CVE-2025-65009 Insecure Password Storage in WODESYS WD-R608U router

In WODESYS WD-R608U router also known as WDR122B V2.0 and WDR28 admin password is stored in configuration file as plaintext and can be obtained by unauthorized user by direct references to the resource in question. The vendor was notified early about this vulnerability, but didn't respond with th...

CVE-2025-65008

CVE-2025-65008 affects the WODESYS WD-R608U router (WDR122B V2.0 / WDR28). Root cause: lack of input validation in the langGet parameter of the adm.cgi endpoint, enabling an attacker to execute system shell commands. Only WDR28081123OV1.01 has been tested as vulnerable; other versions may also be...

CVE-2021-2135

creationtimestamp| type| source ---|---|--- 2025-12-06 04:16:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-2135.yaml 2025-12-09 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m7lgxdvqlv2w...

CVE-2023-2734

creationtimestamp| type| source ---|---|--- 2025-11-30 13:09:53+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-2734.yaml 2025-12-01 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6xda4wo3z2j...

CVE-2025-10211

creationtimestamp| type| source ---|---|--- 2025-11-29 09:41:41+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-10211.yaml 2025-12-01 21:02:40+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6xda5ntpo2f 2026-02-02...

CVE-2025-10210

creationtimestamp| type| source ---|---|--- 2025-11-29 09:24:53+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-10210.yaml 2025-12-01 21:02:39+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6xda5kwa52g...

PT-2025-41: The Twinkly Light Tree 3D firmware uses a vulnerable Blufi library

The vulnerability was identified in the Twinkly Light Tree 3D firmware, 2.8.18. An attacker within Bluetooth range, with physical access to a device running firmware prior to 2.9.0 and provisioning mode manually re-enabled could, in an attack scenario, interfere with the provisioning exchange and...

CVE-2019-19822

creationtimestamp| type| source ---|---|--- 2025-11-20 11:49:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-19822.yaml 2025-11-21 21:02:47+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lbcxs22j...

CVE-2017-14725

creationtimestamp| type| source ---|---|--- 2025-11-20 02:20:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-14725.yaml 2025-11-21 21:02:45+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lb2kbc2b...

CVE-2017-17092

creationtimestamp| type| source ---|---|--- 2025-11-20 02:12:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-17092.yaml 2025-11-21 21:02:45+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lb5cds25...

CVE-2025-51991

creationtimestamp| type| source ---|---|--- 2025-11-13 00:35:06+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-51991.yaml...

CVE-2025-51990

creationtimestamp| type| source ---|---|--- 2025-11-11 13:01:14+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-51990.yaml 2025-11-12 21:02:39+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m5hkesk3xu2l...

CVE-2025-52472

creationtimestamp| type| source ---|---|--- 2025-11-03 04:08:11+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-52472.yaml 2025-11-03 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m4qw67lswh26 2025-11-04...

PT-2025-114: Stored XSS in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to inject arbitrary HTML tags and JavaScript, leading to script execution in victims’ browsers and enabling social‑engineering attacks. Vulnerability status: Confirmed by vendor Date of...

CVE-2024-6690

creationtimestamp| type| source ---|---|--- 2025-10-27 01:52:34+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-6690.yaml 2025-10-27 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m47cvwti532k 2025-12-02...

CVE-2021-30118

creationtimestamp| type| source ---|---|--- 2025-10-11 05:03:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-30118.yaml 2025-10-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-10-12 2025-10-12...

SUSE CVE-2023-53635

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: fix wrong ct-timeout value struct nfconn-timeout is an interval before the conntrack confirmed. After confirmed, it becomes a timestamp. It is observed that timeout of an unconfirmed conntrack: - Set by...

CVE-2021-20086

creationtimestamp| type| source ---|---|--- 2025-10-08 16:18:35+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-20086.yaml 2025-10-13 21:02:39+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m344f7fx4c2g 2026-04-30...

AZL-76410 CVE-2023-53635 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: fix wrong ct-timeout value struct nfconn-timeout is an interval before the conntrack confirmed. After confirmed, it becomes a timestamp. It is observed that timeout of an unconfirmed conntrack: - Set by...

CVE-2023-53635

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: fix wrong ct-timeout value struct nfconn-timeout is an interval before the conntrack confirmed. After confirmed, it becomes a timestamp. It is observed that timeout of an unconfirmed conntrack: - Set by...