Exploit for CVE-2025-26264

CVE-2025-26264 CVE-2025-26264 - GeoVision GV-ASWeb with the ve...

Amazon Linux 2 : ghostscript (ALAS-2025-2760)

The version of ghostscript installed on the remote host is prior to 9.54.0-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2760 advisory. PS interpreter - check Indexed colour space index NOTE: https://bugs.ghostscript.com/showbug.cgi?id=707990NOTE:...

PT-2025-8673 · WordPress · Post Timeline Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Post Timeline WordPress plugin versions prior to 2.3.10 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page...

AZL-57327 CVE-2025-26598 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-1

An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching...

PT-2025-7850 · Booknetic · Booknetic

Name of the Vulnerable Software and Affected Versions: Booknetic versions prior to 4.0.10 Description: A Cross-Site Request Forgery CSRF issue has been identified. This issue allows an attacker to trick a user into performing unintended actions on a web application. Recommendations: For versions...

Copyparty security vulnerabilities

Copyparty is a portable file server for ed individual developers. A security vulnerability exists in Copyparty versions prior to 1.16.15. An attacker exploiting this vulnerability could execute arbitrary javascript with the same privileges as the user...

ClickHouse < 19.13.5.44

The version of ClickHouse installed on the remote host is prior to 19.13.5.44. It is, therefore, affected by a HTTP header injection vulnerability via the url table function. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

PT-2025-7716 · Agito Computer · Health4All

Name of the Vulnerable Software and Affected Versions: Agito Computer Health4All versions prior to 10.01.2025 Description: The issue affects the access control security levels in Health4All, allowing exploitation due to incorrectly configured access control and potential authentication abuse...

PT-2025-7777 · Tawkto · Tawkto Widget

Name of the Vulnerable Software and Affected Versions: TawkTo Widget versions prior to 1.3.8 Description: The issue arises from the processing of user input in a way that allows JavaScript execution, leading to Cross Site Scripting XSS. Recommendations: For versions prior to 1.3.8, update to...

Opera Mini security vulnerabilities

Opera Mini is a web browser application from the Norwegian company Opera. A security vulnerability exists in Opera Mini versions prior to 52.2, which originates from a susceptibility to an address bar spoofing attack that allows a malicious page to impersonate another page and trick users into...

CVE-2024-7141

Gliffy Online is affected by a CSRF vulnerability tracked as CVE-2024-7141 in versions prior to 4.14.0-7. The issue arises in the web application’s handling of requests that can be forged by an authenticated user. The connected records confirm affected software and indicate a fix in version 4.14....

WordPress Filebird plugin < 5.6.1 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ninjateam:filebird"; ifdescription...

mysql: MySQL Server: Denial of Service (DoS) via network access by a high privileged attacker

A flaw was found in the MySQL Server product of Oracle MySQL. This vulnerability allows a remote attacker to cause a denial of service DoS...

mysql: InnoDB unspecified vulnerability (CPU Jan 2025)

A flaw was found in the MySQL Server product of Oracle MySQL. This vulnerability allows a remote attacker to cause a denial of service DoS...

PT-2025-7366 · WordPress · Small Package Quotes – Worldwide Express Edition

Name of the Vulnerable Software and Affected Versions: Small Package Quotes – Worldwide Express Edition plugin for WordPress versions prior to 5.2.19 Description: The issue concerns SQL injection via the edit id and dropship edit id parameters due to insufficient escaping on the user-supplied...

Lexmark MX6500 security vulnerabilities

The Lexmark MX6500 is a multifunction composite device printer from Lexmark, Inc. A security vulnerability exists in the Lexmark MX6500 LW75.JD.P296 and prior versions that stems from improper access control...

Barebox security vulnerabilities

Barebox is a versatile and flexible bootloader from the Barebox open source. A security vulnerability exists in Barebox versions prior to 2025.01.0, which stems from an integer overflow in ext4fsreadsymlink that results in a memory overwrite...

WordPress plugin Visualizer has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

PT-2025-7202 · Vim +5 · Vim +5

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.1.1115 Description: The issue arises when redirecting the output of the :display command to a register that is being displayed, leading to a use-after-free. This occurs because Vim frees the register content before...

Vim resource management error vulnerability

Vim is a cross-platform text editor open-sourced by Vim. A resource management error vulnerability exists in Vim versions prior to 9.1.1115, which stems from memory reuse after release...