nixseparatedebuginfod 安全漏洞

nixseparatedebuginfod is a software debugger by the individual developer Guillaume Girol. A security vulnerability exists in nixseparatedebuginfod versions prior to 0.4.1, which originates from a directory traversal that may result in directory traversal...

PT-2025-53675

Name of the Vulnerable Software and Affected Versions Kings Information & Network Co. KESS Enterprise versions prior to 25.9.19.Exe Description A security issue exists in Kings Information & Network Co. KESS Enterprise on Windows that could allow an unauthorized actor to access sensitive...

WordPress plugin Plugin Optimizer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

CVE-2025-56333

An issue in Fossorial fosrl/pangolin (versions v.1.6.2 and before ) allows a remote attacker to escalate privileges through the two-factor authentication (2FA) component . The vulnerability is characterized by improper authentication (CWE-287). To remediate this issue, it is recommended to update...

PT-2025-53667

Name of the Vulnerable Software and Affected Versions h-moses moga-mall versions prior to 392d631a5ef15962a9bddeeb9f1269b9085473fa Description A vulnerability exists in h-moses moga-mall. The issue affects the addProduct function within the file...

PT-2025-53903

Name of the Vulnerable Software and Affected Versions HR Management Lite versions prior to 3.6 Description An incorrect access control configuration exists in Weblizar HR Management Lite, potentially allowing unauthorized access. The issue involves a missing authorization check. Recommendations...

PT-2025-53615

Name of the Vulnerable Software and Affected Versions NanoMQ versions prior to 0.24.2 Description NanoMQ MQTT Broker contains a data racing issue related to the sub info list, potentially leading to a heap use after free crash. Recommendations Update to version 0.24.2 or later...

CVE-2025-66203 StreamVault is Vulnerable to Authenticated Remote Code Execution (RCE) via ytdlpargs Configuration Injection

StreamVault is a video download integration solution. Prior to version 251126, a Remote Code Execution RCE vulnerability exists in the stream-vault application SpiritApplication. The application allows administrators to configure yt-dlp arguments via the /admin/api/saveConfig endpoint without...

PT-2025-53603

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.114.0 Description n8n is a workflow automation platform. A stored Cross-Site Scripting XSS issue may occur when using the “Respond to Webhook” node in versions before 1.114.0. If this node responds with HTML content...

CVE-2025-68942

Gitea before 1.22.2 allows XSS because the search input box for creating tags and branches is v-html instead of v-text...

Gitea 安全漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea versions prior to 1.22.5, which stems from insufficient execution of branch delete permissions after a merge pull request...

CVE-2025-2307 XSS in Verisay Communication's Aidango

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Aidango allows Cross-Site Scripting XSS. This issue affects Aidango: before 2.144.4...

CVE-2025-2405 XSS in Verisay Communication's Titarus

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Titarus allows Cross-Site Scripting XSS. This issue affects Titarus: before 2.144.4...

PT-2025-53402

Name of the Vulnerable Software and Affected Versions Aidango versions prior to 2.144.4 Description Aidango is susceptible to a Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. XSS occurs when an application includes malicious code in a web page...

PT-2025-53403

Name of the Vulnerable Software and Affected Versions Trizbi versions prior to 2.144.4 Description The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Cross-Site Scripting XSS. This means that malicious code can be injected into web pages...

PT-2025-53295

Name of the Vulnerable Software and Affected Versions Specto CM versions prior to 17032025 Description Specto CM is susceptible to a flaw involving unrestricted file uploads, potentially leading to Remote Code Inclusion. The issue stems from the ability to upload files without proper restrictions...

Fujitsu多款产品和Fsas多款产品 日志信息泄露漏洞

Fsas Technologies ETERNUS SF and others are products of Fsas Technologies, Japan.Fsas Technologies ETERNUS SF is a storage system replication and backup management software.Fujitsu ETERNUS SF ACM and others are products of Fujitsu, Japan. Fujitsu ETERNUS SF ACM is a data replication, backup, and...

Ecessa WANWorx WVR-30 跨站请求伪造漏洞

The Ecessa WANWorx WVR-30 is a software-defined WAN appliance from Ecessa Corporation, USA. A cross-site request forgery vulnerability exists in the Ecessa WANWorx WVR-30 versions prior to 10.7.4, which stems from susceptibility to a cross-site request forgery attack that could lead to the...

PT-2025-53241

Name of the Vulnerable Software and Affected Versions 6Storage versions prior to 2.20.0 Description A Server-Side Request Forgery SSRF vulnerability exists in 6Storage Rentals. This issue allows for Server Side Request Forgery. Recommendations Update 6Storage to version 2.20.0 or later...

CVE-2025-68669

CVE-2025-68669 affects 5ire, a cross-platform desktop AI assistant. In versions 0.15.2 and earlier, RCE is possible in useMarkdown.ts because the markdown-it-mermaid plugin is initialized with securityLevel: 'loose', which allows HTML in Mermaid diagram nodes. The issue has not been patched at pu...