CVE-2025-5600

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument LangType leads to stack-based buffer overflow. The attack may be initiated...

CVE-2025-5596

creationtimestamp| type| source ---|---|--- 2025-06-04 17:47:20+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqseej5bo262 2025-06-04 18:48:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqshsqd2fq2k...

CVE-2025-5600 TOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument LangType leads to stack-based buffer overflow. The attack may be initiated...

CVE-2025-5600

The CVE-2025-5600 entry concerns TOTOLINK EX1200T (firmware 4.1.2cu.5232_B20210713). The vulnerability exists in the setLanguageCfg function within /cgi-bin/cstecgi.cgi, where manipulating the LangType argument causes a stack-based buffer overflow. Exploitation appears to be remote and publicly d...

CVE-2025-20163

A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller NDFC could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices. This vulnerability is due to insufficient SSH host key validation. An attacker could exploit this vulnerability by...

CVE-2025-20130

A vulnerability in the API of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due to improper validation of the file copy...

CVE-2025-2336 AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

CVE-2025-20278 Cisco Unified Communications Products Command Injection Vulnerability

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vulnerability is due to improper validation of user-supplied...

CVE-2025-20130 Cisco Identity Services Engine Access Control Bypass Vulnerability

A vulnerability in the API of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due to improper validation of the file copy...

CVE-2025-29093

creationtimestamp| type| source ---|---|--- 2025-06-04 16:03:49+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqs6le4ovpg2 2025-06-05 01:12:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqt5bvqgag2p...

CVE-2025-23095

creationtimestamp| type| source ---|---|--- 2025-06-04 16:03:16+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqs6kzr4as62...

CVE-2025-5592

creationtimestamp| type| source ---|---|--- 2025-06-04 14:20:28+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqryt43e74o2 2025-06-04 17:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqsbwtk3xm2e...

CVE-2025-48961

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Windows before build 39938...

CVE-2025-37091

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-48961

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Windows before build 39938...

CVE-2025-48960

CVE-2025-48960 concerns a weak server key used for TLS encryption affecting Acronis Cyber Protect 16 on Linux, macOS, and Windows before build 39938 . The vulnerability is caused by inadequate key material in the TLS setup, leading to low confidentiality (C) and partial integrity issues (I) per t...

CVE-2025-5598

creationtimestamp| type| source ---|---|--- 2025-06-04 12:38:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqrt4jzzu32o 2025-06-04 12:40:06+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrt6fpioso2...

CVE-2025-48959

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 40077...

CVE-2025-5601

creationtimestamp| type| source ---|---|--- 2025-06-04 11:49:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrqejjhuig2 2025-06-04 12:06:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114625005980230275 2025-06-04...

CVE-2025-5598 WF Steuerungstechnik GmbH - airleader MASTER - Path Traversal

Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046...