WordPress Fusion Builder plugin <= 3.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by stealthcopter in WordPress Plugin Fusion Builder versions = 3.12.1...

PT-2025-29811 · Unknown · Shinetheme Traveler

Name of the Vulnerable Software and Affected Versions: shinetheme Traveler affected versions not specified Description: The software contains a SQL injection flaw due to improper neutralization of special elements used in an SQL command. This allows for potential SQL injection attacks...

PT-2025-29805 · Unknown · Funnelkit Funnel Builder

Name of the Vulnerable Software and Affected Versions: FunnelKit Funnel Builder versions through 3.10.2 Description: FunnelKit Funnel Builder is susceptible to a SQL injection flaw due to improper neutralization of special elements within SQL commands. This issue allows for potential SQL injectio...

Adobe InCopy Heap Buffer Overflow Vulnerability

InCopy is a professional typesetting software from Adobe for editing and designing complex layouts. A heap buffer overflow vulnerability exists in InCopy 20.3, 19.5.3 and earlier versions. An attacker can exploit this vulnerability to cause arbitrary code to be executed in the current user contex...

MINI-V5J3-R2MP-R52Q

Bulletin has no description...

CVE-2025-53023

...

CVE-2025-50107

...

CVE-2025-50102

...

CVE-2025-50101

CVE-2025-50101 is a MySQL Server (Optimizer) vulnerability affecting MySQL versions 8.0.0–8.0.42, 8.4.0–8.4.5, and 9.0.0–9.3.0. It enables a high-privilege attacker with network access via multiple protocols to cause a hang or a complete DoS. The connected IBM Guardium advisory confirms CVE-2025-...

CVE-2025-50092

...

CVE-2025-50087

...

CVE-2025-50080

...

CVE-2025-50077

...

CVE-2025-50079

...

CVE-2025-50071

CVE-2025-50071 is a vulnerability in Oracle E-Business Suite, specifically Oracle Applications Framework (Web Utilities). Affected versions are 12.2.3–12.2.14. A low-privileged, network-accessible attacker (via HTTP) can compromise the framework, potentially enabling unauthorized update/insert/de...

CVE-2025-50065

...

CVE-2025-50061

...

CVE-2025-30762

CVE-2025-30762 affects Oracle WebLogic Server (Oracle Fusion Middleware), component: Core. Affected versions are 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. The vulnerability enables an unauthenticated attacker over network access via T3 or IIOP to compromise WebLogic Server, potentially leading to u...

CVE-2025-30753

...

CVE-2025-30745

Oracle E-Business Suite: Oracle MES for Process Manufacturing (Device Integration) is affected in versions 12.2.12–12.2.13 by a cross-site request forgery vulnerability (CSRF). The issue is exploitable remotely over HTTP; exploitation requires interaction from a user other than the attacker. Succ...