PT-2025-53599

Name of the Vulnerable Software and Affected Versions Cola Dnslog version 1.3.2 Description The application processes DNS queries for TXT records by concatenating the requested URL with a base path using os.path.join. This allows for directory traversal or absolute path injection. Successful...

CVE-2025-65885

An issue was discovered in the Delight Custom Firmware CFW for Nokia Symbian Belle devices on Nokia 808 Delight v1.8, Nokia N8 Delight v6.7, Nokia E7 Delight v1.3, Nokia C7 Delight v6.7, Nokia 700 Delight v1.2, Nokia 701 Delight v1.1, Nokia 603 Delight v1.0, Nokia 500 Delight v1.2, Nokia E6 Delig...

EUVD-2025-205437

An issue was discovered in the Delight Custom Firmware CFW for Nokia Symbian Belle devices on Nokia 808 Delight v1.8, Nokia N8 Delight v6.7, Nokia E7 Delight v1.3, Nokia C7 Delight v6.7, Nokia 700 Delight v1.2, Nokia 701 Delight v1.1, Nokia 603 Delight v1.0, Nokia 500 Delight v1.2, Nokia E6 Delig...

PT-2025-53590

Name of the Vulnerable Software and Affected Versions Delight Custom Firmware versions 1.0 through 1.8 Description A flaw exists in Delight Custom Firmware for Nokia Symbian Belle devices that allows local attackers to inject startup scripts. This is achieved by placing crafted .txt files into th...

CVE-2025-65885

An issue in Delight Custom Firmware (CFW) for Nokia Symbian Belle devices (including models such as Nokia 808, N8, E7, C7, 700, 701, 603, 500, E6, Oro, and Vertu Constellation T) allows local attackers to inject startup scripts. This vulnerability is caused by the firmware's handling of crafted ....

CVE-2025-57403

Cola Dnslog v1.3.2 is vulnerable to a Directory Traversal flaw during the processing of DNS TXT record queries . The root cause is the insecure use of os.path.join to concatenate a requested URL (or a portion of it) directly with a base path. This flaw allows for directory traversal or absolute p...

Delight Custom Firmware security vulnerability

Delight Custom Firmware is an unofficial custom firmware from Delight open source. A security vulnerability exists in Delight Custom Firmware, which originated from allowing the injection of boot scripts via a specially crafted .txt file, affecting several Nokia Symbian Belle devices...

Cola Dnslog security vulnerability

Cola Dnslog is a no-reply vulnerability detection aid platform for individual AbelChe developers. A security vulnerability exists in Cola Dnslog v1.3.2, which stems from the direct splicing of request URLs and base paths when processing TXT record DNS queries, which may lead to directory traversa...

CVE-2025-65885

An issue was discovered in the Delight Custom Firmware CFW for Nokia Symbian Belle devices on Nokia 808 Delight v1.8, Nokia N8 Delight v6.7, Nokia E7 Delight v1.3, Nokia C7 Delight v6.7, Nokia 700 Delight v1.2, Nokia 701 Delight v1.1, Nokia 603 Delight v1.0, Nokia 500 Delight v1.2, Nokia E6 Delig...

CVE-2025-57403

Cola Dnslog v1.3.2 is vulnerable to Directory Traversal. When a DNS query for a TXT record is processed, the application concatenates the requested URL or a portion of it directly with a base path using os.path.join. This bypass allows directory traversal or absolute path injection, leading to th...

WordPress Wp Text Slider Widget plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Wp Text Slider Widget versions = 1.0...

Kentico Xperience Rich Text Editor Component Cross-Site Scripting Vulnerability

Kentico Xperience is a digital experience platform from Kentico. A cross-site scripting vulnerability exists in the Kentico Xperience rich text editor component that can be exploited by an attacker to execute arbitrary script in a user's browser...

Kentico Xperience cross-site scripting vulnerability (CNVD-2026-05122)

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject malicious script via the rich text editor component of the page and form builder...

CVE-2018-25130 Beward Intercom 2.3.1 Local Credentials Disclosure via Unencrypted Database

Beward Intercom 2.3.1 contains a credentials disclosure vulnerability that allows local attackers to access plain-text authentication credentials stored in an unencrypted database file. Attackers can read the BEWARD.INTERCOM.FDB file to extract usernames and passwords, enabling unauthorized acces...

CVE-2018-25130 Beward Intercom 2.3.1 Local Credentials Disclosure via Unencrypted Database

Beward Intercom 2.3.1 contains a credentials disclosure vulnerability that allows local attackers to access plain-text authentication credentials stored in an unencrypted database file. Attackers can read the BEWARD.INTERCOM.FDB file to extract usernames and passwords, enabling unauthorized acces...

PT-2025-53351

Name of the Vulnerable Software and Affected Versions Beward Intercom version 2.3.1 Description A security issue exists in Beward Intercom 2.3.1 that allows local attackers to access plain-text authentication credentials. The credentials are stored in an unencrypted database file, specifically th...

Lynx+ Gateway Unprotected Information Disclosure

The vulnerability of the microprogramming software of the General Industrial Controls Lynx+ Gateway device relates to the transmission of critical information in open text format. Exploiting this vulnerability can allow an intruder operating remotely to gain unauthorized access to protected...

allennlp (>=2.5.0.dev20210603, <=2.5.1.dev20210621), allennlp-models (2.5.0) +22 more potentially affected by CVE-2025-14929 via transformers (4.6.1)

transformers PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.5.0.dev20210603, =0.0.10, =3.1.0, =2.0.0, =0.0.1, =0.0.1, =2.0.0a0, =0.9.0, =0.0.29, =0.16.0rc0, =1.0.5, =0.0.8, =0.0.9 and...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2025-14929 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2025-14929 Source advisory: OSV:PYSEC-2025-217...

data-generation-tool (>=1.0.1, <=1.1.1), openrlhf (>=0.4.0, <=0.4.2) +2 more potentially affected by CVE-2025-14929 via transformers (4.43.3)

transformers PYPI version 4.43.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - data-generation-tool =1.0.1, =0.4.0, =0.0.1, =0.1.1, =0.2.1 Source cves: CVE-2025-14929 Source advisory: OSV:PYSEC-2025-217...