IP video surveillance system Data Compromise

The vulnerability of the IP video surveillance system “Line” lies in the use of strictly encrypted credentials. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux NVME Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the nvmetreqComplete function in the drivers/nvme/target/core.c file of the Linux kernel’s NVME support module is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Building Browser Agents: Architecture, Security, and Practical Solutions

Browser agents enable autonomous web interaction but face critical reliability and security challenges in production. This paper presents findings from building and operating a production browser agent. The analysis examines where current approaches fail and what prevents safe autonomous operatio...

CVE-2025-66112

Missing Authorization vulnerability in WebToffee Accessibility Toolkit by WebYes accessibility-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Toolkit by WebYes: from n/a through = 2.0.4...

CVE-2025-66112 WordPress Accessibility Toolkit by WebYes plugin <= 2.0.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebToffee Accessibility Toolkit by WebYes accessibility-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Toolkit by WebYes: from n/a through = 2.0.4...

EUVD-2025-198442

Missing Authorization vulnerability in WebToffee Accessibility Toolkit by WebYes accessibility-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Toolkit by WebYes: from n/a through = 2.0.4...

CVE-2025-66112

CVE-2025-66112 concerns a missing authorization issue in the WordPress plugin bundle described as “Accessibility Toolkit by WebYes accessibility-plus,” specifically affecting versions up to and including 2.0.4. Multiple connected sources describe it as a broken access control vulnerability due to...

CVE-2025-66112: Missing Authorization

Missing Authorization vulnerability in WebToffee Accessibility Toolkit by WebYes accessibility-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Toolkit by WebYes: from n/a through = 2.0.4...

WordPress plugin Accessibility Toolkit by WebYes has a security vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin Accessibility Toolkit by WebYes, which...

PT-2025-47774

Missing Authorization vulnerability in WebToffee Accessibility Toolkit by WebYes accessibility-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Toolkit by WebYes: from n/a through = 2.0.4...

WebGPU API Mozilla Firefox Thunderbird Data Compromise

The vulnerability of the WebGPU API interface in Mozilla Firefox and the Thunderbird email client is related to incorrect handling of exceptional states. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Kapsch TrafficCom RIS-9260 Authentication Bypass

The vulnerability of the Kapsch TrafficCom RIS-9260 road communication module’s microprogramming software is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker operating remotely to compromise the confidentiality, integrity, and...

Lantronix XPort Authentication Bypass

The vulnerability of Lantronix XPort devices lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to influence the confidentiality, integrity, and accessibility of the protected information...

ZenCount visitor counter XSS

The vulnerability of the ZenCount visitor counter is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ZenCount visitor counter Data Compromise

The vulnerability of the ZenCount visitor counter is related to the use of strictly encrypted user data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Marketing Administration Component Data Compromise

The vulnerability of Oracle Marketing’s Marketing Administration component relates to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

Kaspersky Security Center Windows Verification Error

The vulnerability of the installation process of the Kaspersky Security Center antivirus protection software for the Windows operating system is related to errors during the verification of dynamically loaded libraries. Exploiting this vulnerability can allow an attacker to compromise the integri...

runc Race Condition DoS

The vulnerability of the runc command, used to execute isolated containers, is related to the state of the race condition that allows for the tracking of references. Exploiting this vulnerability could enable a hacker to compromise the confidentiality, integrity, and accessibility of the protecte...

Service Update 1.41 for Microsoft Dynamics CRM (on-premises) 9.1

None None...

Qualcomm Integer Overflow

The vulnerability of embedded Qualcomm software programs is related to integer overflow. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...