WordPress Prisna GWT plugin < 1.4.14 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Prisna GWT – Google Website Translator versions 1.4.14...

CVE-2025-68156 affecting package keda for versions less than 2.14.1-8

CVE-2025-68156 affecting package keda for versions less than 2.14.1-8. A patched version of the package is available...

CVE-2025-2406

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Trizbi allows Cross-Site Scripting XSS.This issue affects Trizbi: before 2.144.4...

CVE-2025-68945

In Gitea before 1.21.2, an anonymous user can visit a private user's project...

CVE-2025-68922

OpenOps before 0.6.11 allows remote code execution in the Terraform block...

EUVD-2025-205376

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Aidango allows Cross-Site Scripting XSS.This issue affects Aidango: before 2.144.4...

CVE-2025-2405 XSS in Verisay Communication's Titarus

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Titarus allows Cross-Site Scripting XSS. This issue affects Titarus: before 2.144.4...

CVE-2025-2405

The CVE-2025-2405 entry documents a Cross-Site Scripting (XSS) vulnerability in Verisay Titarus (Verisay Communication and Information Technology Industry and Trade Ltd. Co.). Affected versions before 2.144.4 are exposed due to improper input neutralization during web page generation. The issue c...

CVE-2025-67111

OpenDDS DDS versions prior to v3.33.0 are vulnerable to an integer overflow within the RTPS protocol implementation . This flaw allows a remote attacker to trigger a Denial of Service (DoS) by sending a specially crafted message. To remediate this vulnerability, it is recommended to update to ver...

PT-2025-52863

Name of the Vulnerable Software and Affected Versions 5ire versions 0.15.2 and prior Description 5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. A remote code execution issue exists in the useMarkdown.ts file due to the markdown-it-mermaid...

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

CVE-2025-14018

CVE-2025-14018 describes an Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura prior to version 1.2.15. The root cause is unquoted configuration/file search paths that can be manipulated to redirect access to libraries. Impact per the sources is high confiden...

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

EUVD-2025-204544

Galette is a membership management web application for non profit organizations. Starting in version 1.1.4 and prior to version 1.2.0, a user who is logged in as group manager may bypass intended restrictions on Contributions and Transactions. Version 1.2.0 fixes the issue...

CVE-2025-7047

Missing Authorization vulnerability in Utarit Informatics Services Inc. SoliClub allows Privilege Abuse.This issue affects SoliClub: before 5.3.7...

CVE-2025-63389

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations...

AVideo 安全漏洞

AVideo is an open source broadcast network creation tool from World Wide Broadcast Network. A security vulnerability exists in AVideo versions prior to 20.0, which stems from a lack of ownership checking in the upload function that could cause an authenticated user to upload files to another user...

CVE-2025-67787

A Cross Site Scripting (XSS) vulnerability exists in DriveLock Operations Center versions 25.1.2 through 25.1.4 . This security issue, identified as CWE-79 , stems from improper neutralization of input during web page generation, which could allow an attacker to perform a session takeover over a ...

PT-2025-51793

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 143.0.7499.147 Description A flaw exists in the V8 component of Google Chrome that could allow a remote attacker to exploit heap corruption. This is due to an out-of-bounds read and write condition triggered by ...

GO-2025-4154 new-api is vulnerable to SSRF Bypass in one-api

new-api is vulnerable to SSRF Bypass in one-api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the repor...