PT-2025-16134 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: Mediawiki - AJAX Poll Extension versions 1.39 through 1.43 Description: The issue is related to Improper Input Validation, which allows Cross-Site Scripting XSS in the Mediawiki - AJAX Poll Extension. Recommendations: For versions 1.39 throug...

WordPress plugin WP Table Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

PT-2025-16131 · Mediawiki · Growthexperiments Extension For Mediawiki

Name of the Vulnerable Software and Affected Versions: Mediawiki - Growth Experiments Extension versions 1.39 through 1.43 Description: The issue is related to Improper Input Validation in the Mediawiki - Growth Experiments Extension, which allows Cross-Site Scripting XSS. Recommendations: For...

WordPress plugin RestroPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Apache POI < 5.4.0 Improper Input Validation

The version of Apache POI installed on the remote host is a version prior to 5.4.0. It is, therefore, affected by an improper input validation vulnerability. The issue affects the parsing of OOXML format files like xlsx, docx, and pptx. These file formats are essentially zip files, and it is...

Adobe ColdFusion 2021.x < 2021u19 / 2023.x < 2023u13 / 2025.x < 2025u1 Multiple Vulnerabilities (APSB25-15)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2021.x update 19, 2023.x update 13, or 2025.x update 1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-15 advisory. - Improper Authentication CWE-287 potentially leading to Arbitra...

PT-2025-16133 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: Mediawiki - Wikibase Media Info Extension versions 1.39 through 1.43 Description: The issue is related to Improper Input Validation, which allows Cross-Site Scripting XSS. This exposes systems to XSS risk. Recommendations: For versions 1.39...

ABB Cylon FLXeon 9.3.4 - Remote Code Execution (Authenticated)

Exploit Title: ABB Cylon FLXeon 9.3.4 - Remote Code Execution Authenticated Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: FLXeon Series FBXi Series, FBTi Series, FBVi Series CBX Series FLX Series CBT Series CBV Series Firmware: =9.3.4 Summary: BACnet® Smart Building...

Security Updates for Microsoft Dynamics 365 Business Central (April 2025)

The Microsoft Dynamics 365 Business Central install is missing security updates. It is, therefore, affected by a information disclosure vulnerability. Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally. Note that Nessus has not...

CVE-2025-24446

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution. Exploitation of this issue does not require user interaction, but admin panel privileges are required, and scope is changed...

CVE-2025-3469

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fields/HTMLMultiSelectField.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6,...

CVE-2025-24060

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2025-32198

CVE-2025-32198 is a Cross-site Scripting issue in Brizy (Brizy – Page Builder). Affected: Brizy versions up to 2.6.14 (per CVE description); root cause is Improper Neutralization of Input During Web Page Generation. Impact as described: potential for script execution in the context of a victim’s ...

PT-2025-15937 · Brizy · Brizy

Name of the Vulnerable Software and Affected Versions: Brizy versions n/a through 2.6.14 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for the injection of malicious scripts into web pages. No...

CVE-2025-30648

An Improper Input Validation vulnerability in the Juniper DHCP Daemon jdhcpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause the jdhcpd process to crash resulting in a Denial of Service DoS. When a specifically malformed DHCP packet is...

CVE-2025-30649

An Improper Input Validation vulnerability in the syslog stream TCP transport of Juniper Networks Junos OS on MX240, MX480 and MX960 devices with MX-SPC3 Security Services Card allows an unauthenticated, network-based attacker, to send specific spoofed packets to cause a CPU Denial of Service DoS...

CVE-2025-30648 Junos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhcpd process to crash

An Improper Input Validation vulnerability in the Juniper DHCP Daemon jdhcpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause the jdhcpd process to crash resulting in a Denial of Service DoS. When a specifically malformed DHCP packet is...

CVE-2025-30648

Summary: CVE-2025-30648 affects Juniper Networks Junos OS and Junos OS Evolved. An Improper Input Validation in the Juniper DHCP Daemon (jdhcpd) allows an unauthenticated, adjacent attacker to crash the jdhcpd when it receives a specifically malformed DHCP packet, causing a Denial of Service (DoS...

CVE-2025-32488

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in آریا وردپرس Aria Font aria-font allows Stored XSS.This issue affects Aria Font: from n/a through = 1.4...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.7.

Summary In addition to updates of open source dependencies, the following security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.7. Vulnerability Details CVEID:CVE-2024-7254 DESCRIPTION: Any project that parses untrusted Protocol Buffers data containing an...