CVE-2025-12681

CVE-2025-12681 affects the WordPress plugin Comment Edit Core – Simple Comment Editing, up to version 3.1.0. The root cause is an unauthenticated exposure via the ajax_get_comment function, allowing any visitor to access sensitive data such as user IDs, IP addresses, and email addresses. Wordfenc...

WordPress plugin WPKoi Templates for Elementor 安全漏洞

WordPress WPKoi Templates for Elementor plugin is a template plugin designed for Elementor page builder, offering 400+ preset templates and dynamic elements to help users quickly create visual websites. The WordPress WPKoi Templates for Elementor plugin suffers from a missing authorization...

CVE-2025-55810

A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card...

EulerOS 2.0 SP10 : libssh (EulerOS-SA-2025-2420)

According to the versions of the libssh package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to sshgetfingerprinthash...

CVE-2025-48878

Combodo iTop is a web based IT service management tool. In versions on the 3.x branch prior to 3.2.2, an insecure direct object reference allows a user e.g. with Service desk agent profile to create a ModuleInstallation object when they shouldn't be able to do so. Version 3.2.2 fixes the issue...

EUVD-2025-93500

Improper neutralization for some IntelR Neural Compressor software before version v3.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This...

CVE-2025-27725

CVE-2025-27725 describes a time-of-check time-of-use race condition in Intel ACAT (Assistive Context-Aware Toolkit) software before version 3.13, impacting Ring 3 user applications. The root cause is a race in the user-space component that can allow a local, authenticated, low-privilege attacker ...

CVE-2025-27712

Intel Neural Compressor (Intel® Neural Compressor) before version 3.4 is affected by CVE-2025-27712 due to improper neutralization that could enable local privilege escalation. An unprivileged, authenticated user with low attack complexity may exploit this from Ring 3: User Applications, with act...

CVE-2025-41104

Summary: CVE-2025-41104 is an HTML injection vulnerability in Fairsketch’s RISE CRM Framework v3.8.1. The issue stems from insufficient validation of user input in the POST parameter custom_field_1 at /estimate_requests/save_estimate_request, enabling HTML injection. Affected software: Fairsketch...

PT-2025-46409

Name of the Vulnerable Software and Affected Versions IntelR Neural Compressor versions prior to 3.4 Description A flaw exists in some IntelR Neural Compressor software that may allow an escalation of privilege. An unprivileged software adversary with an authenticated user and a low complexity...

Intel ACAT 安全漏洞

Intel ACAT is an open source platform from Intel Corporation USA. A security vulnerability exists in Intel ACAT versions prior to 3.13, which stems from a competitive condition in the Ring 3 user application that could lead to a denial-of-service attack...

PT-2025-46490

Name of the Vulnerable Software and Affected Versions Illustrator on iPad versions 3.0.9 and earlier Description Illustrator on iPad versions 3.0.9 and earlier are susceptible to a Heap-based Buffer Overflow. Successful exploitation of this issue could lead to arbitrary code execution within the...

Intel® Neural Compressor Software Advisory

Summary: A potential security vulnerability for some Intel® Neural Compressor software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-27712 Description: Improper neutralization for some Intel®...

Assistive Context-Aware Toolkit (ACAT) Software Advisory

Summary: A potential security vulnerability in some Assistive Context-Aware Toolkit ACAT software maintained by Intel may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-27725 Description: Time-of-check...

SUSE CVE-2016-11070

An issue was discovered in Mattermost Server before 3.1.0. It allows XSS via theme color-code values...

SUSE CVE-2016-11076

An issue was discovered in Mattermost Server before 3.0.0. It does not ensure that a cookie is used over SSL...

Sangfor Operation and Maintenance Security 命令注入漏洞

Sangfor Operation and Maintenance Security is an operation and maintenance security management system from China's Sangfor. A command injection vulnerability exists in Sangfor Operation and Maintenance Security version 3.0, which stems from an incorrect manipulation of the parameter loginUrl in t...

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

UBUNTU-CVE-2025-64184

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

CVE-2025-64184 Dosage vulnerable to Directory Traversal through crafted HTTP responses

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...