AZL-56201 CVE-2024-10026 affecting package podman for versions less than 5.6.1-2

A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances...

CVE-2024-12649

Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier...

CVE-2024-12648

CVE-2024-12648 is a buffer overflow in TIFF EXIF tag processing on Canon Small Office/MFP and Laser Printers (multiple models) with firmware 05.04 and earlier. A remote network attacker could trigger unresponsiveness or arbitrary code execution. Affected products span Satera MF656Cdw/MF654Cdw (Ja...

CVE-2024-12647

Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and...

Canon Small Office Multifunction Printers 安全漏洞

Canon Small Office Multifunction Printers is a small office multifunction printer from Canon Japan. A security vulnerability exists in Canon Small Office Multifunction Printers, which originates from a buffer overflow in the CPCA font download processing, and could lead to unresponsiveness or...

PT-2025-1924

Name of the Vulnerable Software and Affected Versions Satera MF656Cdw/Satera MF654Cdw versions v05.04 and earlier Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw versions v05.04 and earli...

CVE-2025-24665

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes-unishippers-edition allows SQL Injection.This issue affects Small Package Quotes – Unishippers Edition: from n/a...

CVE-2025-24667

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injection.This issue affects Small Package Quotes – Worldwide Express Edition: from n/...

CVE-2025-24667

CVE-2025-24667 is a SQL Injection in WordPress Small Package Quotes – Worldwide Express Edition (affected up to version 5.2.17). The CVE entry specifies improper neutralization of SQL commands in Small Package Quotes – Worldwide Express Edition, with an impact described as Confidentiality High an...

CVE-2025-24667 WordPress Small Package Quotes Plugin <= 5.2.17 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injection.This issue affects Small Package Quotes – Worldwide Express Edition: from n/...

CVE-2025-24667 WordPress Small Package Quotes Plugin <= 5.2.17 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injection.This issue affects Small Package Quotes – Worldwide Express Edition: from n/...

CVE-2025-24665 WordPress Small Package Quotes Plugin <= 2.4.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes-unishippers-edition allows SQL Injection.This issue affects Small Package Quotes – Unishippers Edition: from n/a...

CVE-2025-24665 WordPress Small Package Quotes Plugin <= 2.4.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes-unishippers-edition allows SQL Injection.This issue affects Small Package Quotes – Unishippers Edition: from n/a...

CVE-2025-24665

CVE-2025-24665 is a SQL Injection in WordPress Small Package Quotes – Unishippers Edition (affected versions up to 2.4.8). Root cause: improper neutralization of SQL elements. Impact: potential unauthorized DB access or data exposure. Remediation: upgrade to a version later than 2.4.8 (patch/miti...

PT-2025-5486 · Enituretechnology · Eniture Technology Small Package Quotes – Unishippers Edition

Name of the Vulnerable Software and Affected Versions: Eniture Technology Small Package Quotes – Unishippers Edition versions 2.4.8 and earlier Description: The issue is related to improper neutralization of special elements used in an SQL command, allowing SQL injection. This enables unauthorize...

WordPress plugin Small Package Quotes – Worldwide Express Edition SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A SQL injection vulnerability exists in WordPress plugin...

WordPress plugin Small Package Quotes – Unishippers Edition SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

PT-2025-5488 · Enituretechnology · Enituretechnology Small Package Quotes – Worldwide Express Edition

Name of the Vulnerable Software and Affected Versions: Eniture Technology Small Package Quotes – Worldwide Express Edition versions 5.2.17 and earlier Description: The issue is related to improper neutralization of special elements used in an SQL command, allowing SQL injection. This means an...

Cyber security guidance for small fleet operators

Introduction Cyber threats aren’t just a problem for large shipping organizations, small maritime fleet operators are also at risk. Anything from phishing emails to ransomware attacks, these threats can disrupt operations and compromise critical systems. This post is a guide to help small fleet...

WordPress Small Package Quotes Plugin <= 2.4.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin Small Package Quotes – Unishippers Edition versions = 2.4.8...