CVE-2025-58840

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ibnul H. Custom Team Manager custom-team-manager allows Stored XSS.This issue affects Custom Team Manager: from n/a through = 2.4.2...

CVE-2025-58825

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Habibur Rahman Comment Form WP – Customize Default Comment Form comment-form-wp allows Stored XSS.This issue affects Comment Form WP – Customize Default Comment Form: from n/a through = 2.0.1...

CVE-2025-58815

Deserialization of Untrusted Data vulnerability in Rubel Miah Aitasi Coming Soon aitasi-coming-soon allows Object Injection.This issue affects Aitasi Coming Soon: from n/a through = 2.0.2...

CVE-2025-58829 WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.3.3 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Server Side Request Forgery.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One: from n/a through = 2.3.3...

CVE-2025-58825

CVE-2025-58825 : Stored XSS in the WordPress plugin Comment Form WP – Customize Default Comment Form . The vulnerability arises from improper input neutralization during web page generation, enabling stored cross-site scripting. Affected versions are listed as from n/a through 2.0.0. The document...

CVE-2025-58824 WordPress Shk Corporate Theme <= 2.4.1.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in priyanshumittal Shk Corporate shk-corporate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shk Corporate: from n/a through = 2.4.1.1...

CVE-2025-58815 WordPress Aitasi Coming Soon Plugin <= 2.0.2 - Deserialization of untrusted data Vulnerability

Deserialization of Untrusted Data vulnerability in Rubel Miah Aitasi Coming Soon aitasi-coming-soon allows Object Injection.This issue affects Aitasi Coming Soon: from n/a through = 2.0.2...

CVE-2025-58815

CVE-2025-58815 is a WordPress plugin vulnerability in the Aitasi Coming Soon plugin (versions

CVE-2025-58800

Cross-Site Request Forgery CSRF vulnerability in Steve Truman WP Email Template wp-email-template allows Cross Site Request Forgery.This issue affects WP Email Template: from n/a through = 2.8.5...

CVE-2025-58792

CVE-2025-58792 is a CSRF vulnerability in the WordPress Authors List plugin that affects versions up to 2.0.6.1. The issue can allow unauthorized actions to be performed on behalf of an authenticated user. Public references indicate exploitation potential via CSRF, with CVSS 3.1 base score 4.3 (M...

OESA-2025-2189 varnish security update

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x,...

OESA-2025-2187 varnish security update

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x,...

OESA-2025-2185 varnish security update

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x,...

OESA-2025-2167 lighttpd security update

Secure, fast, compliant and very flexible web-server which has been optimized for high-performance environments. It has a very low memory footprint compared to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many more...

Security Bulletin: Common vulnerabilities discovered in Spark2 executables released with Cloudera Observability on Premises with IBM Version 3.5.3

Summary Cloudera Observability on premises with IBM 3.5.3 ships with Spark 2 executables, however, the application runs on Spark 3. This security bulletin identifies a set of common vulnerabilities found in the Spark 2 libraries. Spark 2 has reached End of Support EOS. Clients are advised to use...

TP-Link Router Command Execution

The vulnerability of the web interfaces of TP-Link Archer C7EU V2 and TL-WR841N/NDMS V9 routers lies in the lack of measures to neutralize specific components. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2025-36146

Name of the Vulnerable Software and Affected Versions: Purge Varnish Cache versions n/a through 2.6 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Dsingh Purge Varnish Cache, which can also lead to Stored Cross-Site Scripting XSS. Recommendations: At the moment, there is n...

ELADMIN Authorization Issue Vulnerability

ELADMIN is a backend management system for elunez individual developers. An authorization issue vulnerability exists in ELADMIN 2.7 and earlier versions, which stems from improper authorization due to incorrect manipulation of the parameter id/email...

ROS-20250905-12

The Netty networking software vulnerability is related to the fact that the application does not properly control the consumption of internal resources when processing HTTP/2 requests. consumption of internal resources when processing HTTP/2 requests. Exploitation of the vulnerability could allow...

PT-2025-36191

Name of the Vulnerable Software and Affected Versions MSTW League Manager versions through 2.10 Description A Cross-Site Request Forgery CSRF vulnerability exists in MSTW League Manager, which also allows for Stored Cross-Site Scripting XSS. Recommendations At the moment, there is no information...