OSV-2025-965 Stack-use-after-scope in Assimp::FBX::FBXExportProperty::FBXExportProperty

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=465494996 Crash type: Stack-use-after-scope READ 1 Crash state: Assimp::FBX::FBXExportProperty::FBXExportProperty Assimp::FBX::FBXExportProperty std::1::vectorAssimp::FBX::FBXExportProperty, Assimp::FBXExporter::WriteObjects...

WordPress Export All Posts, Products, Orders, Refunds & Users plugin <= 2.19 - Cross-Site Request Forgery to Sensitive Information Exposure vulnerability

Cross-Site Request Forgery to Sensitive Information Exposure vulnerability discovered by luckybuddy in WordPress Plugin WP Ultimate Exporter versions = 2.19...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, jitsucom-bulker, grafana-alloy, argo-events, bento, cluster-api-aws-controller, opentelemetry-collector-contrib, sqlexporter, amazon-cloudwatch-agent...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, sqlexporter-fips, cluster-api-aws-controller, jitsucom-bulker, opentelemetry-collector-contrib, telegraf, argo-events, amazon-cloudwatch-agent, argo-events-fips, dapr-fips, bento, dapr, splunk-otel-collector, vault-fips, vault,...

EUVD-2025-197689

A vulnerability was found in D-Link DIR-816L 206b09beta. This vulnerability affects the function scandirmain of the file /portal/ajaxexporer.sgi. The manipulation of the argument en results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public a...

CVE-2025-13190

A vulnerability was found in D-Link DIR-816L 206b09beta. This vulnerability affects the function scandirmain of the file /portal/ajaxexporer.sgi. The manipulation of the argument en results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public a...

CVE-2025-60203

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

EUVD-2025-38112

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

CVE-2025-60203

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

CVE-2025-60203

The CVE-2025-60203 entry concerns the WordPress Store Exporter plugin (woocommerce-exporter) with a Local File Inclusion flaw caused by improper control of filenames for include/require statements. Affected are Store Exporter versions up to and including 2.7.6. The vulnerability enables PHP Local...

CVE-2025-60203 WordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

CVE-2025-60203 WordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

PT-2025-45276

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

WordPress plugin Store Exporter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, pvc-autoresizer, wait-for-port, crossplane, render-template, docker-credential-gcr, kafka-proxy, gops, regclient, iptables-wrappers, kubevela, renovate, docker-machine-driver-harvester, shfmt, kubernetes-csi-external-attacher,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, pvc-autoresizer, wait-for-port, crossplane, render-template, docker-credential-gcr, kafka-proxy, gops, regclient, iptables-wrappers, kubevela, renovate, docker-machine-driver-harvester, shfmt, kubernetes-csi-external-attacher,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, pvc-autoresizer, wait-for-port, crossplane, render-template, docker-credential-gcr, kafka-proxy, gops, regclient, iptables-wrappers, kubevela, renovate, docker-machine-driver-harvester, shfmt, kubernetes-csi-external-attacher,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, pvc-autoresizer, wait-for-port, crossplane, render-template, docker-credential-gcr, kafka-proxy, gops, regclient, iptables-wrappers, kubevela, renovate, docker-machine-driver-harvester, shfmt, kubernetes-csi-external-attacher,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, pvc-autoresizer, wait-for-port, crossplane, render-template, docker-credential-gcr, kafka-proxy, gops, regclient, iptables-wrappers, kubevela, renovate, docker-machine-driver-harvester, shfmt, kubernetes-csi-external-attacher,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, pvc-autoresizer, wait-for-port, crossplane, render-template, docker-credential-gcr, kafka-proxy, gops, regclient, iptables-wrappers, kubevela, renovate, docker-machine-driver-harvester, shfmt, kubernetes-csi-external-attacher,...