CVE-2025-14284

A flaw was found in @tiptap/extension-link. This vulnerability allows an attacker to execute arbitrary JavaScript JS code via unsanitized user input when setting or toggling links, by injecting a javascript: Uniform Resource Locator URL payload. Mitigation Mitigation for this issue is either not...

The vulnerability of the Setting Handler component in D-Link’s router microprogramming software for models DSR-150, DSR-150N, and DSR-250 allows a hacker to gain full access to these devices.

The vulnerability of the Setting Handler component in D-Link’s router microprogramming software, including the DSR-150, DSR-150N, and DSR-250 models, is related to insufficient protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full acces...