PT-2025-18408

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel related to the io uring/net component, specifically regarding the abuse of io req post cqe by send bundles. The issue arises because...

Dolphin Pro 7.4.2 Cross Site Scripting

Dolphin Pro version 7.4.2 suffers from a persistent cross site scripting vulnerability. Exploit Title: Stored XSS via Send Message Functionality - dolphin.prov7.4.2 Date: 03/2025 Exploit Author: Andrey Stoykov Version: 7.4.2 Date: 03/2025 Tested on: Debian 12 Blog:...

CVE-2024-9920

In version v12 of parisneo/lollms-webui, the 'Send file to AL' function allows uploading files with various extensions, including potentially dangerous ones like .py, .sh, .bat, and more. Attackers can exploit this by uploading files with malicious content and then using the '/openfile' API...

PT-2025-12298

Name of the Vulnerable Software and Affected Versions parisneo/lollms-webui version v12 Description The issue arises from the 'Send file to AL' function, which allows uploading files with various extensions, including potentially dangerous ones like .py, .sh, .bat, and more. Attackers can exploit...

LoLLMs Web UI 代码问题漏洞

LoLLMs Web UI is a web user interface for large languages and multimodal systems by Saifeddine ALOUI Individual Developer. A code issue vulnerability exists in LoLLMs Web UI version v12, which stems from the Send file to AL feature that allows uploading of dangerous files, which could lead to...

CVE-2024-9920: Unrestricted Upload of File with Dangerous Type

In version v12 of parisneo/lollms-webui, the 'Send file to AL' function allows uploading files with various extensions, including potentially dangerous ones like .py, .sh, .bat, and more. Attackers can exploit this by uploading files with malicious content and then using the '/openfile' API...

CVE-2025-26127: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Send for Approval function of FileCloud v23.241.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2025-11502

Name of the Vulnerable Software and Affected Versions FileCloud version 23.241.2 Description A stored cross-site scripting XSS issue in the Send for Approval function allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations For version 23.241.2, consider...

PT-2025-14597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use after free issue has been resolved in the Linux kernel, specifically in the lec send function. The -send operation frees skb, so the length is saved before calling -send to avoid a...

PT-2025-11069 · Google · Android

Name of the Vulnerable Software and Affected Versions: bnepu affected versions not specified Description: A use-after-free issue exists in the bnepu check send packet function within bnep utils.cc. This could lead to local escalation of privilege without requiring additional execution privileges ...

WordPress plugin Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Uncanny Automator - Easy...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from accessing a skb's memory even after it has been sent, potentially leading to reuse after release...

PT-2025-11000 · WordPress · The Uncanny Automator – Easy Automation

Name of the Vulnerable Software and Affected Versions: The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress versions up to, and including, 6.2 Description: The issue allows authenticated attackers with Administrator-level access and above t...

Vulnerabilities of the MODULE_ALIAS() and j1939_send_one() functions (net/can/j1939/main.c) in the Linux operating system kernel, allowing a hacker to trigger a service failure

The vulnerability of the MODULEALIAS and j1939sendone functions net/can/j1939/main.c in the Linux operating system kernel is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-22603

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Versions prior to autogpt-platform-beta-v0.4.2 contains a server-side request forgery SSRF vulnerability inside component or block "Send Web Request". T...

AutoGPT 代码问题漏洞

AutoGPT is a tool from AutoGPT Open Source. Used to enable everyone to use and build accessible AI. A code issue vulnerability exists in versions prior to AutoGPT autogpt-platform-beta-v0.4.2, which stems from a Send Web Request component that could lead to server-side request forgery...

CVE-2025-22603: Server-Side Request Forgery (SSRF)

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Versions prior to autogpt-platform-beta-v0.4.2 contains a server-side request forgery SSRF vulnerability inside component or block Send Web Request. The...

PT-2025-9917

Name of the Vulnerable Software and Affected Versions Cookiebot CMP by Usercentrics plugin for WordPress versions up to and including 4.4.1 Description The issue allows authenticated attackers with Subscriber-level access and above to modify data by submitting the uninstall survey on behalf of a...

CVE-2025-23600

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pinal.shah Send to a Friend Addon send-booking-invites-to-friends allows Reflected XSS.This issue affects Send to a Friend Addon: from n/a through = 1.4.1...

CVE-2025-23600

CVE-2025-23600 is a reflected XSS in the WordPress plugin “Send to a Friend Addon” (versions 1.4.1 and earlier). The root cause is improper neutralization of input during web page generation, allowing attacker-supplied input to be reflected in the page. Affected component: pinal.shah Send to a Fr...