CVE-2025-12477: Missing Authentication for Critical Function

Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

appsec-sentinel

AppSec-Sentinel AI-powered security scanner with cross-file...

CVE-2025-54605: Uncontrolled Resource Consumption

Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption issue 2 of 2...

CVE-2025-36081: Improper Output Neutralization for Logs

IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input...

CVE-2025-60354: Improper Access Control

Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...

CVE-2025-55758: Cross-Site Request Forgery (CSRF)

Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered...

CVE-2025-12424: Improper Privilege Management

Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12425: Improper Privilege Management

Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

Ghost Web App Detection

Binary data ghostdetect.nbin...

CVE-2025-10150: Deadlock

Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31...

CVE-2025-43024: Exposure of Sensitive System Information to an Unauthorized Control Sphere

A GUI dialog of an application allows to view what files are in the file system without proper authorization...

CVE-2023-49440: Improper Neutralization of Special Elements used in an SQL Command

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...

CVE-2025-59463: Deadlock

An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers...

CVE-2025-59460: Use of Weak Credentials

The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections...

Wapiti Web Application Vulnerability Scanner 3.2.8

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the binary release...

CVE-2025-62919: Missing Authorization

Missing Authorization vulnerability in themeshopy TS Demo Importer ts-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TS Demo Importer: from n/a through = 0.1.3...

CVE-2025-62928: Missing Authorization

Missing Authorization vulnerability in Joby Joseph SEO Meta Description Updater seo-meta-description-updater allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Meta Description Updater: from n/a through = 1.2.0...

CVE-2025-62881: Missing Authorization

Missing Authorization vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Lister Lite for eBay: from n/a through = 3.8.3...

CVE-2025-62931: Missing Authorization

Missing Authorization vulnerability in microsoftstart MSN Partner Hub microsoft-start allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MSN Partner Hub: from n/a through = 2.9...

Linux Distros Unpatched Vulnerability : CVE-2022-50580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blk-throttle: prevent overflow while calculating wait time There is a problem found by code review in tgwithinbpslimit that 'bpslimit jiffyelapsedrnd' might...