Cursor 安全漏洞

Cursor is an AI code editor from Cursor Open Source. A security vulnerability exists in Cursor 1.7 and earlier versions that stems from inadequate protection of sensitive files and could lead to remote code execution...

Redis 输入验证错误漏洞

Redis is an open source, ANSI C, web-enabled, memory-based and persistent logging, key-value Key-Value storage database from Redis, Inc. that provides APIs in multiple languages. An input validation error vulnerability exists in Redis 8.2.1 and earlier versions, which stems from a specially craft...

CVE-2025-61690

KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

CVE-2025-61690

KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

KEYENCE KV STUDIO 安全漏洞

KEYENCE KV STUDIO is a PLC programming and debugging software from KEYENCE Japan. A security vulnerability exists in KEYENCE KV STUDIO version 12.23 and earlier, which originates from a stack buffer overflow and could lead to the execution of arbitrary code...

CVE-2025-11153

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox 143.0.3...

CVE-2025-11153 JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3...

CVE-2025-59950 FreshRSS: Double clickjacking can lead to privilege escalation

FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.3 and below, due to a bypass of double clickjacking protection confirmation dialog, it is possible to trick the admin into clicking the Promote button in another user's management page after the admin double clicks on a button...

CVE-2025-57875

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supply a crafted string which would execute arbitrary JavaScript code in the browser...

CVE-2025-57875

CVE-2025-57875 affects Esri Portal for ArcGIS

Go implementation of Fast Finality in Filecoin 输入验证错误漏洞

Go implementation of Fast Finality in Filecoin is an open source Golang library for Filecoin with a fast validation mechanism. An input validation error vulnerability exists in Go implementation of Fast Finality in Filecoin 0.8.6 and prior versions, which stems from an integer overflow when...

Bjskzy Zhiyou ERP 路径遍历漏洞

Bjskzy Zhiyou ERP is an Enterprise Resource Planning software from Bjskzy Beijing, China. A path traversal vulnerability exists in Bjskzy Zhiyou ERP 11.0 and earlier versions, which stems from the incorrect operation of the parameter filepath in the function uploadStudioFile in the component...

WordPress plugin Sync Feedly 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

CVE-2025-60129 WordPress Yext Plugin <= 1.1.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Yext Yext yext allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Yext: from n/a through = 1.1.3...

WordPress plugin TheGem 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

WordPress plugin Snow Monkey 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

openbabel 安全漏洞

openbabel is a chemistry toolkit software from Open Babel open source. A security vulnerability exists in openbabel 3.1.1 and earlier versions, which stems from a heap buffer overflow in the function OBSmilesParser::ParseSmiles in the file /src/formats/smilesformat.cpp, which could lead to a loca...

CVE-2025-56463

Mercusys MW305R routers with firmware version 3.30 and earlier are affected by a flaw that leads to TLS certificate private key disclosure. Root cause: an issue in the device firmware that allows private key exposure. Impact areas documented include confidentiality, integrity, and availability as...

WordPress plugin Post Featured Video 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

WordPress plugin ListingPro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...