Extreme Universal ZTNA 授权问题漏洞

Extreme Universal ZTNA is a complete network access solution from Extreme, Inc. An authorization issue vulnerability exists in Extreme Universal ZTNA that stems from a searchKeyword conditional syntax error that could lead to bypassing the ownerid filter...

CVE-2025-31917

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player universalvideoplayer allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 3.8.3...

CVE-2025-31057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player elementorwidgetuniversalvideoplayer allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 1.4.0...

DiffUMI: Training-Free Universal Model Inversion Via Unconditional Diffusion for Face Recognition

Face recognition technology presents serious privacy risks due to its reliance on sensitive and immutable biometric data. To address these concerns, such systems typically convert raw facial images into embeddings, which are traditionally viewed as privacy-preserving. However, model inversion...

Enabling Secure AI Inference: Trend Cybertron Leverages NVIDIA Universal LLM NIM Microservices

Learn how Trend's Cybertron has been harnessing the power of NVIDIA Universal LLM NIM Microservices...

USN-7553-6 linux-azure-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Clock framework and drivers; - GPU drivers; - Parport drivers; - Ext4 file system; - JFFS2 file system; - JFS file...

CVE-2025-31917

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player universalvideoplayer allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 3.8.3...

CVE-2025-31057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player elementorwidgetuniversalvideoplayer allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 1.4.0...

CVE-2025-31057

CVE-2025-31057 is a reflected cross-site scripting (XSS) vulnerability in the Universal Video Player WordPress plugin (LambertGroup), affecting versions from n/a up to 1.4.0. It stems from improper neutralization of input during web page generation. CVSS 3.1 base score 7.1 (HIGH): attack vector N...

CVE-2025-31057 WordPress Universal Video Player plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player elementorwidgetuniversalvideoplayer allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 1.4.0...

CVE-2025-31057 WordPress Universal Video Player plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player allows Reflected XSS. This issue affects Universal Video Player: from n/a through 1.4.0...

CVE-2025-31917 WordPress Universal Video Player plugin <= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player universalvideoplayer allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 3.8.3...

CVE-2025-31917

CVE-2025-31917 affects the Universal Video Player plugin for WordPress. The vulnerability is due to improper input handling during web page generation, enabling a Reflected XSS in versions from 0 through 3.8.3. The CVSS v3.1 base score is 7.1 (HIGH). Exploitation would require user interaction an...

CVE-2025-31917 WordPress Universal Video Player plugin <= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player universalvideoplayer allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 3.8.3...

PT-2025-24478 · Lambertgroup · Lambertgroup Universal Video Player

Name of the Vulnerable Software and Affected Versions: LambertGroup Universal Video Player versions 1.4.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that a...

WordPress plugin Universal Video Player 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Universal Video Player 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-24489 · Lambertgroup · Lambertgroup Universal Video Player

Name of the Vulnerable Software and Affected Versions: LambertGroup Universal Video Player versions 3.8.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that a...

Optimization-Free Universal Watermark Forgery with Regenerative Diffusion Models

Watermarking becomes one of the pivotal solutions to trace and verify the origin of synthetic images generated by artificial intelligence models, but it is not free of risks. Recent studies demonstrate the capability to forge watermarks from a target image onto cover images via adversarial...

Splunk Universal Forwarder 9.1 < 9.1.9, 9.2 < 9.2.6, 9.3 < 9.3.4, 9.4 < 9.4.2 (SVD-2025-0602)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-0602 advisory. - In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an...