CVE-2023-25446

Missing Authorization vulnerability in HappyFiles HappyFiles Pro happyfiles-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HappyFiles Pro: from n/a through 1.8.1...

CVE-2023-31240

Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC cloud contains a hidden superuser account accessible through hard-coded credentials...

CVE-2023-40608

Missing Authorization vulnerability in Paid Memberships Pro Paid Memberships Pro CCBill Gateway.This issue affects Paid Memberships Pro CCBill Gateway: from n/a through 0.3...

CVE-2023-40214

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Vathemes Business Pro theme = 1.10.4 versions...

CVE-2021-31845

A buffer overflow vulnerability in McAfee Data Loss Prevention DLP Discover prior to 11.6.100 allows an attacker in the same network as the DLP Discover to execute arbitrary code through placing carefully constructed Ami Pro .sam files onto a machine and having DLP Discover scan it, leading to...

CVE-2025-23519

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jas Saran G Web Pro Store Locator gwebpro-store-locator allows Reflected XSS.This issue affects G Web Pro Store Locator: from n/a through = 2.0.1...

CVE-2025-46494

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themesgrove WidgetKit Pro allows Reflected XSS.This issue affects WidgetKit Pro: from n/a through 1.13.1...

CVE-2022-37334

Improper initialization in BIOS firmware for some IntelR NUC 11 Pro Kits and IntelR NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34761

Vulnerability discovered by executing a planned security audit. Improper Control of Generation of Code 'Code Injection' vulnerability in WPENGINE INC Advanced Custom Fields PRO allows Code Injection.This issue affects Advanced Custom Fields PRO: from n/a before 6.2.10...

CVE-2024-34762

Vulnerability discovered by executing a planned security audit. Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPENGINE INC Advanced Custom Fields PRO allows PHP Local File Inclusion.This issue affects Advanced Custom Fields PRO: from n/a before 6.2....

CVE-2024-39634

Improper Privilege Management vulnerability in IdeaBox PowerPack Pro for Elementor allows Privilege Escalation.This issue affects PowerPack Pro for Elementor: from n/a through 2.10.14...

CVE-2025-66315

There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an attacker can execute write permissions in a specific directory...

CVE-2025-66315

There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an attacker can execute write permissions in a specific directory...

CVE-2025-66315 ZTE MF258K Pro Version Server has a Configuration Defect Vulnerability

There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an attacker can execute write permissions in a specific directory...

CVE-2025-66315 ZTE MF258K Pro Version Server has a Configuration Defect Vulnerability

There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an attacker can execute write permissions in a specific directory...

CVE-2025-66315

CVE-2025-66315 affects ZTE MF258K Pro, where the Version Server has a configuration defect due to improperly set directory permissions. This enables a write operation to a specific directory from the network. The NVD entry reports a high impact (C/H/I/A) with network access, low attack complexity...

PT-2026-1857

Name of the Vulnerable Software and Affected Versions ZTE MF258K Pro versions affected versions not specified Description A configuration issue exists in the version server of ZTE MF258K Pro products. This is due to incorrect directory permission settings, which allow an attacker to gain write...

CVE-2025-67133

An issue in Hero Motocorp Vida V1 Pro 2.0.7 allows a local attacker to cause a denial of service via the BLE component...

Hero Motocorp Vida V1 Pro 安全漏洞

Hero Motocorp Vida V1 Pro is a smart electric scooter from Hero India. Hero Motocorp Vida V1 Pro version 2.0.7 suffers from a security vulnerability that originates in the BLE component and could lead to a denial of service attack...

PT-2026-1873

Name of the Vulnerable Software and Affected Versions Hero Motocorp Vida V1 Pro version 2.0.7 Description An issue exists in the Hero Motocorp Vida V1 Pro that allows a local attacker to cause a denial of service through the BLE component. Recommendations At the moment, there is no information...