WordPress plugin WooMulti 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

CVE-2025-66432

In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...

PT-2025-50554

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. This is the app password parameter. Depending on local...

CVE-2025-66432

In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...

CVE-2025-31216

The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. An attacker with physical access to a device may be able to override managed Wi-Fi profiles...

CVE-2025-66063

WP Google Review Slider plugin (WordPress) is affected by CVE-2025-66063: a Missing Authorization / Broken Access Control vulnerability in versions up to 17.4 due to misconfigured access controls. Red Hat/NVD/Patchstack entries confirm the issue and indicate a patched status for affected releases...

PT-2025-46231

Name of the Vulnerable Software and Affected Versions SQL Anywhere Monitor Non-GUI version 17.0 versions prior to SAP Note 3666261 Description The SQL Anywhere Monitor Non-GUI contains hard-coded credentials within its code. This allows unintended users access to resources and functionality,...

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2025-18821)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-18821 advisory. 1:17.0.17.0.10-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.17.0.10-1 - Update to jdk-17.0.17+10 GA - Add to .gitignore...

CVE-2025-61906 Opencast's editor accidentally publishes videos/overwrites publications #1626

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, in some situations, Opencast's editor may publish a video without notifying the user. This may lead to users accidentally publishing media not meant for...

CVE-2025-61906 Opencast's editor accidentally publishes videos/overwrites publications #1626

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, in some situations, Opencast's editor may publish a video without notifying the user. This may lead to users accidentally publishing media not meant for...

EUVD-2011-5256

Malware in sbrugna...

EUVD-2025-29254

Malicious code in bioql PyPI...

PT-2025-37764

Name of the Vulnerable Software and Affected Versions: FreePBX versions 15.0.0 through 15.0.37 FreePBX versions 16.0.0 through 16.0.40 FreePBX versions 17.0.0 through 17.0.20 Description: FreePBX is a web-based graphical user interface. Malicious connections to the Administrator Control Panel web...

CVE-2025-57085

Tenda W30E V16.01.0.19 5037 was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Tenda W30E 安全漏洞

Tenda W30E is an enterprise-grade wireless router from Tenda Technology designed for SOHO, small and micro businesses and small stores. The Tenda W30E suffers from a buffer overflow vulnerability, which originates from the failure of the v17 parameter in the UploadCfg function to properly validat...

PT-2025-36910

Name of the Vulnerable Software and Affected Versions: Tenda W30E version V16.01.0.19 Description: The Tenda W30E router contains a stack overflow in the v17 parameter within the UploadCfg function. This issue allows attackers to cause a Denial of Service DoS through a crafted request...

GHSA-7WHP-JQQM-W268 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-8-openj9...

CVE-2022-21365 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-8-openj9...

GHSA-8GQP-9RVV-R4X9 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-8-openj9...

CVE-2020-14556 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-8-openj9...