CVE-2025-4474

The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fedadminsettingformfunction function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to overwrite the...

SUSE CVE-2025-46803

The default mode of pseudo terminals PTYs allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in the system...

AMD Optimizing CPU Libraries 安全漏洞

AMD Optimizing CPU Libraries is a suite of mathematical function libraries from UltraMicroelectronics AMD. A security vulnerability exists in AMD Optimizing CPU Libraries, which stems from improperly setting the default permissions of the installation directory, which could lead to elevation of...

PT-2025-21059 · Unknown · Endurance Gaming Mode

Name of the Vulnerable Software and Affected Versions: Endurance Gaming Mode affected versions not specified Description: The issue concerns incorrect default permissions for some Endurance Gaming Mode software installers. This may allow an authenticated user to potentially enable escalation of...

charts 安全漏洞

charts is a Bitnami charting tool from Bitnami Open Source. A security vulnerability exists in charts that stems from a default configuration that allows unauthenticated database access...

AMD Manageability API 安全漏洞

The AMD Manageability API is an enterprise-class hardware management interface suite from UltraMicroelectronics AMD that provides out-of-band server management capabilities. A security vulnerability exists in the AMD Manageability API that stems from improperly set default permissions, which coul...

Siemens VersiCharge AC Series 安全漏洞

The VersiCharge AC Series Electric Vehicle Charger is an electric vehicle charging device from Siemens for a variety of application scenarios, including workplaces, retail, parking lots, multi-unit housing, public charging and home charging. An arbitrary code execution vulnerability exists in the...

Intel RealSense SDK 安全漏洞

Intel RealSense SDK is a depth perception camera development kit from Intel Corporation USA that supports 3D vision application development. A security vulnerability exists in Intel RealSense SDK versions prior to 2.56.2, which stems from improper default permissions and may result in elevated...

Unspecified Vulnerability in Zoom Workplace Apps for Windows

Zoom Workplace Apps for Windows is an official suite of collaboration tools from Zoom that includes core features such as team chat, whiteboards, notes, and more, and is required to be used through a Zoom Meetings account. A security vulnerability exists in Zoom Workplace Apps for Windows, which...

PT-2025-20907 · Ivanti · Ivanti Cloud Services Application

Name of the Vulnerable Software and Affected Versions: Ivanti Cloud Services Application versions prior to 5.0.5 Description: The issue concerns default credentials in the Ivanti Cloud Services Application, allowing a local authenticated attacker to escalate their privileges. Recommendations: For...

Ivanti Cloud Services Application 安全漏洞

The Ivanti Cloud Services Application CSA is a locally deployed virtual appliance designed to simplify and enhance the integration of Ivanti products with cloud services. An elevation of privilege vulnerability exists in Ivanti Cloud Services Application, which is derived from default credentials...

GNU Screen 安全漏洞

Gnu Screen is an application from the American GNU community. It provides the effect of getting multiple virtual terminals on one physical terminal. Gnu Screen suffers from a security vulnerability that stems from a pseudo-terminal default mode change, which can be exploited by an attacker to cau...

Intel Graphics 安全漏洞

Intel Graphics is a family of graphics cards from Intel Corporation USA. A security vulnerability exists in Intel Graphics that stems from an improperly set default privilege, which could lead to local elevation of privilege...

Intel Endurance Gaming Mode 安全漏洞

Intel Endurance Gaming Mode is a feature from Intel Corporation USA used to extend the gaming life of laptops when unplugged. A security vulnerability exists in Intel Endurance Gaming Mode that stems from improperly set default permissions, which could result in elevated local privileges...

Exploit for External Control of File Name or Path in Emagicone Emagicone_Store_Manager_For_Woocommerce

eMagicOne Store Manager for WooCommerce md5 EMOSMCDEFAULT...

Exploit for External Control of File Name or Path in Emagicone Emagicone_Store_Manager_For_Woocommerce

eMagicOne Store Manager for WooCommerce md5 EMOSMCDEFAULT...

CVE-2025-28200

Victure RX1800 ENV1.0.0r12110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address...

CVE-2025-28200

Victure RX1800 ENV1.0.0r12110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address...

Victure RX1800 安全漏洞

The Victure RX1800 is a wireless router from Victure. A security vulnerability exists in the Victure RX1800 ENV1.0.0r12110933 version that stems from the use of a weak default password...

CVE-2025-28200

The Victure RX1800 wireless router, specifically version EN_V1.0.0_r12_110933 , is vulnerable due to the use of a weak default password . This default password is derived from the last 8 digits of the device's MAC address . Exploitation details are not provided in the documents. To mitigate risk,...