and Affected Versions: Advanced Advertising System plugin for WordPress versions up to and including 1.3.1 Description: The issue arises from insufficient validation of the redirect URL provided through the redir parameter. This allows unauthenticated attackers to...

PT-2025-15377 · Sap · Sap Netweaver

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver affected versions not specified Description: The issue allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would normally require additional validation. Once connected to the ABAP...

WordPress Plugin Advanced Advertising System: Input validation error vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

Xanthorox AI Surfaces on Dark Web as Full Spectrum Hacking Assistant

New Xanthorox AI hacking platform spotted on dark web with modular tools, offline mode, and advanced voice, image, and code-based cyberattack features...

CVE-2025-3426: Use of Hard-coded Credentials

We observed that Intellispace Portal binaries doesn’t have any protection mechanisms to prevent reverse engineering. Specifically, the app’s code is not obfuscated, and no measures are in place to protect against decompilation, disassembly, or debugging. As a result, attackers can reverse-enginee...

PT-2025-15271 · Philips · Advanced Visualization Workspace +1

Name of the Vulnerable Software and Affected Versions: Intellispace Portal versions 12 and prior Advanced Visualization Workspace version 15 Description: The issue is related to the lack of protection mechanisms in the Intellispace Portal binaries, making it possible for attackers to...

Philips IntelliSpace Portal security vulnerabilities

Philips IntelliSpace Portal is an advanced medical image analysis platform from Philips Netherlands that provides multimodal image processing and automated diagnostic tools. A security vulnerability exists in Philips IntelliSpace Portal version 12 and earlier and Advanced Visualization Workspace...

AMD Ryzen AI Integer Overflow

The vulnerability of software for optimizing and deploying AI-based applications related to AMD Ryzen AI is associated with a numerical overflow condition. Exploiting this vulnerability can allow attackers to compromise the integrity and accessibility of protected information...