12580 matches found
PT-2025-29399 · Unknown · Sapido Rb-1802
Name of the Vulnerable Software and Affected Versions: Sapido RB-1802 version 1.0.32 Description: A cross-site scripting issue exists in the URL Filtering Page component, specifically within the urlfilter.asp file. The manipulation of the URL address argument can lead to exploitation. The exploit...
PT-2025-29504
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.1.2-0 ImageMagick versions prior to 6.9.13-26 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. A heap buffer overflow exists in the...
DLA-4241-1 ffmpeg - security update
Bulletin has no description...
PT-2025-29532
Name of the Vulnerable Software and Affected Versions HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. versions up to and including 2.2.1 Description The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. plugin for WordPress i...
PT-2025-29423 · Lb Link · Lb-Link Bl-Ac1900 +5
Name of the Vulnerable Software and Affected Versions: LB-LINK BL-AC1900 LB-LINK BL-AC2100 AZ3 LB-LINK BL-AC3600 LB-LINK BL-AX1800 LB-LINK BL-AX5400P LB-LINK BL-WR9000 versions up to 20250702 Description: A critical vulnerability exists that leads to information disclosure. The issue is located i...
PT-2025-29514 · Nix · Nix
Name of the Vulnerable Software and Affected Versions: Nix versions prior to 2.30.1 Description: Nix, a package manager for Linux and other Unix systems, exhibited a privilege escalation issue on macOS. Builds executed with Nix 2.30.0 were performed with elevated privileges root instead of the...
PT-2025-29975 · Totolink · Totolink T6
Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 versions prior to 4.1.5cu.748 B20211015 Description: A critical vulnerability exists in the TOTOLINK T6 router. This issue affects the setDiagnosisCfg function within the /cgi-bin/cstecgi.cgi file of the HTTP POST Request Handler...
PT-2025-29407 · Phpgurukul · Phpgurukul Online Fire Reporting System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue exists in PHPGurukul Online Fire Reporting System 1.2 related to the processing of the /admin/team-ontheway-requests.php file. Manipulation of the teamid argume...
PT-2025-29474 · Totolink · Totolink T6
Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.748 Description: A critical issue exists in the HTTP POST Request Handler component of the software. The delDevice function within the /cgi-bin/cstecgi.cgi file is susceptible to command injection through...
PT-2025-29931 · Tenda · Tenda Fh451
Name of the Vulnerable Software and Affected Versions: Tenda FH451 version 1.0.0.9 Description: A critical issue exists in the POST Request Handler component due to a buffer overflow in the fromWizardHandle function within the /goform/WizardHandle file. The PPW argument can be manipulated to...
CVE-2025-2520
The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer EPA communications. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which results in a dereferencing of an uninitialized pointer leading to...
PT-2025-29316 · WordPress · Rsfirewall
Name of the Vulnerable Software and Affected Versions: RSFirewall! plugin for WordPress versions through 1.1.42 Description: The RSFirewall! plugin for WordPress is susceptible to a Path Traversal issue via the get local filename function. This allows authenticated attackers with...
PT-2025-29310 · WordPress · Beeteam368 Extensions
Name of the Vulnerable Software and Affected Versions: BeeTeam368 Extensions plugin for WordPress versions up to and including 2.3.5 Description: The BeeTeam368 Extensions plugin for WordPress is susceptible to arbitrary file uploads due to the absence of file type validation within the handle...
RHSA-2025:10814 Red Hat Security Advisory: apache-commons-beanutils security update
Bulletin has no description...
RHSA-2025:10796 Red Hat Security Advisory: libblockdev security update
Bulletin has no description...
CGA-6Q97-X38P-2V36
Bulletin has no description...
WordPress Contest Gallery <= 26.0.6 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by domiee13 in WordPress Plugin Contest Gallery versions = 26.0.6...
MINI-8GFX-2V79-JF76
Bulletin has no description...
PT-2025-29219 · WordPress · Broken Link Notifier
Name of the Vulnerable Software and Affected Versions: Broken Link Notifier plugin for WordPress versions prior to 1.3.1 Description: The plugin is susceptible to Server-Side Request Forgery SSRF. This allows unauthenticated attackers to make web requests to arbitrary locations originating from t...