1857 matches found
CVE-2025-53260
Unrestricted Upload of File with Dangerous Type vulnerability in getredhawkstudio File Manager Plugin For Wordpress file-manager-plugin-for-wordpress allows Upload a Web Shell to a Web Server.This issue affects File Manager Plugin For Wordpress: from n/a through = 7.5...
WordPress Auto Upload Images plugin code issue vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A code issue vulnerability exists in the WordPress Auto Upload Images plugin that stems from the server not implementing an adequate authentication mechanism to confirm the orig...
CVE-2025-44163
RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/getwgkey.php. An authenticated attacker can send a crafted POST request with a path traversal payload in the entity parameter to overwrite arbitrary files writable by the web server via abuse of the tee command use...
CVE-2025-6512
On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights...
DSA-5947-1 xorg-server - security update
Bulletin has no description...
xorg-x11-server and xorg-x11-server-Xwayland security update
xorg-x11-server 1.20.11-31 - CVE fix for: CVE-2025-49175 RHEL-97289, CVE-2025-49176 RHEL-97311, CVE-2025-49178 RHEL-97388, CVE-2025-49179 RHEL-97410, CVE-2025-49180 RHEL-97255 1.20.11-30 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves:...
ALSA-2025:9304 Important: xorg-x11-server-Xwayland security update
Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors CVE-2025-49175 xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests...
SUSE-SU-2025:01979-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2025-49175: Out-of-bounds access in X Rendering extension Animated cursors bsc1244082. - CVE-2025-49176: Integer overflow in Big Requests Extension bsc1244084. - CVE-2025-49177: Data leak in XFIXES Extension 6...
TencentOS Server 4: pcs (TSSA-2024:0533)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0533 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Specification and Evaluation of Multi-Agent LLM Systems -- Prototype and Cybersecurity Applications
Recent advancements in LLMs indicate potential for novel applications, e.g., through reasoning capabilities in the latest OpenAI and DeepSeek models. For applying these models in specific domains beyond text generation, LLM-based multi-agent approaches can be utilized that solve complex tasks by...
TencentOS Server 4: tomcat (TSSA-2025:0224)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0224 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2025-29902
Remote code execution that allows unauthorized users to execute arbitrary code on the server machine...
CVE-2025-0923
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 stores source code on the web server that could aid in further attacks against the system...
CVE-2025-29902
Remote code execution that allows unauthorized users to execute arbitrary code on the server machine...
CVE-2025-30183
CyberData 011209 Intercom does not properly store or protect web server admin credentials...
CVE-2025-0923 IBM Cognos Analytics information disclosure
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 stores source code on the web server that could aid in further attacks against the system...
CVE-2025-30183
CyberData 011209 Intercom does not properly store or protect web server admin credentials...
HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter
Summary An authenticated Local File Inclusion LFI vulnerability in the HAXCMS saveOutline endpoint allows a low-privileged user to read arbitrary files on the server by manipulating the location field written into site.json. This enables attackers to exfiltrate sensitive system files such as...