7011 matches found
CVE-2024-28988
SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability was found by the ZDI team after researching a previous vulnerability and providing...
WordPress LTL Freight Quotes – Day & Ross Edition Plugin <= 2.1.11 - PHP Object Injection Vulnerability
PHP Object Injection Vulnerability discovered by mcdruid in WordPress Plugin LTL Freight Quotes – Day & Ross Edition versions = 2.1.11...
CVE-2025-58642
Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Day & Ross Edition ltl-freight-quotes-day-ross-edition allows Object Injection.This issue affects LTL Freight Quotes – Day & Ross Edition: from n/a through = 2.1.11...
CVE-2025-58642 WordPress LTL Freight Quotes – Day & Ross Edition Plugin <= 2.1.11 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Day & Ross Edition ltl-freight-quotes-day-ross-edition allows Object Injection.This issue affects LTL Freight Quotes – Day & Ross Edition: from n/a through = 2.1.11...
CVE-2025-58642 WordPress LTL Freight Quotes – Day & Ross Edition Plugin <= 2.1.11 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Day & Ross Edition ltl-freight-quotes-day-ross-edition allows Object Injection.This issue affects LTL Freight Quotes – Day & Ross Edition: from n/a through = 2.1.11...
CVE-2025-58642
CVE-2025-58642 corresponds to a Deserialization of Untrusted Data vulnerability in the WordPress plugin LTL Freight Quotes – Day & Ross Edition. Affected: Day & Ross Edition up to 2.1.11. Root cause: PHP object injection via untrusted data deserialization. Impact (as stated): high confidentiality...
WordPress plugin LTL Freight Quotes – Day & Ross Edition 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...
PT-2025-35770
Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – Day & Ross Edition versions through 2.1.11 Description: Deserialization of untrusted data in LTL Freight Quotes – Day & Ross Edition allows object injection. Recommendations: At the moment, there is no information about a...
CVE-2025-57775
creationtimestamp| type| source ---|---|--- 2025-09-02 20:44:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxuyatkrbh27 2025-09-04 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-888/...
CVE-2025-57774
creationtimestamp| type| source ---|---|--- 2025-09-02 20:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxuxz5ywjj2z 2025-09-04 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-887/...
China Is About to Show Off Its New High-Tech Weapons to the World
On September 3, China will hold a “Victory Day” military parade in Tiananmen Square to celebrate the 80th anniversary of its victory over Japan—and to send the West a message...
CVE-2025-50974
The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...
Hackers Exploit CrushFTP Zero-Day to Take Over Servers
WatchTowr Labs uncovers a zero-day exploit CVE-2025-54309 in CrushFTP. The vulnerability lets hackers gain admin access via the…...
FreePBX Servers Targeted by Zero-Day Flaw, Emergency Patch Now Available
The Sangoma FreePBX Security Team has issued an advisory warning about an actively exploited FreePBX zero-day vulnerability that impacts systems with an administrator control panel ACP exposed to the public internet. FreePBX is an open-source private branch exchange PBX platform widely used by...
Agentic Discovery and Validation of Android App Vulnerabilities
Existing Android vulnerability detection tools overwhelm teams with thousands of low-signal warnings yet uncover few true positives. Analysts spend days triaging these results, creating a bottleneck in the security pipeline. Meanwhile, genuinely exploitable vulnerabilities often slip through,...
CVE-2025-43284
creationtimestamp| type| source ---|---|--- 2025-08-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-878/...
CVE-2025-7775: Critical NetScaler vulnerability exploited in-the-wild
Overview On August 26, 2025, Citrix published a security bulletin for three new vulnerabilities affecting NetScaler ADC and NetScaler Gateway. Of the three vulnerabilities disclosed, the vendor has indicated that CVE-2025-7775 has been exploited in-the-wild by an as-yet unknown threat actor. As...
Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability
This vulnerability could allow remote attackers to bypass authentication on systems that use the affected version of the Cockroach Labs cockroach-k8s-request-cert container image. The specific flaw exists within the configuration of the system shadow file. The issue results from a blank password...