PT-2025-25304 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a remote code execution vulnerability. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

CVE-2025-43581

CVE-2025-43581 affects Substance3D Sampler (5.0 and earlier) with an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Connected sources confirm the vulnerability in S...

CVE-2025-47166 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2025-47164 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2025-33071 Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability

...

CVE-2025-33066 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

CVE-2025-33112

CVE-2025-33112 affects IBM AIX 7.3 (TL3) and IBM VIOS 4.1.1, where the Perl implementation does not properly neutralize pathname input, allowing a non-privileged local user to execute arbitrary code. CVSS v3.1 base score 8.4 (HIGH) with local access, no user interaction required, and impacts to c...

Description of the security update for Word 2016: June 10, 2025 (KB5002710)

None None...

Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...

Microsoft Word 安全漏洞

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

CVE-2025-3485

Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementati...

CVE-2025-47728

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...

D-Link DIR-816 Router Stack Buffer Overflow Vulnerability

The D-Link DIR-816 is a wireless router for homes and small offices SOHO that supports dual-band 2.4GHz and 5GHz wireless networking. A stack buffer overflow vulnerability exists in the D-Link DIR-816. The vulnerability stems from the incorrect operation of the parameter dipaddress/sipaddress in...

Command Execution Vulnerability in Net Video System of Tiandiwei Technology Co.

Net Video System network video system is a video processing and transmission system based on computer network technology, mainly used for real-time monitoring, video storage and remote communication. A command execution vulnerability exists in the Net Video System of Tiandiwei Technology Limited,...

Command Execution Vulnerability in SecFox Operations and Maintenance Security Management and Audit System of Chianxin Technology Group Co.

SecFox O&M Security Management and Audit System is an O&M security management solution that integrates authentication, account management, privilege control, and O&M audit, providing unified O&M authentication, fine-grained privilege control, real-time supervision, and after-the-fact traceability...

PT-2025-23919

Name of the Vulnerable Software and Affected Versions File::Find::Rule versions through 0.34 Description The issue allows for Arbitrary Code Execution when the grep function encounters a crafted filename. This is due to a file handle being opened with the 2 argument form of open, allowing an...

CVE-2025-20276 Cisco Unified Contact Center Express Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insecure...

CVE-2025-47725

Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2025-47728

CVE-2025-47728 affects Delta Electronics CNCSoft-G2. The issue is a parsing/memory-corruption flaw in DPAX file handling that can allow code execution in the context of the current process when a user opens a malicious file. Metrics indicate LOCAL attack vector with low complexity and user intera...

CVE-2025-47726

The CVE-2025-47726 entry concerns Delta Electronics CNCSoft and an out-of-bounds write caused by improper validation of user-supplied files. If a user opens a malicious file, an attacker could execute code in the context of the current process (local code execution). The available connected sourc...