CVE-2025-2585

EBM Maintenance Center From EBM Technologies has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-2585

CVE-2025-2585 concerns the EBM Maintenance Center from EBM Technologies. Multiple connected sources confirm a SQL Injection vulnerability that allows remote attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents. The issue is driven by imp...

EBM Technologies EBM Maintenance Center SQL注入漏洞

EBM Technologies EBM Maintenance Center is a maintenance center platform from China-based EBM Technologies EBM Technologies. A SQL injection vulnerability exists in EBM Technologies EBM Maintenance Center versions prior to 25.04.31435, which stems from an SQL injection that could lead to a remote...

CVE-2024-12580

A vulnerability in danny-avila/librechat prior to version 0.7.6 allows for logs debug injection. The parameters sessionId, fileId, userId, and fileid in the /code/download/:sessionId/:fileId and /download/:userId/:fileid APIs are not validated or filtered, leading to potential log injection...

SUSE-SU-2025:0892-1 Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122216 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpioid before used as array index bsc1231204. - CVE-2024-50302: HID: core: zero-initialize the report buffer bsc1233679. - CVE-2022-48792: scsi:...

The vulnerability of the Vnet/IP SCADA system of Yokogawa CENTUM VP allows a intruder to execute arbitrary code and trigger a maintenance failure.

The vulnerability of the Vnet/IP SCADA system of Yokogawa CENTUM VP is related to a countable loss of significance. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and cause service failures by sending specially crafted packets...

CVE-2025-0116

A Denial of Service DoS vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent attacker. Repeated attempts to initiate this condition causes the firewall to enter maintenance...

CVE-2025-28859

Cross-Site Request Forgery CSRF vulnerability in CodeVibrant Maintenance Notice maintenance-notice allows Cross Site Request Forgery.This issue affects Maintenance Notice: from n/a through = 1.0.6...

CVE-2024-47573

An improper validation of integrity check value vulnerability CWE-354 in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker with at least Read/Write permission on system maintenance to install a corrupted...

CVE-2024-13054

An issue was discovered in GitLab CE/EE affecting all versions before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2. where a denial of service vulnerability could allow an attacker to cause a system reboot under certain conditions...

Fedora 41 : ffmpeg (2025-ab5fe60520)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ab5fe60520 advisory. Latest maintenance release from 7.1 branch. Changelog: https://github.com/FFmpeg/FFmpeg/blob/n7.1.1/Changelog . Contains backported fix for...

The vulnerability of the profapi.dll file, a software component used for creating, testing, documenting, publishing, and maintaining the API of an application’s software interface, allows a perpetrator to execute arbitrary code.

The vulnerability of the profapi.dll file, which is used in software for creating, testing, documenting, publishing, and maintaining the API of an application, is related to the use of an insecure path for searching. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2025-0116

A Denial of Service DoS vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent attacker. Repeated attempts to initiate this condition causes the firewall to enter maintenance...

Palo Alto Networks PAN-OS 10.1.x < 10.1.14-h11 / 10.2.x < 10.2.10-h17 / 11.1.x < 11.1.6-h6 / 11.2.x < 11.2.5 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.1.x prior to 10.1.14-h11 or 10.2.x prior to 10.2.10-h17 or 11.1.x prior to 11.1.6-h6 or 11.2.x prior to 11.2.5. It is, therefore, affected by a vulnerability. A Denial of Service DoS vulnerability in Palo Alto Networks PAN-...

WordPress Maintenance Notice plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Maintenance Notice versions = 1.0.6...

CVE-2025-28859

Cross-Site Request Forgery CSRF vulnerability in CodeVibrant Maintenance Notice maintenance-notice allows Cross Site Request Forgery.This issue affects Maintenance Notice: from n/a through = 1.0.6...

CVE-2025-28859

Cross-Site Request Forgery CSRF vulnerability in CodeVibrant Maintenance Notice allows Cross Site Request Forgery. This issue affects Maintenance Notice: from n/a through 1.0.5...

CVE-2025-28859 WordPress Maintenance Notice plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in CodeVibrant Maintenance Notice maintenance-notice allows Cross Site Request Forgery.This issue affects Maintenance Notice: from n/a through = 1.0.6...

CVE-2025-28859

CVE-2025-28859 is a CSRF vulnerability in the WordPress Maintenance Notice plugin (≤ 1.0.5). Exploitation could allow unauthorized actions on behalf of an authenticated user. Redhat/NVD entries and Patchstack indicate the fix was released in version 1.0.6; upgrading to 1.0.6 or later is the recom...

WordPress plugin Maintenance Notice 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers. A cross-site request forgery...