PT-2025-41394

Name of the Vulnerable Software and Affected Versions BBOT affected versions not specified Description The git clone module in BBOT may allow an attacker to disclose a GitHub API key to a server they control by using a maliciously formatted git URL. The issue involves the potential exposure of th...

PT-2025-46866

Name of the Vulnerable Software and Affected Versions Cisco Linksys E1200 v2 routers versions prior to E1200 v2.0.11.001 us.tar.gz Description A stack-based buffer overflow exists in the libshared.so library. The get mac from ip and get ip from mac functions utilize sscanf with an overly permissi...

The vulnerability of the strcpy() function in the microprogramming device routerjd Tenda AC20, which allows a hacker to cause a service failure.

The vulnerability of the strcpy function in the microprogramming router Tenda AC20 is related to the operation of writing data beyond the buffer boundaries during the processing of the MAC parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2022-50533

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mlme: fix null-ptr deref on failed assoc If association to an AP without a link 0 fails, then we crash in tracing because it assumes that either apmldaddr or link 0 BSS is valid, since we clear sdata-vif.validlink...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can gain unauthorized access to restricted organization or application editing interfaces by manipulating URLs after authentication. Remediation Upgrade github.com/casdoor/casdoor/authz to version...

CVE-2025-57457

An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter...

CVE-2025-60313

Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting XSS in the Enter URLs to check input field. This allows a remote attacker to execute arbitrary code...

Curo UC300 安全漏洞

Curo UC300 is a video phone device from Curo UK. A security vulnerability exists in Curo UC300 version 5.42.1.7.1.63R1, which stems from an unvalidated IP Addr parameter that could lead to an OS command injection attack...

PT-2025-41302

Name of the Vulnerable Software and Affected Versions Casdoor versions prior to 2.26.0 Description A flaw exists in the permission verification module and organization/application editing interface. This allows remotely authenticated administrators of any organization to circumvent the system's...

EUVD-2025-33285

An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter...

CVE-2025-57457

The Curo UC300 video phone, specifically version 5.42.1.7.1.63R1 , is vulnerable to an OS Command Injection vulnerability in its Admin panel. The flaw is caused by an unvalidated IP Addr parameter, which allows local attackers to execute arbitrary Linux commands on the device. To exploit this, an...

CVE-2025-57457

An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter...

EUVD-2025-33286

An issue in the permission verification module and organization/application editing interface in Casdoor before 2.26.0 allows remote authenticated administrators of any organization within the system to bypass the system's permission verification mechanism by directly concatenating URLs after log...

PT-2025-41301

Name of the Vulnerable Software and Affected Versions Curo UC300 version 5.42.1.7.1.63R1 Description A flaw exists within the Admin panel that permits local attackers to inject arbitrary OS Commands. The injection occurs through the IP Addr parameter. Recommendations At the moment, there is no...

SourceCodester Link Status Checker 安全漏洞

SourceCodester Link Status Checker is an open source link status checker from SourceCodester. A security vulnerability exists in SourceCodester Link Status Checker version 1.0, which stems from the Enter URLs to check input field being vulnerable to a cross-site scripting attack that could lead t...

The vulnerability of the formBSSetSitesurvey() function in the /goform/formBSSetSitesurvey file of the Belkin F9K1015 router’s microprogramming system allows a intruder to execute arbitrary code.

The vulnerability of the formBSSetSitesurvey function in the /goform/formBSSetSitesurvey file of the Belkin F9K1015 router’s microprogramming system is related to the lack of data cleaning measures at the control level when processing the wanipaddr parameter. Exploiting this vulnerability allows ...

The vulnerability of the formSetWanStatic() function in the /goform/formSetWanStatic file of the microprogramming software for Belkin F9K1015 routers, which allows a hacker to execute arbitrary code.

The vulnerability of the formSetWanStatic function in the /goform/formSetWanStatic file of the Belkin F9K1015 router’s microprogramming software is related to the lack of data cleaning measures at the control level when processing the mwanipaddr parameter. Exploiting this vulnerability could allo...

Linux Distros Unpatched Vulnerability : CVE-2023-53540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: reject auth/assoc to AP with our address If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such...

SUSE CVE-2025-61985

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used...

CVE-2025-6242 Vllm: server side request forgery (ssrf) in mediaconnector

A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an...