CVE-2025-39442

Cross-Site Request Forgery CSRF vulnerability in MessageMetric Review Wave – Google Places Reviews review-wave-google-places-reviews allows Stored XSS.This issue affects Review Wave – Google Places Reviews: from n/a through = 1.4.7...

PT-2025-17009 · Unknown · Review Wave – Google Places Reviews

Name of the Vulnerable Software and Affected Versions: Review Wave – Google Places Reviews versions 1.4.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the...

WordPress plugin Review Wave – Google Places Reviews 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on servers running PHP and MySQL. WordPress plugin is an application...

CVE-2025-28145

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via partition in /boafrm/formDiskFormat...

CVE-2025-28142

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V31.0.15 was discovered to contain a command injection vulnerability via the foldername in /boafrm/formDiskCreateShare...

CVE-2025-3431

The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 6.91 via the 'dzsapdownload' action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the serve...

Microsoft Dynamics Business Central 输入验证错误漏洞

Microsoft Dynamics Business Central is an enterprise resource planning system from Microsoft USA. The system includes functionality for financial management, project management, and supply chain management. An input validation error vulnerability exists in Microsoft Dynamics Business Central. The...

Malicious code in wave-charts-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03df1ae8e754a6d851def9997b02f9ef24887e3fdeffeca63324daeda5d1708d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2720 Malicious code in wave-charts-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03df1ae8e754a6d851def9997b02f9ef24887e3fdeffeca63324daeda5d1708d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Imperva Named a Leader in Forrester Wave™: Web Application Firewall (WAF) Solutions: A Continued Legacy of Excellence

In today’s digital-first environment, protecting web applications and APIs is a critical priority for businesses. Organisations seek trusted solutions that balance robust protection, scalability, and ease of use. It’s no surprise that Imperva has been named a Leader in the Forrester Wave: Web...

CVE-2024-22472

A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices...

PT-2026-3060

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description A stack overflow exists in the pcmreframe flush packet function. This flaw can be triggered by processing a specially crafted WAV file, potentially leading to a Denial of Service DoS. Recommendations At the momen...

AZL-62351 CVE-2024-47778 affecting package gstreamer1 1.20.0-2

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gstwavparseadtlchunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which can exceed the bounds of the data buffer. ...

CVE-2024-50929

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the controller's memory, leading to a Denial of Service DoS...

CVE-2024-50930

An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code...

CVE-2024-50924

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller...

CVE-2024-50930

An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code...

CVE-2024-50924

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller...

CVE-2024-50920

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets...

CVE-2024-50928

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the device's communications with the controller...