20329 matches found
WordPress File Manager Pro plugin <= 1.8.9 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by tiborisaak in WordPress Plugin File Manager Pro versions = 1.8.9...
WordPress Tutor LMS Pro plugin <= 3.7.0 - Authenticated (Tutor Instructor+) SQL Injection vulnerability
Authenticated Tutor Instructor+ SQL Injection vulnerability discovered by sergioframi in WordPress Plugin Tutor LMS Pro versions = 3.7.0...
PT-2025-32627 · Axis Communications · Axis Camera Station Pro
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: An internal security assessment revealed a Server-Side Request Forgery SSRF issue. An authenticated attacker could exploit this to access internal resources o...
Hive Pro’s Gartner Recognition in the Hype Cycle for Security Operations 2025: What It Means for Security Leaders and the Future of Cybersecurity
Cybersecurity is a race against time, threat actors and attacks. And the industry’s wish has also come true, cybersecurity is becoming a boardroom conversation requiring more of the CISO’s attention. On the other hand, regulatory pressures, expanding attack surfaces, and relentless adversaries...
Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape
Titles: Microsoft Edge Renderer Process Mojo IPC 134.0.6998.177 - Sandbox Escape Author: nu11secur1ty Date: 08/07/2025 Vendor: Microsoft Software: https://www.microsoft.com/en-us/software-download/windows11 Reference: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49730...
CVE-2025-8705
A vulnerability, which was classified as critical, was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. Affected is an unknown function of the file /WEASHomePage/GetTargetConfig of the component Energy Overview Module. The manipulation of the argument BPProID leads to sql...
CVE-2025-8705 Wanzhou WOES Intelligent Optimization Energy Saving System Energy Overview Module GetTargetConfig sql injection
A vulnerability, which was classified as critical, was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. Affected is an unknown function of the file /WEASHomePage/GetTargetConfig of the component Energy Overview Module. The manipulation of the argument BPProID leads to sql...
The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the possibility of an out-of-buffer operation, which allows attackers to trigger a service failure.
The vulnerability of PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO programs relates to the execution of operations outside the buffer during the processing of EMF files. Exploiting this vulnerability can allow an attacker to cause service interruptions...
HP LaserJet Pro Printers Information Disclosure (HPSBPI04040)
Certain HP LaserJet Pro print products is potentially vulnerable to information disclosure when a non-authenticated user queries a deviceâs local address book. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
CVE-2025-55077
Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating system commands within the remote Microsoft Windows environment with the privileges of the authenticated user. Tyler Technologies deployed hardened remote Windows environment...
CVE-2025-55077 Tyler Technologies ERP Pro 9 SaaS application escape
Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating system commands within the remote Microsoft Windows environment with the privileges of the authenticated user. Tyler Technologies deployed hardened remote Windows environment...
CVE-2025-55077
Tyler Technologies ERP Pro 9 SaaS is affected by CVE-2025-55077, where an authenticated user can escape the application and run limited operating system commands in the remote Windows environment with their own privileges. The available sources describe the vulnerability without explicit technica...
PT-2025-32306 · Microsoft +1 · Windows +1
Name of the Vulnerable Software and Affected Versions: Tyler Technologies ERP Pro 9 SaaS affected versions not specified Description: The software allows an authenticated user to escape the application and execute limited operating system commands within the remote Microsoft Windows environment...
Introducing: The Metasploit Pro AD CS Metamodule
Introducing the AD CS Workflows MetaModule: Now Generally Available in Metasploit Pro We're excited to announce that the AD CS Workflows MetaModule has officially moved from early access to general availability in Metasploit Pro! This powerful new feature represents a significant advancement in...
BlazeVideo HDTV Player Pro 安全漏洞
BlazeVideo HDTV Player Pro is a video player from BlazeVideo USA. A security vulnerability exists in BlazeVideo HDTV Player Pro version v6.6.0.3, which originates from improper handling of .plf file inputs and can lead to a buffer overflow and arbitrary code execution...
Ubiquiti多款产品 安全漏洞
Ubiquiti UniFi Access Reader and others are products of Ubiquiti, U.S.A. Ubiquiti UniFi Access Reader is an access control system viewer device.Ubiquiti UniFi Access Intercom is an intercom system device. Ubiquiti UniFi Access Reader Pro is a card reader and access control intercom device. A...
The vulnerability of the microprogrammed software of D-Link DIR-823-Pro wireless routers allows a intruder to gain unauthorized access to Telnet services.
The vulnerability of D-Link DIR-823-Pro wireless routers’ microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to Telnet services...
CVE-2025-44139
Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=uploadzip...