D-Link DWR-M920和D-Link DIR-822K 安全漏洞

D-Link DWR-M920 and D-Link DIR-822K are both products of China's AUO D-Link.The D-Link DWR-M920 is a router.The D-Link DIR-822K is a wireless router.The D-Link DWR-M920 and D-Link DIR-822K are both products of China's AUO D-Link.The D-Link DWR-M920 and D-Link DIR-822K are wireless routers. A...

CVE-2025-13159 Flo Forms – Easy Drag & Drop Form Builder <= 1.0.43 - Unauthenticated Stored Cross-Site Scripting via SVG Upload

The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versions up to, and including, 1.0.43. This is due to the plugin allowing SVG file uploads via an unauthenticated AJAX endpoint floformsubmit without proper...

CVE-2025-13239

A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. Affected by this issue is some unknown functionality of the file /submitcheckout. Such manipulation of the argument ordertotalamount/carttotalamount leads to enforcement of...

CVE-2025-13239 Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow

A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. Affected by this issue is some unknown functionality of the file /submitcheckout. Such manipulation of the argument ordertotalamount/carttotalamount leads to enforcement of...

CVE-2025-13239 Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow

A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. Affected by this issue is some unknown functionality of the file /submitcheckout. Such manipulation of the argument ordertotalamount/carttotalamount leads to enforcement of...

Bdtask Isshue - Multi Store eCommerce Shopping Cart Solution 安全漏洞

Bdtask Isshue – Multi Store eCommerce Shopping Cart Solution is an e-commerce shopping cart system developed by the Bangladeshi company Bdtask. Version 5 of Bdtask Isshue – Multi Store eCommerce Shopping Cart Solution contains a security vulnerability. This vulnerability arises from incorrect...

PT-2025-47074

Name of the Vulnerable Software and Affected Versions Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution version 5 Description A security issue exists in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution version 5. The issue involves manipulation of the...

PT-2025-47844

Name of the Vulnerable Software and Affected Versions D-Link DIR-822K versions 1.00 20250513164613 and 1.1.50 D-Link DWR-M920 versions 1.00 20250513164613 and 1.1.50 Description A buffer overflow issue exists in D-Link DIR-822K and DWR-M920 routers. The issue is related to the manipulation of the...

PT-2025-47840

Name of the Vulnerable Software and Affected Versions D-Link DIR-822K versions 1.00 20250513164613 D-Link DWR-M920 versions 1.00 20250513164613 and 1.1.50 Description A buffer overflow issue exists in D-Link DIR-822K and DWR-M920. The issue is located in the file /boafrm/formFirewallAdv...

PT-2025-47841

Name of the Vulnerable Software and Affected Versions D-Link DIR-822K version 1.00 Description A buffer overflow issue exists in the function sub 455524 of the file /boafrm/formNtp. Manipulation of the submit-url argument can trigger this issue, potentially allowing for remote exploitation. The...

PT-2025-47839

Name of the Vulnerable Software and Affected Versions D-Link DIR-822K versions 1.00 20250513164613 through 1.1.50 D-Link DWR-M920 versions 1.00 20250513164613 through 1.1.50 Description A flaw exists in D-Link DIR-822K and DWR-M920 routers. The issue is related to the manipulation of the submit-u...

PT-2025-47842

Name of the Vulnerable Software and Affected Versions D-Link DIR-822K versions 1.00 20250513164613 and 1.1.50 D-Link DWR-M920 versions 1.00 20250513164613 and 1.1.50 Description A buffer overflow issue exists in D-Link DIR-822K and DWR-M920 devices. The issue is due to the manipulation of the...

CVE-2025-63334

PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submitopacity.php component. The application fails to sanitize user input in the opacityValue POST parameter before passing it to a shell command, allowing remote attackers to execu...

CVE-2025-63334

PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 is vulnerable to an unauthenticated remote code execution vulnerability in the submit_opacity.php component. The root cause is a failure to sanitize user input provided in the opacityValue POST parameter before it is passed to a shell command. This all...

PT-2025-45161

Name of the Vulnerable Software and Affected Versions PocketVJ CP versions 3.9.1 Description The application does not properly sanitize user input in the opacityValue POST parameter before it is used in a shell command. This allows remote attackers to execute arbitrary commands with root privileg...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989587)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989587 advisory. In the Linux kernel, the following vulnerability has been resolved: can: mcbausb: properly check endpoint type Syzbot reported warning in usbsubmiturb which is cause...

CVE-2025-63334

PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submitopacity.php component. The application fails to sanitize user input in the opacityValue POST parameter before passing it to a shell command, allowing remote attackers to execu...

EUVD-2025-37920

PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submitopacity.php component. The application fails to sanitize user input in the opacityValue POST parameter before passing it to a shell command, allowing remote attackers to execu...

The vulnerability of the z_erofs_submit_queue() function in the fs/erofs/zdata.c module of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the zerofssubmitqueue function in the fs/erofs/zdata.c module of the Linux kernel’s file system support module is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause service failures...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989744 advisory. In the Linux kernel, the following vulnerability has been resolved: media: zr364xx: fix memory leak in zr364xxstartreadpipe syzbot reported memory leak in zr364xx...