CVE-2025-57428

Default credentials in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to gain access to the debug shell exposed via Telnet on Port 23 and execute hardware-level flash and register manipulation commands...

PT-2025-39828

Name of the Vulnerable Software and Affected Versions Italy Wireless Mini Router WIRELESS-N 300M version v28K.MiniRouter.20190211 Description Default credentials in the Italy Wireless Mini Router WIRELESS-N 300M version v28K.MiniRouter.20190211 allow attackers to access the debug shell exposed vi...

CVE-2025-57428

The CVE-2025-57428 entry concerns Italy Wireless Mini Router WIRELESS-N 300M, firmware v28K.MiniRouter.20190211. Publicly available material confirms a default Telnet debug interface on port 23, with admin/admin credentials, granting access to a low-level shell. The exploit log shows commands suc...

CVE-2025-57428

Default credentials in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to gain access to the debug shell exposed via Telnet on Port 23 and execute hardware-level flash and register manipulation commands...

WordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by dutafi in WordPress Plugin WordPress Social Login and Register versions = 7.7.0...

Exploit for CVE-2025-57428

CVE-2025-57428 - Telnet debug interface enabled by default all...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

PT-2025-39181

Name of the Vulnerable Software and Affected Versions YzmCMS versions through 7.3 Description A cross-site scripting issue exists in YzmCMS. The issue is related to the handling of the referer header on the register page, which could allow for malicious code execution. The referer header is a...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304

CVE-2025-56304 is an XSS vulnerability affecting YzmCMS up to version 7.3, caused by improper handling of the referer header on the registration page. The issue could allow crafted input via the referer header to be reflected in the app, enabling cross-site scripting with user interaction require...

CVE-2025-10489

The SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more plugin for WordPress is vulnerable to unauthorized creation of forms due to a missing capability check on the registerposttypes function in all versions up to, and including, 1.12.0. This makes it...

PT-2025-44099

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the register shm helper function related to incorrect error handling during a call to iov iter extract pages. Specifically, a missing case exists wher...

CVE-2025-10489

The SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more plugin for WordPress is vulnerable to unauthorized creation of forms due to a missing capability check on the registerposttypes function in all versions up to, and including, 1.12.0. This makes it...

CVE-2025-10489

CVE-2025-10489 SureForms (WordPress) — Vulnerable to unauthorized form creation due to a missing capability check in register_post_types() for all versions up to 1.12.0. Authenticated attackers with Contributor-level access and above can create forms even when the UI blocks it. Impact per availab...

CVE-2025-10489 SureForms – Drag and Drop Form Builder for WordPress <= 1.12.0 - Missing Authorization to Authenticated (Contributor+) Form Creation

The SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more plugin for WordPress is vulnerable to unauthorized creation of forms due to a missing capability check on the registerposttypes function in all versions up to, and including, 1.12.0. This makes it...

CVE-2025-10489 SureForms – Drag and Drop Form Builder for WordPress <= 1.12.0 - Missing Authorization to Authenticated (Contributor+) Form Creation

The SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more plugin for WordPress is vulnerable to unauthorized creation of forms due to a missing capability check on the registerposttypes function in all versions up to, and including, 1.12.0. This makes it...

PT-2025-38631

Name of the Vulnerable Software and Affected Versions SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more plugin for WordPress versions through 1.12.0 Description The SureForms plugin for WordPress is susceptible to unauthorized form creation due to a...