Siemens Mendix Runtime

SUMMARY Mendix Runtime allows for entity enumeration due to distinguishable responses in certain client actions. This could allow an unauthenticated remote attacker to list all valid entities and attribute names of a Mendix Runtime-based application. Siemens has released new versions for several...

PT-2025-15248 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: The issue allows a remote attacker to escalate privileges. This is achieved via the selectDeptTree method of the "/selectDeptTree/deptId" endpoint, which does not properly validate the deptId parameter...

CVE-2025-2889

CVE-2025-2889 affects the Link Library plugin for WordPress. A stored XSS exists in the Link Additional Parameters across all versions up to 7.7.3 due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at Contributor level or higher, allowing an att...

Kubernetes Ingress NGINX Controller Arbitrary Code Execution

Ingress NGINX Controller for Kubernetes versions before 1.11.5, and 1.12.x before 1.12.1 suffer from a critical remote code execution vulnerability. Successful exploitation allows an unauthenticated attacker with access to the pod network to achieve remote code execution RCE in the controller's...

Arbitrary Code Execution (ACE)

k8s.io/ingress-nginx is vulnerable to Arbitrary Code Execution ACE. The vulnerability is due to improper access control, allowing an unauthenticated attacker with access to the pod network to execute arbitrary code in the context of the ingress-nginx controller...

CVE-2025-31723

The CVE-2025-31723 issue affects Jenkins Simple Queue Plugin 1.4.6 and earlier. A Cross-Site Request Forgery (CSRF) vulnerability lets an attacker change and reset the build queue order via forged HTTP requests. Exploitation is described in SNYK as feasible only when CSRF protection is disabled i...

CVE-2025-3063

The Shopper Approved Reviews plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajaxcallbackupdatesaoption function in versions 2.0 to 2.1. This makes it possible for authenticated attackers, with...

CVE-2025-0676

This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to...

CVE-2025-2891

The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.php' file in all versions up to, and including, 3.5.4. This makes it possible for authenticated attackers, with Seller-level access and abov...

CVE-2025-2860

CVE-2025-2860 affects SaTECH BCU firmware 2.1.3. An authenticated attacker can access user credential information via a web-accessible path to an XML file, with access independent of user privileges (path must be known). The vulnerability is described across NVD/Red Hat and CVE records, indicatin...

CVE-2025-2074

The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to generic SQL Injection via the ‘sSearch’ parameter in all versions up to, and including, 1.29 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2024-10209

An Incorrect Permission Assignment for Critical Resource vulnerability in the file system used in B APROL 4.4-01 may allow an authenticated local attacker to read and alter the configuration of another engineering or runtime user...

Vulnerability of the confont_get() function in the drivers/tty/vt/vt.c module – The kernel virtual terminal support driver of the Linux operating system allows an attacker to gain access to protected information.

Vulnerability of the confontget function in the drivers/tty/vt/vt.c module – The driver for Linux’s kernel-based virtual terminal support is vulnerable due to the lack of resource initialization. Exploiting this vulnerability could allow a remote attacker to gain access to protected information...

CVE-2024-13889

The WordPress Importer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.8.3 via deserialization of untrusted input in the 'maybeunserialize' function. This makes it possible for authenticated attackers, with Administrator-level access and above, t...

CVE-2024-13801 BWL Advanced FAQ Manager <= 2.1.4 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update

The BWL Advanced FAQ Manager plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'bafsetnoticestatus' AJAX action in all versions up to, and including, 2.1.4. This makes it possible for authenticated...

CVE-2025-1784

CVE-2025-1784 affects Spectra Gutenberg Blocks – Website Builder for the Block Editor. The Red Hat advisory confirms a Stored Cross-Site Scripting vulnerability in the uagb block for all versions up to 2.19.0, caused by insufficient input sanitization and output escaping. Exploitation requires au...

CVE-2025-2302

CVE-2025-2302 affects the Advanced Woo Search WordPress plugin. It is vulnerable to a Stored Cross-Site Scripting (XSS) via the aws_search_terms shortcode in all versions up to and including 3.28, caused by insufficient input sanitization and output escaping of user-supplied attributes. This allo...

CVE-2024-10209 Incorrect Permission Assignment in APROL file system

An Incorrect Permission Assignment for Critical Resource vulnerability in the file system used in B&R APROL 4.4-01 may allow an authenticated local attacker to read and alter the configuration of another engineering or runtime user...

CVE-2025-0723

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind and time-based SQL Injections via the rid and search parameters in all versions up to, and including, 5.9.4.7 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2025-1408

The CVE-2025-1408 entry affects the WordPress plugin ProfileGrid – User Profiles, Groups and Communities, up to version 5.9.4.4. The root cause is missing capability checks in pm_decline_join_group_request and pm_approve_join_group_request, allowing authenticated users with Subscriber-level acces...