31601 matches found
WordPress BRW plugin <= 1.8.6 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin BRW versions = 1.8.6...
PT-2025-23920 · Undefined · Undefined
🚨 CVE-2025-47218 in Auth0 WordPress plugin allows insecure deserialization of cookie data. Update now to secure your WordPress site and prevent attacks. 🔧 Read more: https://t.co/vuzKCS3VVz WordPress Auth0 Security Vulert PatchNow 🛡️ https://t.co/kW0DwLRSPO...
The vulnerability of the Device Configuration component in the APIX application programming interface of the AXIS OS operating system allows a perpetrator to increase their privileges.
The vulnerability of the Device Configuration component in the APIX application programming interface of the AXIS OS operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
GHSA-V9M8-9XXP-Q492 Auth0-PHP SDK Deserialization of Untrusted Data vulnerability
Overview The Auth0 PHP SDK contains a vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, a threat actor could send a specially crafted cookie containing malicious serialized data. Am I Affected? You are...
CVE-2025-20276
A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insecure...
CVE-2025-20276
A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insecure...
CVE-2025-20276
A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insecure...
CVE-2025-20275
A vulnerability in the file opening process of Cisco Unified Contact Center Express Unified CCX Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device. This vulnerability is due to insecure deserialization of Java objects by the affected software. An attack...
CVE-2025-20275
A vulnerability in the file opening process of Cisco Unified Contact Center Express Unified CCX Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device. This vulnerability is due to insecure deserialization of Java objects by the affected software. An attack...
CVE-2025-20275
A vulnerability in the file opening process of Cisco Unified Contact Center Express Unified CCX Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device. This vulnerability is due to insecure deserialization of Java objects by the affected software. An attack...
CVE-2025-20276 Cisco Unified Contact Center Express Remote Code Execution Vulnerability
A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insecure...
CVE-2025-20276
CVE-2025-20276 affects Cisco Unified CCX web-based management interface. The root cause is insecure deserialization of Java objects, enabling an authenticated attacker with valid administrative credentials to remotely execute arbitrary code on the device’s OS, with potential to escalate to root. ...
CVE-2025-20275 Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability
A vulnerability in the file opening process of Cisco Unified Contact Center Express Unified CCX Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device. This vulnerability is due to insecure deserialization of Java objects by the affected software. An attack...
CVE-2025-20275
Cisco Unified Contact Center Express Editor contains a vulnerability due to insecure Java deserialization in the file-opening flow. An attacker could trigger arbitrary-code execution on the host by convincing a local authenticated user to open a crafted .aef file, running with the user’s privileg...
Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability
A vulnerability in the file opening process of Cisco Unified Contact Center Express Unified CCX Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device. This vulnerability is due to insecure deserialization of Java objects by the affected software. An attack...
CVE-2025-48961
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Windows before build 39938...
CVE-2025-48961
CVE-2025-48961 affects Acronis Cyber Protect 16 (Windows) prior to build 39938, with local privilege escalation caused by insecure folder permissions. The vulnerability is tied to the stated affected product/version and root cause; exploitation details are not provided in the connected documents....
CVE-2025-48961
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Windows before build 39938...
