CVE-2025-47681

CVE-2025-47681 : WordPress Web Accessibility with Max Access (Max Access)

FreeBSD : chromium -- multiple security fixes (db221414-2b0d-11f0-8cb5-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the db221414-2b0d-11f0-8cb5-a8a1599412c6 advisory. Chrome Releases reports: This update includes 2 security fixes: Tenable has extracted the preceding...

CVE-2025-29526

A Cross-Site Scripting XSS vulnerability in the search function of Q4 Inc Investor Relations Platform v5.147.1.2 allows attackers to execute arbitrary Javascript via injecting a crafted payload into the SearchTerm parameter...

CVE-2025-39599

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Webilia Inc. Listdom listdom allows Phishing.This issue affects Listdom: from n/a through = 4.0.0...

CVE-2025-29526

A Cross-Site Scripting XSS vulnerability in the search function of Q4 Inc Investor Relations Platform v5.147.1.2 allows attackers to execute arbitrary Javascript via injecting a crafted payload into the SearchTerm parameter...

PT-2025-17651 · Q4 · Q4 Inc Investor Relations Platform

Name of the Vulnerable Software and Affected Versions: Q4 Inc Investor Relations Platform version 5.147.1.2 Description: A Cross-Site Scripting XSS issue in the search function allows attackers to execute arbitrary Javascript by injecting a crafted payload into the SearchTerm parameter. This...

CVE-2025-29526

A Cross-Site Scripting XSS vulnerability in the search function of Q4 Inc Investor Relations Platform v5.147.1.2 allows attackers to execute arbitrary Javascript via injecting a crafted payload into the SearchTerm parameter...

CVE-2025-29526

The CVE-2025-29526 entry affects Q4 Inc Investor Relations Platform v5.147.1.2, where an unfiltered input in the SearchTerm parameter of the search function enables Cross-Site Scripting (XSS), allowing arbitrary Javascript execution. Affected component: Search feature; root cause: insufficient in...

CVE-2025-29526

A Cross-Site Scripting XSS vulnerability in the search function of Q4 Inc Investor Relations Platform v5.147.1.2 allows attackers to execute arbitrary Javascript via injecting a crafted payload into the SearchTerm parameter...

CVE-2025-26748

Cross-Site Request Forgery CSRF vulnerability in looswebstudio Arkhe arkhe allows PHP Local File Inclusion.This issue affects Arkhe: from n/a through = 3.12.0...

Winzip for Mac SEoL (7.0.x)

According to its version, Winzip For Mac is 7.0.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

CVE-2025-39599

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Webilia Inc. Listdom listdom allows Phishing.This issue affects Listdom: from n/a through = 4.0.0...

CVE-2025-39599 WordPress Listdom <= 4.0.0 - Open Redirection Vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Webilia Inc. Listdom allows Phishing. This issue affects Listdom: from n/a through 4.0.0...

CVE-2025-39599

CVE-2025-39599 is a URL Redirection to Untrusted Site vulnerability in the WordPress plugin Listdom . Affected versions are listed as “n/a through 4.0.0”; the issue can enable phishing via open redirects. The CVE entry reports a CVSS v3.1 base score of 4.7 (Medium) with network attack vector, req...

CVE-2025-26748

Cross-Site Request Forgery CSRF vulnerability in looswebstudio Arkhe arkhe allows PHP Local File Inclusion.This issue affects Arkhe: from n/a through = 3.12.0...

CVE-2025-26748

CVE-2025-26748 is a CSRF to Local File Inclusion vulnerability affecting Arkhe theme (Arkhe) by LOOS,Inc. Details from Wordfence indicate Arkhe is affected up to version 3.11.0, with a CVSS v3.1 base score of 8.1 (HIGH) and attack vector NETWORK, requiring no privileges and no user interaction. T...

CVE-2023-1656

Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server RCS LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Connector Server RCS: from 1.5.20.9 throug...

CVE-2025-32650

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ability, Inc Accessibility Suite online-accessibility allows SQL Injection.This issue affects Accessibility Suite: from n/a through = 4.18...

CVE-2025-32650

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ability, Inc Accessibility Suite online-accessibility allows SQL Injection.This issue affects Accessibility Suite: from n/a through = 4.18...

CVE-2025-32650 WordPress Accessibility Suite by Ability, Inc plugin <= 4.18 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ability, Inc Accessibility Suite online-accessibility allows SQL Injection.This issue affects Accessibility Suite: from n/a through = 4.18...