CVE-2025-32834

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateConnectionVariablesWithImport' method. This could allow an authenticated remote attacker to bypass authorization...

EasyVirt DC Scope和EasyVirt CO2 Scope SQL注入漏洞

EasyVirt DC Scope and EasyVirt CO2 Scope are both products of EasyVirt France.EasyVirt DC Scope is a monitoring and management solution for VMware Virtualization VMware.EasyVirt CO2 Scope is a real-time monitoring and control solution of CO2 emissions of IT services, virtual machines and servers ...

Silenzio: Secure Non-Interactive Outsourced MLP Training

Outsourcing the ML training to cloud providers presents a compelling opportunity for resource constrained clients, while it simultaneously bears inherent privacy risks, especially for highly sensitive training data. We introduce Silenzio, the first fully non-interactive outsourcing scheme for the...

Commvault Command Center Innovation Release 11.38 Remote Code Execution

Commvault Command Center Innovation Release version 11.38 proof of concept pre-authentication remote code execution exploit...

CVE-2025-27907

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2025-23176

CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

WordPress wProject theme < 5.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Theme wProject versions 5.8.0...

WordPress plugin Link Library 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

METTLER TOLEDO FreeWeight.Net 安全漏洞

METTLER TOLEDO FreeWeight.Net is a weighing management software from METTLER TOLEDO USA. A security vulnerability exists in METTLER TOLEDO FreeWeight.Net version 8.4.0, which originates from reflective cross-site scripting and could lead to the injection of malicious script...

CLSA-2025-1745270908 pixman: Fix of CVE-2022-44638

CVE-2022-44638: fix out-of-bounds write in rasterizeedges8...

Yi IOT XY-3820 安全漏洞

Yi IOT XY-3820 is a wireless security camera from Yi IOT. A security vulnerability exists in the Yi IOT XY-3820 version v6.0.24.10, which stems from a lack of input validation of a TCP service exposed by the daemon on port 6789, which could lead to the execution of arbitrary scripts on the device...

DEBIAN-CVE-2025-38152

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Clear tablesz when rprocshutdown There is case as below could trigger kernel dump: Use U-Boot to start remote processorrproc with resource table published to a fixed address by rproc. After Kernel boots up, stop...

CVE-2025-38152 remoteproc: core: Clear table_sz when rproc_shutdown

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Clear tablesz when rprocshutdown There is case as below could trigger kernel dump: Use U-Boot to start remote processorrproc with resource table published to a fixed address by rproc. After Kernel boots up, stop...

Q-FAKER: Query-Free Hard Black-Box Attack Via Controlled Generation

Many adversarial attack approaches are proposed to verify the vulnerability of language models. However, they require numerous queries and the information on the target model. Even black-box attack methods also require the target model's output information. They are not applicable in real-world...

CLSA-2025-1744926275 libsoup: Fix of CVE-2024-52531

CVE-2024-52531: fix buffer overflow caused by conversion to UTF-8...

CLSA-2025-1744924875 libsoup: Fix of CVE-2024-52531

CVE-2024-52531: fix buffer overflow caused by conversion to UTF-8...

CVE-2025-39437 WordPress Anthologize plugin <= 0.8.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Boone Gorges Anthologize allows Cross Site Request Forgery. This issue affects Anthologize: from n/a through 0.8.3...

webkit2gtk3 security update

2.48.1-1 - Update to 2.48.1...

WordPress plugin Dashi 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin Credova_Financial 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...