CVE-2025-59707

Affected software: N2W. Vulnerable versions: before 4.3.2 and 4.4.x before 4.4.1. Root cause: a spoofing vulnerability that can lead to remote code execution and theft of account credentials. Impact: potential RCE and credential exposure as described in multiple sources (Red Hat and ENISA entries...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. There were security vulnerabilities in versions of Apple iOS prior to 26.4 and iPadOS prior to 26.4. These...

Drupal Anti-Spam by CleanTalk 安全漏洞

Drupal Anti-Spam by CleanTalk is a security module for content management systems provided by the Drupal company, which offers automatic spam detection and filtering capabilities. Versions of Drupal Anti-Spam by CleanTalk prior to version 9.7.0 contained a security vulnerability caused by imprope...

PT-2026-28160

Name of the Vulnerable Software and Affected Versions Saloon versions prior to 4.0.0 Description Saloon is a PHP library used for building API integrations and SDKs. A flaw exists where the library combines a connector's base URL with a request endpoint. If the endpoint is a valid absolute URL,...

PT-2026-27914

Name of the Vulnerable Software and Affected Versions skygroup Nooni versions prior to 1.5.1 Description The software contains a flaw related to improper input handling during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker to inject malicio...

PT-2026-28022

Name of the Vulnerable Software and Affected Versions Mikado-Themes Halstein versions prior to 1.8 Description An issue exists in Halstein that allows for object injection due to deserialization of untrusted data. This could potentially allow for malicious code execution. Recommendations Update...

WordPress plugin MyDecor 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

WordPress plugin WooCommerce Support Ticket System 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

CVE-2025-59707

In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability...

CVE-2025-70887

An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signeddata.py and the context.py components...

Ericsson Indoor Connect 安全漏洞

Ericsson Indoor Connect is a small indoor base station developed by the Swedish company Ericsson. Versions of Ericsson Indoor Connect 8855 prior to Q3 2025 contained security vulnerabilities. These vulnerabilities were due to susceptibility to cross-site scripting attacks, which could lead to...

PT-2026-27638

Name of the Vulnerable Software and Affected Versions Hitachi Infrastructure Analytics Advisor versions prior to 11.0.5-00 Hitachi Ops Center Analyzer versions prior to 11.0.5-00 Description A Cross-Site Scripting issue exists in the Analytics probe component of Hitachi Infrastructure Analytics...

Hitachi Ops Center Administrator 安全漏洞

Hitachi Ops Center Administrator is a management interface and tool for managing Hitachi storage devices at Hitachi, Ltd. Versions of Hitachi Ops Center Administrator prior to 11.0.8 contained security vulnerabilities, which were due to susceptibility to redirection attacks...

PT-2026-28026

Name of the Vulnerable Software and Affected Versions Pelicula versions prior to 1.10 Description The Pelicula software contains a flaw related to the deserialization of untrusted data, which can lead to object injection. This issue impacts the pelicula-video-production-and-movie-theme...

Plexus-Utils 安全漏洞

Plexus-Utils is a general-purpose utility program developed by Plexus. This program is primarily used to simplify the handling of strings, files, command lines, and XML data. Versions of Plexus-Utils prior to 20c2f80 contained security vulnerabilities. These vulnerabilities stemmed from the extra...

Signify 安全漏洞

Signify is a digital code signing verification and inspection tool developed by Ralph Broenink. Versions of Signify prior to 0.9.2 contained security vulnerabilities. These vulnerabilities were caused by issues with the signeddata.py and context.py components, which could allow remote attackers t...

Ericsson Indoor Connect 安全漏洞

Ericsson Indoor Connect is a small indoor base station developed by the Swedish company Ericsson. Versions of Ericsson Indoor Connect 8855 prior to 2025.Q3 contained security vulnerabilities. These vulnerabilities were due to susceptibility to cross-site request forgery attacks, which could lead ...

WordPress plugin Riode 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. Versions of...

PT-2026-27892

Name of the Vulnerable Software and Affected Versions uixthemes Motta Addons versions prior to 1.6.1 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker ...

PT-2026-27891

Name of the Vulnerable Software and Affected Versions Ricky versions prior to 2.31 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. Recommendations Update to version 2.31 or later...