CVE-2025-44647

In TRENDnet TEW-WLC100P 2.03b03, the idontcareaboutsecurityanduseaggressivemodepsk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks on the openly transmitted hash of the PSK...

CVE-2025-44657

The Linksys EA6350 wireless router, specifically version V2.1.2 , is affected by a vulnerability where the chroot_local_user option is enabled in the dynamically generated vsftpd configuration file. This misconfiguration can lead to unauthorized access to system files , privilege escalation , or ...

CVE-2025-44651

The TRENDnet TPL-430AP wireless access point running FW1.0 is vulnerable to a Denial-of-Service (DoS) attack. The root cause is that the USERLIMIT_GLOBAL option is incorrectly set to 0 in the bftpd-related configuration file , allowing an unlimited number of users to connect and exhaust resources...

CVE-2025-44652

The Netgear RAX30 router (version V1.0.10.94_3 ) is susceptible to a Denial of Service (DoS) attack due to a configuration flaw in its microprogramming software. The USERLIMIT_GLOBAL option is set to 0 in several bftpd -related configuration files, which allows for the allocation of resources wit...

CVE-2025-44654

The Linksys E2500 wireless router, specifically version 3.0.04.002 , is vulnerable to a security flaw where the chroot_local_user option is enabled in the vsftpd configuration file. This misconfiguration can lead to unauthorized access to system files, privilege escalation , or the use of the com...

CVE-2025-44654

In Linksys E2500 3.0.04.002, the chrootlocaluser option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...

CVE-2025-44651

In TRENDnet TPL-430AP FW1.0, the USERLIMITGLOBAL option is set to 0 in the bftpd-related configuration file. This can cause DoS attacks when unlimited users are connected...

CVE-2025-44652

In Netgear RAX30 V1.0.10.943, the USERLIMITGLOBAL option is set to 0 in multiple bftpd-related configuration files. This can cause DoS attacks when unlimited users are connected...

CVE-2025-44653

In H3C GR2200 MiniGR1A0V100R016, the USERLIMITGLOBAL option is set to 0 in the /etc/bftpd.conf. This can cause DoS attacks when unlimited users are connected...

PT-2025-30260 · Unknown · Two App Studio Journey

Name of the Vulnerable Software and Affected Versions: Two App Studio Journey version 5.5.6 Description: The local authentication component has insufficient protection against brute-force attacks and runtime manipulation on iOS. This allows local attackers to bypass biometric and PIN-based access...

Pulse-Level Simulation of Crosstalk Attacks on Superconducting Quantum Hardware

Hardware crosstalk in multi-tenant superconducting quantum computers poses a severe security threat, allowing adversaries to induce targeted errors across tenant boundaries by injecting carefully engineered pulses. We present a simulation-based study of active crosstalk attacks at the pulse level...

PT-2025-30727 · Tenda · Tenda Ac20

Name of the Vulnerable Software and Affected Versions: Tenda AC20 version 16.03.08.05 Description: A stack-based buffer overflow vulnerability exists in the processing of the list parameter within the /goform/SetStaticRouteCfg file. Remote attackers can exploit this issue to execute arbitrary cod...

CVE-2025-54352

WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via pingback.ping XML-RPC requests. NOTE: the Supplier is not changing this behavior...

CVE-2025-44653

In H3C GR2200 MiniGR1A0V100R016, the USERLIMITGLOBAL option is set to 0 in the /etc/bftpd.conf. This can cause DoS attacks when unlimited users are connected...

CVE-2025-44653

The H3C GR2200 MiniGR1A0V100R016 enterprise router is vulnerable to a Denial of Service (DoS) attack due to an uncontrolled resource consumption issue (CWE-400). The root cause is that the USERLIMIT_GLOBAL option is set to 0 in the /etc/bftpd.conf configuration file, which allows for an unlimited...

CVE-2025-44657

In Linksys EA6350 V2.1.2, the chrootlocaluser option is enabled in the dynamically generated vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...

PT-2025-30227

Name of the Vulnerable Software and Affected Versions Chanjet CRM version 1.0 Description A critical vulnerability exists in Chanjet CRM 1.0. The issue is related to SQL injection within an unknown functionality of the file /mail/mailinactive.php of the Login Page component. This allows for remot...

PT-2025-30350 · Unknown · Phpgurukul Time Table Generator System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Time Table Generator System version 1.0 PHPGurukul Taxi Stand Management System version 1.0 Description: A problematic vulnerability exists due to cross site scripting. Manipulation of the adminname argument in the /admin/profile.p...

PT-2025-30361 · Hax Cms · Hax Cms

Name of the Vulnerable Software and Affected Versions: HAX CMS versions 11.0.7 and below PHP HAX CMS versions 11.0.12 and below NodeJS Description: HAX CMS does not include headers to prevent websites from loading the application within an iframe. This affects both the CMS and generated sites. An...

Windows Routing and Remote Access Service Unauthorized Access

The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems is related to memory-walking attacks. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...