25771 matches found
CVE-2025-44139: Unrestricted Upload of File with Dangerous Type
Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=uploadzip...
Using LLMs as a reverse engineering sidekick
This research explores how large language models LLMs can complement, rather than replace, the efforts of malware analysts in the complex field of reverse engineering. LLMs may serve as powerful assistants to streamline workflows, enhance efficiency, and provide actionable insights during malware...
CVE-2025-43018
Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book...
CVE-2025-43018
Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book...
CVE-2025-43018 Certain HP LaserJet Pro Printers – Potential Information Disclosure
Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book...
CVE-2025-43018
CVE-2025-43018 affects HP LaserJet Pro printers and related HI-HP devices exposing information via the device’s local address book when queried by a non-authenticated user. The vulnerability is categorized as information disclosure with a CVSSv4 base score of 6.9 (NETWORK, LOW attack complexity, ...
WordPress Station Pro Cross-Site Scripting Vulnerability
WordPress Station Pro is a plugin designed for the WordPress platform, mainly used to enhance the functionality of the website and provide audio streaming management solutions. WordPress Station Pro suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and...
HP LaserJet Pro security vulnerabilities
HP LaserJet Pro is a line of laser printers and MFPs from Hewlett-Packard HP in the United States. A security vulnerability exists in the HP LaserJet Pro that stems from an information disclosure issue that could cause a non-authenticated user to query the device's local address book...
Certain HP LaserJet Pro Printers – Potential Information Disclosure
Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book. Update your printer firmware...
CVE-2025-43018: Exposure of Sensitive Information to an Unauthorized Actor
Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book...
About the security content of visionOS 2.6
About the security content of visionOS 2.6 This document describes the security content of visionOS 2.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...
HP Officejet Pro 8500 Cross-site Scripting (CVE-2013-4845)
Cross-site scripting XSS vulnerability on HP Officejet Pro 8500 aka A909 All-in-One printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more informatio...
HP OfficeJet Pro Printers Denial of Service (CVE-2023-4694)
Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when sending a SOAP message to the service on TCP port 3911 that contains a body but no header. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
CVE-2025-7959
The Station Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width' and 'height’ parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-lev...
CVE-2025-7959 Station Pro <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via width and height Parameters
The Station Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width' and 'height’ parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-lev...
CVE-2025-7959
CVE-2025-7959 concerns the Station Pro plugin for WordPress, which is vulnerable to a Stored Cross-Site Scripting (XSS) flaw via the width and height parameters in all versions up to and including 2.4.2. The vulnerability requires an attacker with at least Contributor access to inject script that...
PT-2025-30659 · WordPress · Station Pro
Name of the Vulnerable Software and Affected Versions: Station Pro plugin for WordPress versions through 2.4.2 Description: The Station Pro plugin for WordPress is susceptible to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated...
WordPress Plugin Station Pro has a cross-site scripting vulnerability
WordPress Station Pro is a plugin designed for the WordPress platform, mainly used to enhance the functionality of the website and provide audio streaming management solutions. WordPress Station Pro suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and...
CVE-2025-7959: Improper Neutralization of Input During Web Page Generation
The Station Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width' and 'height’ parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-lev...