CVE-2025-3631

An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it...

IBM Analytics Content Hub 安全漏洞

IBM Analytics Content Hub is a clean streaming experience from International Business Machines IBM that visualizes relevant analytics by extracting content from IBM and other analytics providers. A security vulnerability exists in IBM Analytics Content Hub versions 2.0, 2.1, 2.2, and 2.3 that ste...

IBM Analytics Content Hub 安全漏洞

IBM Analytics Content Hub is a clean streaming experience from International Business Machines IBM that visualizes relevant analytics by extracting content from IBM and other analytics providers. A security vulnerability exists in IBM Analytics Content Hub versions 2.0, 2.1, 2.2, and 2.3, which...

📄 Schneider Electric EcoStruxure IT Data Center Expert 8.3 Server-Side Request Forgery

Schneider Electric EcoStruxure IT Data Center Expert versions 8.3 and below insecurely forward HTTP requests based on user-controlled values, enabling an unauthenticated user to coerce the web application into sending data to arbitrary locations, such as the SMTP service listening on localhost...

IBM OpenPages with Watson 安全漏洞

IBM OpenPages with Watson is an AI-powered financial risk analytics solution from International Business Machines IBM. The platform is based on AI technology to predict risk factors and minimize risk in financial activities by integrating, automatically identifying, measuring, monitoring,...

Nimesa Backup and Recovery 操作系统命令注入漏洞

Nimesa Backup and Recovery is a data backup and recovery software from Nimesa India. An operating system command injection vulnerability exists in Nimesa Backup and Recovery version v2.3 and v2.4, which stems from the presence of an OS command injection vulnerability that could lead to the...

bluebell-plus 安全漏洞

bluebell-plus is a blog forum web project by ChaoHu personal developer. A security vulnerability exists in bluebell-plus version 2.3.0 and earlier, which stems from the use of a hard-coded password for the parameter mySecret in the bluebellbackend/pkg/jwt/jwt.go file...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to improper input sanitization. An attacker can execute arbitrary code by submitting specially crafted serialized data. Details Serialization is a process of converting an object into a sequence of...

PT-2025-44651

Name of the Vulnerable Software and Affected Versions versions prior to 2.3 Description A performance degradation can occur when expanding environment variables using the os.path.expandvars function if the value passed to it is user-controlled. The function os.path.expandvars is susceptible to th...

CVE-2025-47819

Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control...

WordPress plugin MBStore - Digital WooCommerce WordPress Theme Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Evangelische Termine 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions in the process that handles file uploads and database creation. An attacker can gain unauthorized access to sensitive files by leveraging default file permissions that allow any operating system account to...

CVE-2025-6378

The Responsive Food and Drink Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's displaypdfmenus shortcode in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

WordPress plugin Responsive Food and Drink Menu 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress Simple User Registration 6.3 Privilege Escalation

WordPress Simple User Registration plugin versions 6.3 and below suffer from an unauthenticated privilege escalation vulnerability. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated attackers to regist...

WordPress Davenport - Versatile Blog and Magazine WordPress Theme <= 1.3 - Local File Inclusion Vulnerability

WordPress Davenport - Versatile Blog and Magazine WordPress Theme = 1.3 - Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh in WordPress Plugin Davenport - Versatile Blog and Magazine WordPress Theme versions = 1.3...

CVE-2025-50044

CVE-2025-50044: A CSRF vulnerability in the WordPress Real Estate Manager plugin affects versions n/a through 7.3. The issue stems from CSRF, enabling unauthorized actions on behalf of an authenticated user. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) yields a base score of 6.5 (Med...

WordPress Easy Social plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Easy Social versions = 1.3...

CVE-2025-45661

A cross-site scripting XSS vulnerability in miniTCG v1.3.1 beta allows attackers to execute abritrary web scripts or HTML via injecting a crafted payload into the id parameter at /members/edit.php...