CVE-2025-62868 WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Edge-Themes Edge CPT allows PHP Local File Inclusion.This issue affects Edge CPT: from n/a through 1.4...

PT-2025-43603

Name of the Vulnerable Software and Affected Versions Edge CPT versions through 1.4 Description An improper control of filename for include/require statement exists in Edge CPT, leading to a PHP Local File Inclusion issue. This allows for the inclusion of local files within the application...

Arista Edge Threat Management - Arista Next Generation Firewall Versions 安全漏洞

Arista Edge Threat Management - Arista Next Generation Firewall Versions is a next-generation firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall Versions that stems from a diagnostic command injection flaw...

PT-2025-45396

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in Google Chrome that could allow attackers to impact the system. The issue is related to an inappropriate implementation in V8. Microsoft Edge, being Chromium-based, is...

Arista Edge Threat Management - Arista Next Generation Firewall Versions 安全漏洞

Arista Edge Threat Management - Arista Next Generation Firewall Versions is a next-generation firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall Versions, which stems from a Captive Portal that could expose sensitive...

Arista Edge Threat Management - Arista Next Generation Firewall Versions 安全漏洞

Arista Edge Threat Management - Arista Next Generation Firewall Versions is a next-generation firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall Versions, which stems from improper authentication, where Captive Portal may...

Malicious code in bcrypt-js-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca5605febed4ebf8f03746e572ca1fb05186ff2714f0f1c34842fc4858f9fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35142

Malicious code in bcrypt-js-edge npm...

Malicious Package

Overview bcrypt-js-edge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48530 Malicious code in bcrypt-js-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca5605febed4ebf8f03746e572ca1fb05186ff2714f0f1c34842fc4858f9fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Advisory 0123

Security Advisory 0123 PDF Date: October 21, 2025 Revision | Date | Changes ---|---|--- 1.0 | October 21, 2025 | Initial release Description Several vulnerabilities exist for the Arista Edge Threat Management - Arista NG Firewall NGFW: 1 Description : Captive Portal can expose sensitive informati...

The vulnerability of the Tab component in Microsoft Edge and Google Chrome browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Tab component in Microsoft Edge and Google Chrome relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Microsoft Edge (Chromium-Based) Use after free Vulnerability (Oct 2025)

Microsoft Edge Chromium-Based is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

JLSEC-2025-131 FFmpeg v.n6.1-3-g466799d4f5 allows a heap-based buffer overflow via the `ff_gaussian_blur_8`...

FFmpeg v.n6.1-3-g466799d4f5 allows a heap-based buffer overflow via the ffgaussianblur8 function in libavfilter/edgetemplate.c:116:5 component...

Microsoft Edge (Chromium) < 141.0.3537.85 (CVE-2025-11756)

The version of Microsoft Edge installed on the remote Windows host is prior to 141.0.3537.85. It is, therefore, affected by a vulnerability as referenced in the October 17, 2025 advisory. - Use after free in Safe Browsing. CVE-2025-11756 Note that Nessus has not tested for this issue but has...

Chromium: CVE-2025-11756 Use after free in Safe Browsing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Under the engineering hood: Why Malwarebytes chose WordPress as its CMS

It might surprise some that a security company would choose WordPress as the backbone of its digital content operations. After all, WordPress is often associated with open-source plugins, community themes, and a wide range of deployment practices—some stronger than others. But that perception...

KLA89353 ACE vulnerability in Microsoft Browser

Use-after-free vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-11756 Related products Microsoft-Edge CVE list CVE-2025-11756 critical KB list Solution Install necessary updates from the KB section...

Siemens Solid Edge Multiple Vulnerabilities (SSA-541582)

The version of Siemens Solid Edge installed on the remote Windows host is prior to SE2024 V224.0 Update 14 or SE2025 V225.0 Update 6. It is, therefore, affected by multiple vulnerabilities as disclosed in the SSA-541582 vendor advisory: - The affected applications contains an out of bounds write...

EUVD-2025-34820

Envoy is a cloud-native, open source edge and service proxy. Prior to 1.36.1, 1.35.5, 1.34.9, and 1.33.10, large requests and responses can potentially trigger TCP connection pool crashes due to flow control management in Envoy. It will happen when the connection is closing but upstream data is...