3106 matches found
CVE-2023-7229
The illi Link Party! WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
Exploit for Incorrect Privilege Assignment in Themewinter Eventin
🚨 CVE-2025-47539 – WordPress Eventin Plugin Critical Exploit...
Exploit for Unrestricted Upload of File with Dangerous Type in Webfulcreations Computer_Repair_Shop
Wordpress Computer Repair Shop = 3.8115 - Unauthenticated Arb...
NETGEAR RAX5 vif_disable function command injection vulnerability
The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that stems from the iface parameter in the vifdisable function failing to correctly filter constructed command special characters, commands, and so on. An attacker can exploit this...
Tenda RX2 Pro Access Control Error Vulnerability
Tenda RX2 Pro is a high performance WiFi 6 signal amplifier from Tenda China. The Tenda RX2 Pro suffers from an access control error vulnerability that can be exploited by an attacker to enable ate management binary...
WordPress Advanced File Manager plugin missing license vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A lack of authorization vulnerability exists in the WordPress Advanced File Manager plugin that stems from a lack of authorization and can be exploited by an attacker to modify...
PT-2025-20667 · Unknown · Ctcms Content Management System
Name of the Vulnerable Software and Affected Versions: CTCMS Content Management System version 2.1.2 Description: A critical issue was found in the function del of the file ctcmsappscontrollersadminTpl.php of the component File Handler. The manipulation of the argument File leads to path traversa...
Huawei HarmonyOS Out-of-Bounds Read/Write Vulnerability
Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from an out-of-bounds read/write vulnerability. The vulnerability stems from the kernel module failing to properly check array boundaries when processing certain data. An attacker can exploit this...
Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to bypass signature validation in XML data [CVE-2025-29774] [CVE-2025-29775]
Summary Node.js module xml-crypto is used by IBM App Connect Enterprise Certified Container for handling XML data. IBM App Connect Enterprise Certified Container operands are vulnerable to signature validation bypass. This bulletin provides patch information to address the reported vulnerability ...
CVE-2025-47729
The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL aka Archive Signal app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as...
Moodle Authorization Issues Vulnerability
Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from an authorization issue vulnerability that stems from an insufficient capability check, which can be...
CVE-2025-4096
Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
PT-2025-24451
Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A flaw exists in the LockTaskController.java component within the Android operating system. A logic error in the startLockTaskMode function may allow a bypass of the lock screen, potentiall...
CVE-2025-3976
The CVE-2025-3976 entry affects PHPGurukul COVID19 Testing Management System v1.0, specifically the /new-user-testing.php endpoint. The vulnerability is an SQL injection caused by manipulation of the mobilenumber parameter, exploitable remotely. Multiple connected sources corroborate the affected...
Exploit for CVE-2025-29927
CVE-2025-29927 ★ CVE-2025-29927 Next.js middleware bypass PoC...
PT-2025-17503 · Unknown · Rbaer List Last Changes
Name of the Vulnerable Software and Affected Versions: rbaer List Last Changes versions n/a through 1.2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...
Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15528)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a security issue in the SVG parsing module, and can be exploited by an attacker to affe...
Huawei HarmonyOS Privilege Bypass Vulnerability
Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from a privilege bypass vulnerability that originates from a kernel futex module memory write privilege bypass, which can be exploited by an attacker to affect service confidentiality...
