WordPress Ergonet Cache plugin <= 1.0.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Ergonet Cache versions = 1.0.13...

BELL-CVE-2025-40249

Bulletin has no description...

BELL-CVE-2025-40241

Bulletin has no description...

BELL-CVE-2025-40260

Bulletin has no description...

BELL-CVE-2025-40237

Bulletin has no description...

BELL-CVE-2025-40229

Bulletin has no description...

BELL-CVE-2025-40228

Bulletin has no description...

BELL-CVE-2025-40236

Bulletin has no description...

BELL-CVE-2025-40224

Bulletin has no description...

BELL-CVE-2025-40227

Bulletin has no description...

PT-2025-49361

Name of the Vulnerable Software and Affected Versions Linksys RE6500 versions 1.0.013.001 through 1.2.07.001 Linksys RE6250 versions 1.0.013.001 through 1.2.07.001 Linksys RE6300 versions 1.0.013.001 through 1.2.07.001 Linksys RE6350 versions 1.0.013.001 through 1.2.07.001 Linksys RE7000 versions...

Linksys多款产品 安全漏洞

Linksys RE6250, among others, is a wireless extender from Linksys, USA. A security vulnerability exists in various Linksys products, which stems from an incorrect manipulation of the parameter clientsname0 in the file modform.so, which could result in a stack buffer overflow. The following produc...

Malicious code in elf-stats-sparkly-workbench-689 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a721ca1e0dbc8cdf7b12b79ab3bcb463d85a37fa71875c883df67fd74e25ab4c The package elf-stats-sparkly-workbench-689 was found to contain malicious code...

Malicious code in elf-stats-mulled-snowglobe-636 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67abba45322e79dde009c80b6945042d05796dcb95f3a7e42a0135a03811c63 The package elf-stats-mulled-snowglobe-636 was found to contain malicious code...

CVE-2025-34264

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/dog/agentId endpoint. When an authenticated user adds or edits Software Watchdog process rules for an agent, the monitored process name is stored in the settings array and...

CVE-2025-34264

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/dog/agentId endpoint. When an authenticated user adds or edits Software Watchdog process rules for an agent, the monitored process name is stored in the settings array and...

GHSA-RJ35-4M94-77JH Envoy forwards early CONNECT data in TCP proxy mode

Summary Forwarding of early CONNECT data in TCP proxy mode. Details Per RFC 7231-4.3.6 the sender of CONNECT and all inbound proxies switch to tunnel mode only after receiving 2xx response. However in TCP proxy mode, Envoy accepts client data before it has issued a 2xx response and eagerly proxie...

EUVD-2025-201459

TUUI is a desktop MCP client designed as a tool unitary utility integration. Prior to 1.3.4, a critical Remote Code Execution RCE vulnerability exists in Tuui due to an unsafe Cross-Site Scripting XSS flaw in the Markdown rendering component. Tuui allows the execution of arbitrary JavaScript with...

CVE-2025-34264

Advantech WISE-DeviceOn Server (pre-5.4) is vulnerable to an authenticated stored XSS via the /rmm/v1/dog/{agentId} endpoint. When a user adds/edits Software Watchdog rules for an agent, the monitored process name is stored in a settings array and rendered in the Software Watchdog UI without prop...

EUVD-2025-201433

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/dog/agentId endpoint. When an authenticated user adds or edits Software Watchdog process rules for an agent, the monitored process name is stored in the settings array and...