CVE-2025-59368

An integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may trigger this vulnerability by sending a crafted request, potentially impacting the availability of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security...

CVE-2025-12587 Peer Publish <= 1.0 - Cross-Site Request Forgery

The Peer Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the website management pages. This makes it possible for unauthenticated attackers to add, modify, or delete website configuratio...

CVE-2025-13386 Social Images Widget <= 2.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Deletion

The Social Images Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'optionsupdate' function in all versions up to, and including, 2.1. This makes it possible for unauthenticated attackers to delete the plugin's settings via a...

CVE-2025-13386

CVE-2025-13386 affects the WordPress plugin Social Images Widget (WordPress) up to version 2.1. The issue is a missing capability check in the options_update function, enabling unauthenticated attackers to delete or modify the plugin’s settings via a forged request and social engineering (trickin...

EUVD-2025-199574

The Social Images Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'optionsupdate' function in all versions up to, and including, 2.1. This makes it possible for unauthenticated attackers to delete the plugin's settings via a...

CVE-2025-12586 Conditional Maintenance Mode for WordPress <= 1.0.0 - Cross-Site Request Forgery

The Conditional Maintenance Mode for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing nonce validation when toggling the maintenance mode status. This makes it possible for unauthenticated attackers to...

CVE-2025-59365

CVE-2025-59365 corresponds to a stack buffer overflow in ASUS Router firmware affecting certain router models. According to PT-2025-48016, the issue is triggered by an authenticated attacker sending a specially crafted request, potentially causing a denial of service and impacting device availabi...

CVE-2025-59365

A stack buffer overflow vulnerability has been identified in certain router models. An authenticated attacker may trigger this vulnerability by sending a crafted request, potentially impacting the availability of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the...

Scam Alert: Impersonation of Akamai on Telegram

Learn about a persisting scam on Telegram that involves scammers who are pretending to be from Akamai and requesting money...

CVE-2025-64063

The Primakon Pi Portal version 1.0.18 contains a vulnerability where API endpoints fail to enforce sufficient authorization checks. By sending direct HTTP requests to administrative endpoints, a standard user can bypass UI restrictions to perform Unauthorized Account modification (including delet...

The vulnerability of Arduino software for microcontroller boards, such as Arduino-ESP32, related to the manipulation of inter-site requests, allows a hacker to execute arbitrary code.

The vulnerability of Arduino software for microcontroller boards, such as Arduino-ESP32, is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20251125-02

A vulnerability in the Apache MINA open source Java network application environment is related to an infinite loop in the processing of HTTP requests. loop when processing HTTP requests. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. remote...

PT-2025-48071

Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard user can exploit this flaw by sending direct HTTP requests to administrative endpoints, bypassing the UI restrictions. This allows the attacker to manipulate...

PT-2025-48016

Name of the Vulnerable Software and Affected Versions ASUS Router Firmware affected versions not specified Description A stack buffer overflow condition exists in certain router models. An authenticated attacker can trigger this issue by sending a specially crafted request, which may lead to a...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the NnssfNSSAIAvailability API when processing crafted POST requests. An attacker can disrupt service availability by sending specially crafted requests. Details Denial of Service DoS describes a family of...

Improper Check or Handling of Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions via the NpcfBDTPolicyControl API when processing crafted POST requests. An attacker can disrupt service availability by sending specially crafted requests. Remediation Upgrade...

Improper Check or Handling of Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions via the NpcfBDTPolicyControl API when processing crafted POST requests. An attacker can disrupt service availability by sending specially crafted requests. Remediation Upgrade...

Server-Side Request Forgery (SSRF)

vllm is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient restrictions on user-supplied URLs in the MediaConnector class’s loadfromurl and loadfromurlasync methods, which allows an attacker to coerce the server into making arbitrary internal network requests...

The vulnerability of the sub_44797C() function in D-Link DIR-822K and DWR-M920 router microprogramming systems allows a hacker to execute arbitrary code.

The vulnerability of the sub44797C function in D-Link DIR-822K and DWR-M920 router microprogramming systems is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially...

CVE-2025-54515

The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A processors TF-A for Arm’s Power State Coordination Interface PSCI commands were incorrectly set to secure instead of using the processor’s actual security state. This would allow the PSCI requests to appear they were...