WordPress SNS Anton Theme <= 4.1 is vulnerable to Local File Inclusion

Software SNS Anton Type Theme Vulnerable versions = 4.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-28992 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 1a79e587467e Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

Ubuntu: Security Advisory (USN-7553-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress TinySalt Theme < 3.10.0 is vulnerable to Local File Inclusion

Software TinySalt Type Theme Vulnerable versions 3.10.0 Fixed in 3.10.0 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-49454 Patch priority High CVSS severity High 8.1 Developer LoftOcean PSID f11131feed0e Credits Bonds Required privilege Unauthenticated Published 9...

WordPress Avaz Theme <= 2.8 is vulnerable to Local File Inclusion

Software Avaz Type Theme Vulnerable versions = 2.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-28944 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 1dc6fdd3ef9e Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity Required...

WordPress GrandPrix Theme <= 1.6 is vulnerable to Local File Inclusion

Software GrandPrix Type Theme Vulnerable versions = 1.6 Fixed in 1.6.1 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-49296 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID c52f8c6d6e9e Credits Bonds Required privilege Unauthenticated Publishe...

Fedora: Security Advisory (FEDORA-2025-c04e5b95f1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-68d1e02e61)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:01817-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress CraftXtore Theme <= 1.7 is vulnerable to Local File Inclusion

Software CraftXtore Type Theme Vulnerable versions = 1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-24770 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID db65eb0ec141 Credits Phat RiO - BlueRock Required privilege...

PT-2025-24591 · Sap · Sap Netweaver

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP affected versions not specified Description: The issue is related to a missing authorization check in the RFC inbound processing, allowing an authenticated user to escalate their privileges. This coul...

WordPress Valen - Sport, Fashion WooCommerce WordPress Theme Theme <= 2.4 is vulnerable to Local File Inclusion

Software Valen - Sport, Fashion WooCommerce WordPress Theme Type Theme Vulnerable versions = 2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-28945 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 05ab9d46b011 Credits Tran Nguye...

WordPress Fitrush Theme <= 1.3.4 is vulnerable to Local File Inclusion

Software Fitrush Type Theme Vulnerable versions = 1.3.4 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Local File Inclusion CVE CVE-2023-26005 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 578d89dc95a4 Credits Phat RiO - BlueRock Required privilege...

WordPress Grill and Chow Theme <= 1.6 is vulnerable to Local File Inclusion

Software Grill and Chow Type Theme Vulnerable versions = 1.6 Fixed in 1.6.1 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-49297 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 10cea538663d Credits Bonds Required privilege Unauthenticated...

WordPress GiftXtore Theme <= 1.7.4 is vulnerable to Local File Inclusion

Software GiftXtore Type Theme Vulnerable versions = 1.7.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-28888 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 1128d46c2de9 Credits Phat RiO - BlueRock Required privilege...

WordPress TinySalt Theme < 3.10.0 is vulnerable to PHP Object Injection

Software TinySalt Type Theme Vulnerable versions 3.10.0 Fixed in 3.10.0 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-49455 Patch priority High CVSS severity High 9.8 Developer LoftOcean PSID 832baca8d9fd Credits Bonds Required privilege Unauthenticated Published 9...

WordPress BodyCenter - Gym, Fitness WooCommerce WordPress Theme Theme <= 2.4 is vulnerable to Local File Inclusion

Software BodyCenter - Gym, Fitness WooCommerce WordPress Theme Type Theme Vulnerable versions = 2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2023-25999 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 7c5537e9d6c0 Credits Tran...

Debian: Security Advisory (DSA-5939-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-3de9fe91ff)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-32459

The CVE-2025-32459 entry concerns the Quantenna Wi‑Fi chipset where the local control script router_command.sh, used in the sync_time argument, is vulnerable to command injection (CWE-88). Affected product: Quantenna Wi‑Fi chipset up to SDK version 8.0.0.28. Root cause: improper neutralization of...

CVE-2025-5694

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. The attack ma...