CVE-2025-9513 editso fuso mod.rs PenetrateRsaAndAesHandshake inadequate encryption

A flaw has been found in editso fuso up to 1.0.4-beta.7. This affects the function PenetrateRsaAndAesHandshake of the file src/net/penetrate/handshake/mod.rs. This manipulation of the argument privkey causes inadequate encryption strength. Remote exploitation of the attack is possible. A high...

Google Chrome Security Update (stable-channel-update-for-desktop_26-2025-08) - Linux

Google Chrome is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

Linux Distros Unpatched Vulnerability : CVE-2025-2173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbistrndupiconvucs2 of the file src/conv.c. T...

CVE-2025-48108

CVE-2025-48108 affects WordPress School Management Plugin

CVE-2025-9432 mtons mblog Admin Panel list cross site scripting

A vulnerability has been found in mtons mblog up to 3.5.0. The affected element is an unknown function of the file /admin/post/list of the component Admin Panel. Such manipulation of the argument Title leads to cross site scripting. The attack can be launched remotely. The exploit has been...

PT-2025-34794 · Helpy.Io · Helpy.Io

Name of the Vulnerable Software and Affected Versions: Helpy.io version 2.8.0 Description: A Cross Site Scripting issue exists in Helpy.io version 2.8.0. This allows a remote attacker to escalate privileges through the New Topic Ticket function. Recommendations: Update to a newer version that...

CVE-2025-9397 givanz Vvveb media.php unrestricted upload

A weakness has been identified in givanz Vvveb up to 1.0.7.2. Affected is an unknown function of the file /system/traits/media.php. Executing manipulation of the argument files can lead to unrestricted upload. The attack can be launched remotely. The exploit has been made available to the public...

KLA88390 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Integer overflow vulnerability in V8 can be exploited remotely to execute arbitrary code...

CVE-2025-48355

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ProveSource LTD ProveSource Social Proof provesource allows Retrieve Embedded Sensitive Data.This issue affects ProveSource Social Proof: from n/a through = 3.1.2...

CVE-2025-57891

CVE-2025-57891 affects the WordPress plugin “Recurring PayPal Donations” (wpecommerce) up to version 1.8. Root cause: improper neutralization of input during web page generation, enabling Stored Cross-Site Scripting (XSS). Impact as stated: stored XSS; exploitation status not detailed in the prov...

PT-2025-34369 · Quantumnous · Quantumnous New-Api

Name of the Vulnerable Software and Affected Versions: QuantumNous new-api version 0.8.5.2 Description: The QuantumNous new-api is susceptible to a Cross-Site Scripting XSS issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-34360 · Andy Moyle · Andy Moyle Church Admin

Name of the Vulnerable Software and Affected Versions: andy moyle Church Admin versions through 5.0.26 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update andy moyle Church Admin to a version later...

PT-2025-34334 · Unknown · Bouncy Castle For Java

Name of the Vulnerable Software and Affected Versions: Bouncy Castle for Java versions 2.1.0 through 2.1.0 Description: An out-of-bounds write issue exists in the Bouncy Castle for Java bc-fips API modules, specifically associated with the program files org/bouncycastle/jcajce/provider/BaseCipher...

CVE-2010-20121 EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow

EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser. When processing the CWD Change Working Directory command, the server fails to properly validate the length of the input string, allowing attackers to overwrite memory on the stack...

CVE-2025-34158

Plex Media Server PMS 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect resource transfer between spheres because /myplex/account provides the credentials of the server owner and a /api/resources call reveals other servers accessible by that server owner...

CVE-2025-53504

Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...

Mozilla Firefox ESR Security Update (mfsa_2025-67) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Linux Distros Unpatched Vulnerability : CVE-2023-22002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.44 and Prior t...

Linux Distros Unpatched Vulnerability : CVE-2023-21899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.42 and prior t...

CVE-2025-9288

The CVE-2025-9288 issue is an Improper Input Validation vulnerability in sha.js (node-sha.js) with incomplete type checks that can lead to Input Data Manipulation. Public reports tie the vulnerability to sha.js up to version 2.4.11. Debian advisories (DSA-6002-1, DLA-4302-1, DLA-4291-1) describe ...