CVE-2025-25984

An issue in Macro-video Technologies Co.,Ltd V380E6C1 IP camera HwHsAKPIQpWFXHR 1020302 allows a physically proximate attacker to execute arbitrary code via UART component...

PT-2025-17341 · Macro Video Technologies Co. · V380E6 C1 Ip Camera

Name of the Vulnerable Software and Affected Versions: Macro-video Technologies Co.,Ltd V380E6 C1 IP camera version 1020302 Description: An issue in the V380E6 C1 IP camera allows a physically proximate attacker to execute arbitrary code via the /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/user...

CVE-2025-25985

CVE-2025-25985 affects Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (version 1020302). The issue allows a physically proximate attacker to trigger arbitrary code execution via the vulnerable files /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/user_info.ini within the device’s filesystem. C...

CVE-2025-25983

CVE-2025-25983 affects Macro-video V380 Pro Android apps 2.1.44 and 2.1.64 through the app’s QE code based sharing component. The issue enables disclosure of sensitive data via the QR-based sharing flow: the QR payload encodes a device id, a key, and an encrypted message; practical analysis shows...

CVE-2025-32533

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matat Technologies Deliver via Shipos for WooCommerce wc-shipos-delivery allows Reflected XSS.This issue affects Deliver via Shipos for WooCommerce: from n/a through = 2.1.7...

CVE-2025-32533 WordPress Deliver via Shipos for WooCommerce Plugin <= 2.1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matat Technologies Deliver via Shipos for WooCommerce wc-shipos-delivery allows Reflected XSS.This issue affects Deliver via Shipos for WooCommerce: from n/a through = 2.1.7...

CVE-2025-32533

CVE-2025-32533 is a reflected XSS in the WordPress plugin Deliver via Shipos for WooCommerce (Deliver via Shipos for WooCommerce) affecting 2.1.7 and earlier. Root cause: improper neutralization of input during web page generation. Public references (NVD/Red Hat/Wordfence) confirm it as a valid i...

CVE-2025-32533 WordPress Deliver via Shipos for WooCommerce Plugin <= 2.1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matat Technologies Deliver via Shipos for WooCommerce wc-shipos-delivery allows Reflected XSS.This issue affects Deliver via Shipos for WooCommerce: from n/a through = 2.1.7...

Fedora 40 : php-tcpdf (2025-b5809de628)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b5809de628 advisory. Version 6.9.1 2025-04-03 - Fixed Path Traversal security vulnerability reported by Positive Technologies. ---- Version 6.9.0 2025-03-30 - Added PHP 8.4...

CVE-2022-43590

A null pointer dereference vulnerability exists in the handleioctl0x830a0systembuffer functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet IRP can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability...

CVE-2022-43589

A null pointer dereference vulnerability exists in the handleioctl8314C functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet IRP can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability...

CVE-2022-43588

A null pointer dereference vulnerability exists in the handleioctl83150 functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet IRP can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability...

Unauthorized Access Vulnerability in H3C M60 of Xinhua San Technologies Co.

H3C M60 is a new generation of enterprise-grade, high-performance wireless AP manager from Xinhua San. An unauthorized access vulnerability exists in the H3C M60 of Xinhua San Technologies, which can be exploited by attackers to obtain sensitive information...

Dell PowerProtect Data Domain Access Control Vulnerability

Dell PowerProtect Data Domain is a data protection storage appliance from Dell Technologies, built on the Data Domain platform and designed for building a resilient foundation for networks and enabling rapid data recovery. An access control vulnerability exists in Dell PowerProtect Data Domain,...

PT-2025-17: Unrestricted memory access to internal memory of networking adapter in Broadcom P225p NetXtreme-E Dual-port 10Gb/25Gb Ethernet PCIe Adapter, Broadcom NetXtreme-E family

The vulnerability was identified in Broadcom P225p NetXtreme-E Dual-port 10Gb/25Gb Ethernet PCIe Adapter, Broadcom NetXtreme-E family, versions 231.1.162.1 package version, 1.10.3 hwrm spec. The discovered vulnerability is related to improper access control to the network adapter memory read/writ...

CVE-2025-31789

Missing Authorization vulnerability in Matat Technologies TextMe SMS textme-sms-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TextMe SMS: from n/a through = 1.9.1...

PT-2025-14907 · Imagination Technologies · Graphics Ddk

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to cause kernel system memory corruption. Recommendations: At the moment, there is no information...

CVE-2025-31789

Missing Authorization vulnerability in Matat Technologies TextMe SMS textme-sms-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TextMe SMS: from n/a through = 1.9.1...

CVE-2025-31789

CVE-2025-31789 is a Missing Authorization vulnerability in TextMe SMS (textme-sms-integration) by Matat Technologies. Affected product: TextMe SMS WordPress plugin (TextMe SMS integration) up to version ≤ 1.9.1. Underlying issue: broken access control enabling unauthorized actions. CVSS 3.1 base ...

CVE-2025-31789 WordPress TextMe SMS plugin <= 1.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Matat Technologies TextMe SMS textme-sms-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TextMe SMS: from n/a through = 1.9.1...