CVE-2025-22290 WordPress LTL Freight Quotes – FreightQuote Edition Plugin <= 2.3.11 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows SQL Injection.This issue affects LTL Freight Quotes – FreightQuote Edition: from n/a throu...

CVE-2025-22286

CVE-2025-22286 corresponds to a reflected XSS in the WordPress plugin LTL Freight Quotes – Worldwide Express Edition (versions up to 5.0.21). The underlying issue is improper input neutralization during web page generation. Public references in connected sources confirm affected software and the ...

PT-2025-6948 · Enituretechnology · Enituretechnology Ltl Freight Quotes – Worldwide Express Edition

Name of the Vulnerable Software and Affected Versions: enituretechnology LTL Freight Quotes – Worldwide Express Edition versions 5.0.20 and earlier Description: The issue allows exploitation of incorrectly configured access control security levels due to a lack of authorization. This problem can ...

PT-2025-23094 · Ооо 'Симпл 1' · Simpleone Itsm

Уязвимость системы автоматизации IT-процессов SimpleOne ITSM связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно, выполнить произвольный код...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-31858

Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

AI-Powered Social Engineering: Ancillary Tools and Techniques

Social engineering is advancing fast, at the speed of generative AI. This is offering bad actors multiple new tools and techniques for researching, scoping, and exploiting organizations. In a recent communication, the FBI pointed out: 'As technology continues to evolve, so do cybercriminals'...

Microsoft: Russian-Linked Hackers Using 'Device Code Phishing' to Hijack Accounts

Microsoft is calling attention to an emerging threat cluster it calls Storm-2372 that has been attributed to a new set of cyber attacks aimed at a variety of sectors since August 2024. The attacks have targeted government, non-governmental organizations NGOs, information technology IT services an...

CVE-2024-33250

An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268Leo and SRS/4.0.195Leo allows a remote attacker to execute arbitrary code via a crafted request...

CVE-2023-31360

Incorrect default permissions in the AMD Integrated Management Technology AIM-T Manageability Service installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

Distributed AI Inferencing — The Next Generation of Computing

...

CVE-2024-31858

Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-31153

CVE-2024-31153 involves Intel(R) QuickAssist Technology software prior to version 2.2.0 with an improper input validation flaw. An authenticated local user may trigger denial of service. Intel recommends updating to version 2.2.0 or later. The issue is documented in Intel’s advisory (INTEL-SA-011...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-29223

CVE-2024-29223 concerns Intel(R) QuickAssist Technology software before version 2.2.0. The issue is an uncontrolled search path that may allow an authenticated user to escalate privileges via local access. Connected Intel advisories also reference related CVEs (CVE-2024-31858, CVE-2023-32277, CVE...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...