CVE-2025-27655

Vulnerability CVE-2025-27655 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014, where a Server-Side Request Forgery (SSRF) in the CPA v1 component is reported. The issue is caused by improper handling in CPA v1 that enables SSRF; explo...

CVE-2025-27674

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Hardcoded IdP Key V-2023-006...

CVE-2025-27663

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007...

CVE-2025-27640

Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.1002 and Application 20.0.2614 contains a SQL Injection vulnerability (CVE-2025-27640). Affected components are the PrinterLogic/Vision Print stack on Virtual Appliance Host versions before 22.0.1002 and Application 20.0.26...

CVE-2025-27673

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017...

CVE-2025-27640

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows SQL Injection V-2024-012...

CVE-2025-27657

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Code Execution V-2023-008...

CVE-2025-27662

CVE-2025-27662 affects Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 and Application 20.0.1923, where passwords can be exposed in URLs (OVE-20230524-0005). Root cause: insecure handling of credentials in URL. The CVSSv3.1 baseline is 9.8 (Network, Single, No user int...

CVE-2025-27659

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows SQL Injection OVE-20230524-0002...

CVE-2025-27682

CVE-2025-27682 affects Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735, Application 20.0.1330. Root cause: insecure log permissions. CVSSv3.1 base score 9.8 (CRITICAL); attack vector NETWORK, no user interaction, privileges required NONE, confidentiality/ integrity/ ava...

CVE-2025-27652

CVE-2025-27652 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014. The vulnerability is Server-Side Request Forgery (SSRF) stemming from the rfIDEAS V-2023-015 component. Public references describe the issue as part of a broader set of ...

CVE-2025-27667

Vulnerability summary: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 and Application 20.0.1923 is exposed to an Administrative User Email Enumeration issue (OVE-20230524-0011). Affected product/version: Vasion Print prior to 22.0.843 / 20.0.1923. Root cause and techn...

CVE-2025-26318

hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts currently connected to the application...

CVE-2025-26318

hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts currently connected to the application...

CVE-2025-26318

hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts currently connected to the application...

CVE-2025-1872

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "sadminusername" parameter in admin/add-subadmins.php...

CVE-2024-13697

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.4 via the 'nicelinks'. This makes it possible for unauthenticated attackers to make web request...

CVE-2025-27554

ToDesktop before 2024-10-03, as used by Cursor before 2024-10-03 and other applications, allows remote attackers to execute arbitrary commands on the build server e.g., read secrets from the desktopify config.prod.json file, and consequently deploy updates to any app, via a postinstall script in...

CVE-2025-20049 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cross-site Scripting

The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information...

CVE-2024-50688

SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials. The application regardless of the user account and the cloud uses the same MQTT credentials for exchanging the device telemetry...