25591 matches found
CVE-2025-63953
Magewell Pro Convert version 1.2.213 (also identified as Magewell Ultra Encode) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /usapi?method=add-user component, where the method parameter can be manipulated. An attacker can exploit this by sending a crafted GET requ...
CVE-2025-7402: Improper Neutralization of Special Elements used in an SQL Command
The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘siteid’ parameter in all versions up to, and including, 4.95 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...
CVE-2025-63952
Magewell Pro Convert version 1.2.213 (also referred to as Magewell Ultra Encode) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /mwapi?method=add-user component, where an attacker can arbitrarily create accounts by sending a specially crafted GET request . Remediati...
CVE-2025-63952
A Cross-Site Request Forgery CSRF in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request...
WordPress plugin Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...
PT-2025-47944
Name of the Vulnerable Software and Affected Versions Magewell Pro Convert version 1.2.213 Description A Cross-Site Request Forgery CSRF exists in the /usapi?method=add-user component. This allows attackers to create accounts by sending a specially crafted GET request. The API endpoint...
CVE-2025-63953
A Cross-Site Request Forgery CSRF in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request...
CVE-2025-63953
A Cross-Site Request Forgery CSRF in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request...
CVE-2025-63952: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request...
CVE-2025-63952
A Cross-Site Request Forgery CSRF in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request...
CVE-2025-63953: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request...
CVE-2025-12056
Out-of-bounds Read in Shelly Pro 3EM before v1.4.4 allows Overread Buffers...
CISA Releases Six Industrial Control Systems Advisories
CISA released six Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-324-01 Automated Logic WebCTRL Premium Server ICSA-25-324-02 ICAM365 CCTV Camera Multiple Models...
Emerson Appleton UPSMON-PRO
RISK EVALUATION Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on affected installations of Appleton UPSMON-PRO. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...
HP LaserJet Pro Printers Information Disclosure (HPSBPI04074)
Certain HP LaserJet Pro print products is potentially vulnerable to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
Tenda N300 Wi-Fi 4G LTE Router 4G03 Pro impacted by vulnerabilities
Overview A command injection vulnerability exists across multiple firmware versions that allows an attacker to execute arbitrary commands as root on the affected device. Currently, no solution exists to resolve these vulnerabilities in the Tenda N300 series and Tenda 4G03 Pro devices. Description...
EUVD-2025-198138
Out-of-bounds Read in Shelly Pro 3EM before v1.4.4 allows Overread Buffers...
EUVD-2025-198137
Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM before v1.6 allows Excessive Allocation via network...
