CVE-2025-54791

CVE-2025-54791 concerns OMERO.web prior to 5.29.2, where an error during the Forgot Password flow could disclose user information in the web page. The issue is mitigated by upgrading to version 5.29.2 or higher. As a workaround, disabling the Forgot Password option via the omero.web.show_forgot_p...

CVE-2025-50615

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00470c50 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlmacfilterset in the payload, which can cause the program to crash and lead to a Denial of...

The vulnerability of the setDFSSetting() function in the microprogrammed software of Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary commands.

The vulnerability of the setDFSSetting function in Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 routers lies in the lack of measures to neutralize special elements when processing parameters lanNetmask and lanIp. Exploiting this vulnerability allows an attacker to execute arbitrary...

CVE-2025-50616

A buffer overflow vulnerability exists in the Netis WF2880 wireless router (version v2.1.40207 ) within the FUN_0046f984 function of the cgitest.cgi file. An attacker can trigger this vulnerability by controlling the wl_advanced_set value in the payload, which can cause the program to crash, resu...

WordPress Reveal Listing Elevation of Privilege Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. WordPress Reveal Listing suffers from an elevation of privilege vulnerability that stems from allowing users to set roles, which can be exploited by an attacker to tamper...

BIT-LIBPHP-2024-2756 __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix

Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a Host- or Secure- cookie by PHP applications...

CVE-2025-8826

CVE-2025-8826 affects Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 up to version 20250801. The vulnerability exists in the function um_rp_autochannel inside /goform/RP_setBasicAuto, where manipulation of the arguments apcli_AuthMode_2G and apcli_AuthMode_5G triggers a stack-based buffer over...

CVE-2025-7399

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via an Elementor display setting in all versions up to, and including, 28.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...

Linux Distros Unpatched Vulnerability : CVE-2025-38099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: Disable SCO support if READVOICESETTING is unsupported/broken A SCO connection without the proper voicesetting can cause the controller to lock up...

CVE-2025-7399

CVE-2025-7399 concerns Betheme (WordPress) with a Stored Cross-Site Scripting flaw via an Elementor display setting in Betheme versions

WordPress plugin Reveal Listing 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. WordPress Reveal Listing suffers from an elevation of privilege vulnerability that stems from allowing users to set roles, which can be exploited by an attacker to tamper...

CVE-2025-6626

The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the API URL Setting in all versions up to, and including, 3.10.3 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2025-50849

CS Cart 4.18.3 is vulnerable to Insecure Direct Object Reference IDOR. The user profile functionality allows enabling or disabling stickers through a parameter companyid sent in the request. However, this operation is not properly validated on the server side. An authenticated user can manipulate...

PT-2025-31724 · WordPress · Shortpixel Adaptive Images

Name of the Vulnerable Software and Affected Versions: ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress versions through 3.10.3 Description: The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is susceptible to Stored...

CVE-2025-6626: Improper Neutralization of Input During Web Page Generation

The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the API URL Setting in all versions up to, and including, 3.10.3 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2025-33261

Name of the Vulnerable Software and Affected Versions: Tenda TX3 version 16.03.13.11 multi TDE01 Description: A vulnerability exists in Tenda TX3 version 16.03.13.11 multi TDE01. The issue is related to a stack-based buffer overflow within an unknown functionality of the file /goform/fast setting...

(Pwn2Own) QNAP QHora-322 access_setting HTTP Request Smuggling Vulnerability

This vulnerability allows network-adjacent attackers to smuggle arbitrary HTTP requests on affected installations of QNAP QHora-322 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within th...

CVE-2025-50849: Authorization Bypass Through User-Controlled Key

CS Cart 4.18.3 is vulnerable to Insecure Direct Object Reference IDOR. The user profile functionality allows enabling or disabling stickers through a parameter companyid sent in the request. However, this operation is not properly validated on the server side. An authenticated user can manipulate...

CVE-2025-31276

This issue was addressed through improved state management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9. Remote content may be loaded even when the 'Load Remote Images' setting is turned off...

InsydeH2O 安全漏洞

InsydeH2O is a customizable firmware codebase from China's Insyde Insyde Corporation. A security vulnerability exists in InsydeH2O, which originates from an arbitrary call to SmmSetVariable with unsanitized parameters in the SMI handler...