CVE-2025-57974 WordPress TZ PlusGallery Plugin <= 1.5.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tuyennv TZ PlusGallery allows Stored XSS. This issue affects TZ PlusGallery: from n/a through 1.5.5...

CVE-2025-57974 WordPress TZ PlusGallery Plugin <= 1.5.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tuyennv TZ PlusGallery tz-plus-gallery allows Stored XSS.This issue affects TZ PlusGallery: from n/a through = 1.5.5...

CVE-2025-57974

CVE-2025-57974 documents a Cross‑Site Scripting (Stored XSS) vulnerability in the WordPress plugin TZ Plus Gallery. Affected range: TZ Plus Gallery

CVE-2025-57974: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tuyennv TZ PlusGallery tz-plus-gallery allows Stored XSS.This issue affects TZ PlusGallery: from n/a through = 1.5.5...

Linux Distros Unpatched Vulnerability : CVE-2020-7668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all versions of the package github.com/unknwon/cae/tz, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or...

MAL-2025-13821 Malicious code in @zalastax/nolb-react-tz (npm)

The package @zalastax/nolb-react-tz was found to contain malicious code...

Malicious code in @zalastax/nolb-react-tz (npm)

The package @zalastax/nolb-react-tz was found to contain malicious code...

TOTOLINK X6000R Command Injection Vulnerability

TOTOLINK X6000R is a WiFi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK with high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from a command injection vulnerability that stems from not strictly filtering tz parameters. No detailed...

CVE-2025-52284

Totolink X6000R V9.4.0cu.1360B20241207 was found to contain a command injection vulnerability in the sub4184C0 function via the tz parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a WiFi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK with high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from a command injection vulnerability that stems from not strictly filtering tz parameters. No detailed...

CVE-2025-52284: Improper Neutralization of Special Elements used in a Command

Totolink X6000R V9.4.0cu.1360B20241207 was found to contain a command injection vulnerability in the sub4184C0 function via the tz parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

CVE-2024-23057

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the tz parameter in the setNtpCfg function...

CVE-2023-51024

TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg interface of the cstecgi .cgi...

CVE-2023-33032

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region...

CVE-2024-43046

There may be information disclosure during memory re-allocation in TZ Secure OS...

CVE-2024-45557

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation...

CVE-2024-45556 Improper Access Control for Register Interface in TZ Firmware

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR...

CVE-2024-45556 Improper Access Control for Register Interface in TZ Firmware

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR...

CVE-2024-45556

CVE-2024-45556 describes an improper access control issue in TZ (TrustZone) firmware affecting Qualcomm chipsets, where the access configuration permits Linux to read key registers in the TCSR. This cryptographic vulnerability exposes confidential data due to unauthorized access to critical key r...

CVE-2024-43046

CVE-2024-43046 describes an information disclosure vulnerability affecting TZ Secure OS on Qualcomm chipsets, triggered by memory re-allocation where sensitive memory content may be exposed. The CVE notes a memory re-allocation issue but the provided documents do not specify affected product vers...