24978 matches found
WordPress Oceanpayment CreditCard Gateway plugin <= 6.0 - Missing Authentication to Unauthenticated Order Status Update vulnerability
Missing Authentication to Unauthenticated Order Status Update vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Oceanpayment CreditCard Gateway versions = 6.0...
PT-2025-42340
Name of the Vulnerable Software and Affected Versions BIG-IP systems affected versions not specified Description Undisclosed traffic can lead to data corruption and unauthorized data modification in protocols lacking message integrity protection. Software versions that have reached End of Technic...
UTT 1250GW Buffer Overflow Vulnerability
The UTT 1250GW is an enterprise-grade wireless router from Atech Technology Ltd. designed for SOHO Small Office/Home Office environments, focusing on wireless coverage and network management features. The UTT 1250GW suffers from a buffer overflow vulnerability, which originates from the parameter...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incorrectly verifying VF status, which could lead to improper resource acquisition...
GHSA-344W-77P7-GX2C
creationtimestamp| type| source ---|---|--- 2025-10-14 22:24:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115374862955273092...
GHSA-RRJV-57MM-J6CM
creationtimestamp| type| source ---|---|--- 2025-10-14 20:38:41+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115374444988356308...
CVE-2025-59429
FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...
GHSA-292P-RJ6H-54CP
creationtimestamp| type| source ---|---|--- 2025-10-14 19:50:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115374254067224192...
GHSA-5W3R-F6GM-C25W
creationtimestamp| type| source ---|---|--- 2025-10-14 19:49:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115374251460586628...
GHSA-QGJ3-F9GJ-98V9
creationtimestamp| type| source ---|---|--- 2025-10-14 19:47:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115374244887228575...
CVE-2025-59429 FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page
FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...
CVE-2025-59429
FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...
CVE-2025-59429 FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page
FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...
CVE-2025-59429 FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page
FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...
CVE-2025-59429
CVE-2025-59429 affects FreePBX core: reflected XSS on the Asterisk HTTP Status page. Affected: FreePBX 16 < 16.0.68.39 (port 8088 exposed by default) and FreePBX 17
EUVD-2025-34392
Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...
CVE-2025-59201
Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...
CVE-2025-59201
Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...
CVE-2025-59201
CVE-2025-59201 concerns Windows Network Connection Status Indicator (NCSI). The issue is described as improper access control that could allow a locally authenticated attacker to escalate privileges on affected Windows systems. Connected Microsoft security advisories (KB5066793, KB5066835–KB50668...