PT-2025-3912 · Fanli2012 · Native-Php-Cms

Name of the Vulnerable Software and Affected Versions: Fanli2012 native-php-cms version 1.0 Description: A critical vulnerability was found in the software, affecting an unknown part of the file /fladmin/user recoverpwd.php. The manipulation leads to the use of default credentials. It is possible...

CVE-2024-12747

A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass...

WordPress Setup Default Featured Image plugin <= 1.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Setup Default Featured Image versions = 1.2...

Security update for apache2-mod_jk

This update for apache2-modjk fixes the following issues: Update to version 1.2.50: CVE-2024-46544: Fixed incorrect default permissions vulnerabilitymay that could lead to information disclosure and/or denial of service. bsc1230916 CVE-2023-41081: Fixed information disclosure in modjk. bsc1215301...

Exploit for CVE-2024-12856

CVE-2024-12856 This is an exploit for Four-Faith router models...

SUSE CVE-2024-56635

In the Linux kernel, the following vulnerability has been resolved: net: avoid potential UAF in defaultoperstate syzbot reported an UAF in defaultoperstate 1 Issue is a race between device and netns dismantles. After calling rtnlunlock from netdevruntodo, we can not assume the netns of each devic...

MegaBIP 安全漏洞

MegaBIP is a software for creating BIP websites from MegaBIP Inc. A security vulnerability exists in MegaBIP version 5.15, which stems from the fact that the default admin portal path, which is recommended to be changed during installation, is publicly available in the /registered.php source code...

firefox security update

128.6.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.6.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.6.0-1 - Update to 128.6.0 build1...

Oracle Linux 9 : firefox (ELSA-2025-0080)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0080 advisory. 128.6.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

CVE-2024-43659

After gaining access to the firmware of a charging station, a file at can be accessed to obtain default credentials that are the same across all Iocharger AC model EV chargers. This issue affects Iocharger firmware for AC models before firmware version 25010801. The issue is addressed by requirin...

CVE-2024-43659 Plaintext default credentials in firmware

After gaining access to the firmware of a charging station, a file at can be accessed to obtain default credentials that are the same across all Iocharger AC model EV chargers. This issue affects Iocharger firmware for AC models before firmware version 25010801. The issue is addressed by requirin...

CVE-2024-43659 Plaintext default credentials in firmware

After gaining access to the firmware of a charging station, a file at can be accessed to obtain default credentials that are the same across all Iocharger AC model EV chargers. This issue affects Iocharger firmware for AC models before firmware version 25010801. The issue is addressed by requirin...

CVE-2024-43659

CVE-2024-43659 affects Iocharger AC-model EV chargers running firmware prior to 25010801. The issue involves a file (redacted path) accessible after gaining firmware access, enabling retrieval of default credentials that are identical across all AC chargers. The vulnerability enables login with t...

CVE-2024-13206 REVE Antivirus reveinstall default permission

A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part of the file /usr/local/reveantivirus/tmp/reveinstall. The manipulation leads to incorrect default permissions. It is possible to launch the attack on the local host. The exploit...

CVE-2024-13206 REVE Antivirus reveinstall default permission

A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part of the file /usr/local/reveantivirus/tmp/reveinstall. The manipulation leads to incorrect default permissions. It is possible to launch the attack on the local host. The exploit...

CVE-2024-13206

REVE Antivirus 1.0.0.0 on Linux is affected by CVE-2024-13206. The vulnerability concerns an unspecified portion of /usr/local/reveantivirus/tmp/reveinstall, where manipulation causes incorrect default permissions, enabling a local attack on the host. Public exploit details exist and the vendor w...

DEBIAN-CVE-2023-38037

ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissions are defaulted to the user's current umask settings, meaning that it's possible for other users on the same system to read the contents of the temporary file. Attackers that ha...

CVE-2024-46505: Incorrect Default Permissions

Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client vulnerabilities...

REVE Antivirus 安全漏洞

REVE Antivirus is an antivirus security program from REVE Antivirus, Inc. A security vulnerability exists in REVE Antivirus version 1.0.0.0, which originates from the file /usr/local/reveantivirus/tmp/reveinstall that results in incorrect default permissions...

PT-2025-1386 · Opsview · Opsview Monitor Agent

Name of the Vulnerable Software and Affected Versions: Opsview Monitor Agent version 6.8 Description: A problem was discovered in Opsview Monitor Agent where an unauthenticated remote attacker can call check nrpe against affected targets, specifying known NRPE plugins. In default installations,...