PT-2025-49513

Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

Galaxy Software Services Vitals ESP 安全漏洞

Galaxy Software Services Vitals ESP is a knowledge management system for office use by Galaxy Software Services China. A security vulnerability exists in Galaxy Software Services Vitals ESP that originates from absolute path traversal and could lead to arbitrary file reading...

CVE-2025-14182 Sobey Media Convergence System upload path traversal

A vulnerability has been found in Sobey Media Convergence System 2.0/2.1. This vulnerability affects unknown code of the file /sobey-mchEditor/watermark/upload. The manipulation of the argument File leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2025-40282

creationtimestamp| type| source ---|---|--- 2025-12-06 22:43:58+00:00| seen| https://bsky.app/profile/potato.software/post/3m7e3a4mnbu2t 2025-12-06 23:34:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7e5zxqvzb2n 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-34264

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/dog/agentId endpoint. When an authenticated user adds or edits Software Watchdog process rules for an agent, the monitored process name is stored in the settings array and...

WordPress Ergonet Cache plugin <= 1.0.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Ergonet Cache versions = 1.0.13...

BELL-CVE-2025-40260

Bulletin has no description...

BELL-CVE-2025-40249

Bulletin has no description...

BELL-CVE-2025-40241

Bulletin has no description...

BELL-CVE-2025-40237

Bulletin has no description...

BELL-CVE-2025-40229

Bulletin has no description...

BELL-CVE-2025-40228

Bulletin has no description...

BELL-CVE-2025-40236

Bulletin has no description...

BELL-CVE-2025-40224

Bulletin has no description...

BELL-CVE-2025-40227

Bulletin has no description...

PT-2025-49361

Name of the Vulnerable Software and Affected Versions Linksys RE6500 versions 1.0.013.001 through 1.2.07.001 Linksys RE6250 versions 1.0.013.001 through 1.2.07.001 Linksys RE6300 versions 1.0.013.001 through 1.2.07.001 Linksys RE6350 versions 1.0.013.001 through 1.2.07.001 Linksys RE7000 versions...

Linksys多款产品 安全漏洞

Linksys RE6250, among others, is a wireless extender from Linksys, USA. A security vulnerability exists in various Linksys products, which stems from an incorrect manipulation of the parameter clientsname0 in the file modform.so, which could result in a stack buffer overflow. The following produc...

Malicious code in elf-stats-sparkly-workbench-689 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a721ca1e0dbc8cdf7b12b79ab3bcb463d85a37fa71875c883df67fd74e25ab4c The package elf-stats-sparkly-workbench-689 was found to contain malicious code...

Malicious code in elf-stats-mulled-snowglobe-636 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67abba45322e79dde009c80b6945042d05796dcb95f3a7e42a0135a03811c63 The package elf-stats-mulled-snowglobe-636 was found to contain malicious code...

CVE-2025-34264

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/dog/agentId endpoint. When an authenticated user adds or edits Software Watchdog process rules for an agent, the monitored process name is stored in the settings array and...