APSB25-61 : Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves a critical vulnerability that could lead to arbitrary code execution...

Ivanti Connect Secure 安全漏洞

Ivanti Connect Secure ICS is a secure remote network connection tool from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Connect Secure versions prior to 22.7R2.8 and Ivanti Policy Secure versions prior to 22.7R1.5, which stems from a stack buffer overflow that could result in...

PT-2025-28485 · Ivanti · Ivanti Connect Secure

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Description: The issue allows a local authenticated attacker to obtain sensitive information that has been inserted into a log file. Recommendations: For versions prior to 22.7R2.8, update to...

PT-2025-28483 · Ivanti · Ivanti Connect Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Ivanti Policy Secure versions prior to 22.7R1.5 Description: The issue allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk through CLRF...

Ivanti Connect Secure和Ivanti Policy Secure 注入漏洞

Ivanti Connect Secure ICS and Ivanti Policy Secure IPS are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. An injection vulnerability exists in Ivanti Connect Secure version...

IBM App Connect Enterprise (ACE) Detection (Windows)

Binary data ibmacewininstalled.nbin...

The vulnerability of the Introspection Mode feature of the openid-connect plugin for the Apache APISIX cloud API gateway allows a attacker to gain access to the user’s account.

The vulnerability of the Introspection Mode feature in the openid-connect plugin for the Apache APISIX cloud API gateway involves bypassing authentication by using the same secret key. Exploiting this vulnerability could allow a malicious actor to gain access to a user’s account remotely...

CVE-2025-29007

Missing Authorization vulnerability in LMSACE LMSACE Connect lmsace-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LMSACE Connect: from n/a through = 3.4...

CVE-2025-46647

A vulnerability of plugin openid-connect in Apache APISIX. This vulnerability will only have an impact if all of the following conditions are met: 1. Use the openid-connect plugin with introspection mode 2. The auth service connected to openid-connect provides services to multiple issuers 3...

CVE-2025-28983

CVE-2025-28983 describes an SQL Injection in Click & Pledge Connect for WordPress plugin versions 25.04010101 through WP6.8 that enables privilege escalation. The CVE is rated with a high impact (CVSS 3.1, base 9.8) and network attack vector with no user interaction required. Connected sources co...

CVE-2025-29007

Missing Authorization vulnerability in LMSACE LMSACE Connect lmsace-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LMSACE Connect: from n/a through = 3.4...

CVE-2025-29007

CVE-2025-29007 corresponds to a Missing Authorization (Broken Access Control) vulnerability in LMSACE Connect. The exposed flaw allows bypassing access controls due to incorrectly configured security levels, affecting LMSACE Connect versions up to 3.4. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U...

CVE-2025-29007 WordPress LMSACE Connect plugin <= 3.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in LMSACE LMSACE Connect lmsace-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LMSACE Connect: from n/a through = 3.4...

BIT-APISIX-2025-46647 Apache APISIX: improper validation of issuer from introspection discovery url in plugin openid-connect

A vulnerability of plugin openid-connect in Apache APISIX. This vulnerability will only have an impact if all of the following conditions are met: 1. Use the openid-connect plugin with introspection mode 2. The auth service connected to openid-connect provides services to multiple issuers 3...

WordPress plugin Click & Pledge Connect SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

WordPress plugin LMSACE Connect 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2025-15499)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which stems from the connect-src directive can be bypassed, and can be exploited by attackers to bypass security restrictions...

PT-2025-27905 · Click & Pledge · Click & Pledge Connect

Name of the Vulnerable Software and Affected Versions: Click & Pledge Connect versions 25.04010101 through WP6.8 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for privilege escalation...

PT-2025-27883 · Unknown · Lmsace Connect

Name of the Vulnerable Software and Affected Versions: LMSACE Connect versions n/d through 3.4 Description: The issue is related to a lack of authorization in LMSACE Connect, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For versions n/d...

CVE-2025-46647

A vulnerability of plugin openid-connect in Apache APISIX. This vulnerability will only have an impact if all of the following conditions are met: 1. Use the openid-connect plugin with introspection mode 2. The auth service connected to openid-connect provides services to multiple issuers 3...