CVE-2025-26264

GeoVision GV-ASWeb with the version 6.1.2.0 or less fixed in 6.2.0, contains a Remote Code Execution RCE vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary commands on the server,...

CVE-2025-25794

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminping.php...

CVE-2025-25789

CVE-2025-25789 affects FoxCMS v1.2.5 and is described as a remote code execution (RCE) via the index() method in Sitemap.php. The vulnerability is detailed as a high-severity issue (CVSS v3.1: 9.8, CRITICAL) with NETWORK attack vector, LOW attack complexity, no privileges required, no user intera...

CVE-2025-25792

SeaCMS v13.3 has a remote code execution (RCE) vulnerability via the isopen parameter in admin_weixin.php. Documentation confirms SeaCMS v13.3 is affected; no exploit details or fixes are provided in the connected sources. Remediation/patch information is not available in the supplied documents.

CVE-2025-25793

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminnotify.php...

CVE-2025-25789

FoxCMS v1.2.5 was discovered to contain a remote code execution RCE vulnerability via the index method at \controller\Sitemap.php...

CVE-2025-25796

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component admintemplate.php...

CVE-2025-25802

SeaCMS v13.3 is vulnerable to remote code execution via the admin_ip.php component. The flaw stems from the admin_ip.php path, with confirmed RCE impact in SeaCMS 13.3. No exploit details are provided in the documents; remediation guidance from connected sources suggests upgrading SeaCMS to a new...

CVE-2025-1645 Benner Connecta EditarLogado resource injection

A vulnerability classified as critical was found in Benner Connecta 1.0.5330. Affected by this vulnerability is an unknown functionality of the file /Usuarios/Usuario/EditarLogado/. The manipulation of the argument Handle leads to improper control of resource identifiers. The attack can be launch...

CVE-2024-57685

An issue in sparkshop v.1.1.7 and before allows a remote attacker to execute arbitrary code via a crafted phar file...

Advisory ROSA-SA-2025-2705

Software: libjpeg-turbo 1.5.2003 OS: ROSA Virtualization 3.0 packageevrstring: libjpeg-turbo-1.5.2003 CVE-ID: CVE-2020-17541 BDU-ID: 2023-07622 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the Libjpeg-turbo image manipulation library is related to writing beyond buffer boundaries. Exploitatio...

CVE-2025-1611

A vulnerability was found in ShopXO up to 6.4.0. It has been classified as problematic. This affects an unknown part of the file app/service/ThemeAdminService.php of the component Template Handler. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit ha...

(Pwn2Own) Apple Safari B3 JIT Compiler Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the B3 JIT compiler...

CVE-2025-1586 code-projects Blood Bank System A-.php cross site scripting

A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /Blood/A-.php. The manipulation of the argument Bloodname leads to cross site scripting. The attack can be initiated remotely. The exploit has...

CVE-2025-1577 code-projects Blood Bank System prostatus.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank System 1.0. Affected by this issue is some unknown functionality of the file /prostatus.php. The manipulation of the argument message leads to cross site scripting. The attack may be launched remotely...

CVE-2025-1575

CVE-2025-1575 affects Harpia DiagSystem 12. The vulnerability lies in the file /diagsystem/PACS/atualatendimento_jpeg.php where manipulation of the cod/codexame argument leads to improper control of resource identifiers. It is possible to launch the attack remotely, and public exploitation has be...

CVE-2025-26013

An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component...

PT-2025-7327 · Pytorch +1 · Pytorch +1

Name of the Vulnerable Software and Affected Versions: InvokeAI affected versions not specified Description: The issue concerns an unsafely deserialized file download in the backend, potentially allowing remote code execution RCE through PyTorch's torch.load function. Recommendations: At the...

CVE-2025-25507

CVE-2025-25507 affects Tenda AC6, specifically version 15.03.05.16_multi. The vulnerability is an RCE in the formexeCommand function where the cmdinput parameter enables remote command execution. This is corroborated by multiple sources in the connected set (e.g., PT-2025-7557 notes the RCE in fo...

CVE-2025-24893

CVE-2025-24893 affects XWiki Platform and enables unauthenticated remote code execution via the SolrSearch macro, where user-controlled input is evaluated by the Groovy engine, leading to arbitrary command execution and impact to confidentiality, integrity, and availability of the whole installat...