CVE-2025-51539

EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insufficient input validation in a script exposed via the web interface. A remote attacker can supply a crafted path parameter to a PHP script to read arbitrary files from the filesystem...

Code Execution Vulnerability in MacCMS

MacCMS is a cms website builder system. A code execution vulnerability exists in MacCMS. An attacker can exploit the vulnerability to delete arbitrary files and cause system reinstallation. When reinstalling the software, malicious code is constructed to insert into the configuration file to gain...