CVE-2025-12272 Tenda CH22 addressNat fromAddressNat buffer overflow

A security flaw has been discovered in Tenda CH22 1.0.0.1. This impacts the function fromAddressNat of the file /goform/addressNat. Performing a manipulation of the argument page results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may ...

EUVD-2025-36165

A security flaw has been discovered in Tenda CH22 1.0.0.1. This impacts the function fromAddressNat of the file /goform/addressNat. Performing manipulation of the argument page results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be...

CVE-2025-12252

creationtimestamp| type| source ---|---|--- 2025-10-27 11:19:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m46cdhy2sz2c...

CVE-2025-12080 Intent Abuse in Google Messages for Wear OS for Silent Message Sending

On Wear OS devices, when Google Messages is configured as the default SMS/MMS/RCS application, the handling of ACTIONSENDTO intents utilizing the sms:, smsto:, mms:, and mmsto: Uniform Resource Identifier URI schemes is incorrectly implemented. Due to this misconfiguration, an attacker capable of...

CVE-2025-12240

CVE-2025-12240 is associated with TOTOLINK A3300R 17.0.0cu.557_B20221024. The vulnerability affects the function setDmzCfg in the file /cgi-bin/cstecgi.cgi, where manipulation of the ip argument leads to a buffer overflow. This can be exploited remotely; multiple sources describe a publicly discl...

EUVD-2025-36074

A security flaw has been discovered in Tenda O3 1.0.0.102478. Affected by this issue is the function SetValue/GetValue of the file /goform/setDmzInfo. The manipulation of the argument dmzIP results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-12211

CVE-2025-12211 affects Tenda O3 v1.0.0.10(2478). The defect is in the functions SetValue/GetValue of the file /goform/setDmzInfo, where improper handling of the dmzIP argument causes a stack-based buffer overflow. This allows remote exploitation and, according to sources, the exploit has been rel...

CVE-2025-12210

CVE-2025-12210 affects Tenda O3, version 1.0.0.10(2478). The vulnerability is in the SetValue/GetValue handlers of the file /goform/AdvSetLanip, where the lanIp argument length is not properly validated, causing a stack-based buffer overflow. It can be triggered remotely and publicly available ex...

PT-2025-44042

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.3 GA through update 35 Liferay Portal versions 7.4.0 through 7.4.3.97 Liferay DXP versions 2023.Q3.1 through 2023.Q3.4 Liferay DXP versions 7.4 GA through update 92 Liferay Portal and DXP older unsupported versions...

Liferay Portal和Liferay DXP 日志信息泄露漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

Siemens SIMATIC Devices Allocation of Resources Without Limits or Throttling (CVE-2024-35969)

ipv6: fix race condition between ipv6getifaddr and ipv6deladdr This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503415; scriptversion"1.2";...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-26891)

iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503550;...

PT-2025-44010

Name of the Vulnerable Software and Affected Versions Pi-hole Admin Interface versions prior to 6.3 Description The Pi-hole Admin Interface, a web interface for managing the Pi-hole advertisement and internet tracker blocking application, is susceptible to a cross-site scripting XSS issue. This...

Code-Projects E-Commerce Website 代码注入漏洞

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters suppname and suppaddress in the file /pages/supplieradd.php, which can be exploite...

Pi-hole Web Interface 跨站脚本漏洞

Pi-hole Web Interface is a dashboard web interface from Pi-hole open source. A cross-site scripting vulnerability exists in Pi-hole Web Interface versions prior to 6.3, which stems from improper input cleanup in the Address field and could lead to a cross-site scripting attack...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-36270)

netfilter: tproxy: bail out if IP has been disabled on the device syzbot reports: general protection fault, probably for non-canonical address This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

CVE-2025-11244

The Password Protected plugin for WordPress is vulnerable to authorization bypass via IP address spoofing in all versions up to, and including, 2.7.11. This is due to the plugin trusting client-controlled HTTP headers such as X-Forwarded-For, HTTPCLIENTIP, and similar headers to determine user IP...

Exploit for CVE-2025-61304

CVE-2025-61304 "OS command injection vulnerability in Dynatrac...

CVE-2025-11244

CVE-2025-11244 affects the WordPress Password Protected plugin (versions ≤ 2.7.11). The vulnerability arises because the plugin trusts client-controlled HTTP headers (eg, X-Forwarded-For, HTTP_CLIENT_IP) in pp_get_ip_address() when the Use transients option is enabled, enabling an unauthenticated...

CVE-2025-11244 Password Protected <= 2.7.11 - Unauthenticated Authorization Bypass via IP Address Spoofing

The Password Protected plugin for WordPress is vulnerable to authorization bypass via IP address spoofing in all versions up to, and including, 2.7.11. This is due to the plugin trusting client-controlled HTTP headers such as X-Forwarded-For, HTTPCLIENTIP, and similar headers to determine user IP...