CVE-2025-27561

Unauthenticated attackers can rename "rooms" of arbitrary users...

CVE-2025-27561

Unauthenticated attackers can rename "rooms" of arbitrary users...

CVE-2025-26857

Unauthenticated attackers can rename arbitrary devices of arbitrary users i.e., EV chargers...

CVE-2025-27561

CVE-2025-27561 affects Growatt Cloud Applications (Growatt Cloud Portal). Multiple connected sources identify unauthenticated attackers can rename the target user’s “rooms,” with associated risk of unauthorized changes to user data and device groupings. Public records point to Growatt Cloud Appli...

CVE-2025-26857 Growatt Cloud portal Authorization Bypass Through User-Controlled Key

Unauthenticated attackers can rename arbitrary devices of arbitrary users i.e., EV chargers...

Growatt Cloud Applications security vulnerabilities

Growatt Cloud Applications is a monitoring platform from Growatt, a Chinese company. A security vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which originates from an unauthenticated attacker being able to rename any user's device...

CVE-2025-26857: Authorization Bypass Through User-Controlled Key

Unauthenticated attackers can rename arbitrary devices of arbitrary users i.e., EV chargers...

PT-2025-16530

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue allows unauthenticated attackers to rename "rooms" of arbitrary users. This can potentially lead to unauthorized modifications of user settings or data. Recommendations At the moment...

CVE-2025-27561: Authorization Bypass Through User-Controlled Key

Unauthenticated attackers can rename "rooms" of arbitrary users...

Growatt Cloud Applications security vulnerabilities

Growatt Cloud Applications is a monitoring platform from Growatt, a Chinese company. A security vulnerability exists in Growatt Cloud Applications 3.6.0 and prior versions, which originates from an unauthenticated attacker who can rename the rooms of any user...

Security update for python-requests

This update for python-requests fixes the following issues: Add patch to inject the default CA bundles if they are not specified. bsc1226321, bsc1231500 Remove Requires on python-py. update to 2.32.3: Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. Fixe...

PT-2025-12992

Name of the Vulnerable Software and Affected Versions ScriptCase versions prior to 1.0.003 - Build 3 Description A cross-site scripting XSS issue allows attackers to execute arbitrary code via a crafted payload to the Connection Name in the New Connection and Rename Connection pages...

CVE-2025-29322: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in ScriptCase before v1.0.003 - Build 3 allows attackers to execute arbitrary code via a crafted payload to the "Connection Name" in the New Connection and Rename Connection pages...

The `trust-dns` project has been rebranded to `hickory-dns`

The trust-dns-proto crate is now available as hickory-proto...

CVE-2025-2195

A vulnerability was found in MRCMS 3.1.2. It has been classified as problematic. Affected is the function rename of the file /admin/file/rename.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument name/path leads to cross site scripting. It is possib...

CVE-2025-2195

A vulnerability was found in MRCMS 3.1.2. It has been classified as problematic. Affected is the function rename of the file /admin/file/rename.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument name/path leads to cross site scripting. It is possib...

CVE-2025-2195

CVE-2025-2195 affects MRCMS 3.1.2, where the vulnerable component is the rename function in /admin/file/rename.do (org.marker.mushroom.controller.FileController). The manipulation of the name/path argument enables cross-site scripting (XSS); the issue can be exploited remotely and exploitation ha...

PT-2025-10752 · Mrcms · Mrcms

Name of the Vulnerable Software and Affected Versions: MRCMS version 3.1.2 Description: A problem was found in the rename function of the /admin/file/rename.do file in the org.marker.mushroom.controller.FileController component. The manipulation of the name/path argument leads to cross-site...

kernel security update

5.14.0-503.31.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

PT-2025-9978

Name of the Vulnerable Software and Affected Versions ChestnutCMS version 1.5.2 Description A problematic vulnerability was found in the renameFile function of the /cms/file/rename API endpoint. The manipulation of the rename argument leads to path traversal. The exploit has been publicly...