CVE-2025-59528 Flowise has Remote Code Execution vulnerability

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided...

PT-2025-38723

Name of the Vulnerable Software and Affected Versions Tenda AC23 versions up to 16.03.07.52 Description A buffer overflow issue exists in the HTTP POST Request Handler component of Tenda AC23. The issue is due to the manipulation of the startIp argument within the sscanf function located in the...

GHSA-3GCM-F6QX-FF7P Flowise has Remote Code Execution vulnerability

Description Cause of the Vulnerability The CustomMCP node allows users to input configuration settings for connecting to an external MCP Model Context Protocol server. This node parses the user-provided mcpServerConfig string to build the MCP server configuration. However, during this process, it...

Improper TLS Configuration

github.com/hydraide/hydraide is vulnerable to improper TLS configuration. The vulnerability is due to the client using only RootCAs without proper certificate verification and the server lacking ClientCAs and ClientAuth, which allows an attacker to perform man-in-the-middle MITM attacks and read...

USN-7732-1 kmail-account-wizard vulnerability

It was discovered that KMail Account Wizard used HTTP rather than HTTPS when retrieving certain email server configurations. An attacker could possibly use this issue to cause email clients to use an attacker-controlled email server...

Linux Distros Unpatched Vulnerability : CVE-2021-44476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server...

CGM CLININET Access Control Error Vulnerability (CNVD-2025-19813)

CGM CLININET is a hospital information management system from CGM Germany. CGM CLININET suffers from an Access Control Error vulnerability that originates from improper access control in the serverConfig endpoint, which can be exploited by an attacker to gain unauthorized access to sensitive...

CVE-2025-30048

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2025-30048 Unauthenticated access to module configuration endpoint

The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication...

CVE-2025-30048 Unauthenticated access to module configuration endpoint

The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication...

CVE-2025-41452 Post auth nginx configuration injection in Danfoss AK-SM8xxA Series

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions...

CVE-2011-10014

GTA San Andreas Multiplayer SA-MP server version 0.3.1.1 is vulnerable to a stack-based buffer overflow triggered by parsing a malformed server.cfg configuration file. The vulnerability allows local attackers to execute arbitrary code when the server binary samp-server.exe processes a crafted ech...

CVE-2011-10014 GTA SA-MP server.cfg Buffer Overflow

GTA San Andreas Multiplayer SA-MP server version 0.3.1.1 is vulnerable to a stack-based buffer overflow triggered by parsing a malformed server.cfg configuration file. The vulnerability allows local attackers to execute arbitrary code when the server binary samp-server.exe processes a crafted ech...

CVE-2011-10014 GTA SA-MP server.cfg Buffer Overflow

GTA San Andreas Multiplayer SA-MP server version 0.3.1.1 is vulnerable to a stack-based buffer overflow triggered by parsing a malformed server.cfg configuration file. The vulnerability allows local attackers to execute arbitrary code when the server binary samp-server.exe processes a crafted ech...

Rockstar Games GTA San Andreas Multiplayer 安全漏洞

Rockstar Games GTA San Andreas Multiplayer is an online multiplayer game from Rockstar Games, USA. A security vulnerability exists in Rockstar Games GTA San Andreas Multiplayer version 0.3.1.1, which originates from a stack buffer overflow when parsing server.cfg and could lead to the execution o...

PT-2025-33083 · Unknown · Gta San Andreas Multiplayer

Name of the Vulnerable Software and Affected Versions: GTA San Andreas Multiplayer SA-MP version 0.3.1.1 Description: GTA San Andreas Multiplayer SA-MP server version 0.3.1.1 is vulnerable to a stack-based buffer overflow. This occurs when parsing a malformed server.cfg configuration file. The...

CVE-2025-54136 Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals

Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attackers can achieve remote and persistent code execution by modifying an already trusted MCP configuration file inside a shared GitHub repository or editing the file locally on the target's machine. Once a...

CVE-2025-44655

In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chrootlocaluser option is enabled in the vsftpd.conf. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...

CVE-2025-7578

A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16. It has been declared as critical. This vulnerability affects the function sendCommand of the file runcmd.sh. The manipulation of the argument cmd leads to command injection. The attack can be initiated remotely...

PT-2025-29428 · Teledyne Flir · Flir Fh-Series Id +1

Name of the Vulnerable Software and Affected Versions: Teledyne FLIR FB-Series O and FLIR FH-Series version 1.3.2.16 Description: A critical issue exists in the sendCommand function of the runcmd.sh file. Manipulation of the cmd argument can lead to command injection. The attack can be initiated...