BELL-CVE-2023-53314

Bulletin has no description...

BELL-CVE-2023-53310

Bulletin has no description...

BELL-CVE-2023-53311

Bulletin has no description...

WordPress plugin Appointmind 跨站脚本漏洞

WordPress Appointmind plugin is an online appointment management plugin for WordPress, mainly used to embed the online appointment scheduling feature into posts or sidebars. WordPress Appointmind plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of...

BELL-CVE-2023-53230

Bulletin has no description...

BELL-CVE-2023-53147

Bulletin has no description...

ECHO-3BC3-A44F-A8A4

Bulletin has no description...

ECHO-5B27-F272-CF44

Bulletin has no description...

CGA-H65Q-M4MJ-497W

Bulletin has no description...

BELL-CVE-2025-38706

Bulletin has no description...

WordPress Plugin All Bootstrap Blocks Access Control Break Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control disruption vulnerability exists in the WordPress plugin All Bootstrap Blocks, which...

CGA-3VCP-56CF-5R8Q

Bulletin has no description...

BELL-CVE-2025-38660

Bulletin has no description...

BELL-CVE-2025-38634

Bulletin has no description...

CVE-2025-25737

Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units RSUs v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack secure password requirements for its BIOS Supervisor and User accounts, allowing attackers to bypass authentication via a bruteforce attack...

CVE-2025-55627

Insufficient privilege verification in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows authenticated attackers to create accounts with elevated privileges...

CGA-6M47-JXQ3-3XRP

Bulletin has no description...

CGA-62VF-C468-2P4G

Bulletin has no description...

CVE-2025-47870 Team invite ID leaked to team admin with no member invite privileges

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.9.x = 10.9.2 fail to sanitize the team invite ID in the POST /api/v4/teams/:teamId/restore endpoint which allows an team admin with no member invite privileges to get the team’s invite id...

CVE-2025-55746 Directus allows unauthenticated file upload and file modification due to lacking input sanitization

Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnerability exists in the file update mechanism which allows an unauthenticated actor to modify existing files with arbitrary contents without changes being applied to the files'...