Fedora Repository fedoraIntCallUser default credentials and insecure archive extraction

RISK EVALUATION Fedora Repository 3.8 includes default user credentials and allows path traversal when extracting uploaded archive files. An attacker can exploit these vulnerabilities to read sensitive data and execute arbitrary commands with the privileges of the Java web application server...

AI tool GeoSpy analyzes images and identifies locations in seconds

It's just become even more important to be conscious about the pictures we post online. GeoSpy is an Artificial Intelligence AI supported tool that can derive a person’s location by analyzing features in a photo like vegetation, buildings, and other landmarks. And it can do so in seconds based on...

CVE-2025-22318

CVE-2025-22318: Missing Authorization in WordPress plugin Standard Box Sizes – for WooCommerce (Standard Box Sizes – for WooCommerce). Affected versions: up to 1.6.13. CVSS v3.1 base score 7.5 (HIGH) with I rating high and others; attack vector Network, no user interaction. This is a Broken/ Miss...

CVE-2025-22318 WordPress Standard Box Sizes plugin <= 1.6.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in Eniture Technology Standard Box Sizes – for WooCommerce. This issue affects Standard Box Sizes – for WooCommerce: from n/a through 1.6.13...

CVE-2025-21506: Incorrect Authorization

Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite component: Technology Foundation. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

PT-2025-4433

Name of the Vulnerable Software and Affected Versions Eniture Technology Standard Box Sizes – for WooCommerce versions 1.6.13 and earlier Description The issue is related to a Missing Authorization vulnerability. This means that certain actions or accesses might be possible without the necessary...

CVE-2025-0585

The a+HRD from aEnrich Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-0584

The a+HRD from aEnrich Technology has a Server-side Request Forgery, allowing unauthenticated remote attackers to exploit this vulnerability to probe internal network...

CVE-2025-0585

The a+HRD from aEnrich Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-0586

The a+HRD from aEnrich Technology has an Insecure Deserialization vulnerability, allowing remote attackers with database modification privileges and regular system privileges to perform arbitrary code execution...

CVE-2025-0586 aEnrich Technology a+HRD - Insecure Deserialization

The a+HRD from aEnrich Technology has an Insecure Deserialization vulnerability, allowing remote attackers with database modification privileges and regular system privileges to perform arbitrary code execution...

CVE-2025-0586

CVE-2025-0586 concerns the a+HRD from aEnrich Technology with an Insecure Deserialization vulnerability that enables remote attackers with database modification privileges and regular system privileges to perform arbitrary code execution. The connected documents repeatedly state this insecure des...

CVE-2025-0585 aEnrich Technology a+HRD - SQL Injection

The a+HRD from aEnrich Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-0585 aEnrich Technology a+HRD - SQL Injection

The a+HRD from aEnrich Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-0585

CVE-2025-0585 affects the a+HRD product from aEnrich Technology with a SQL Injection vulnerability that allows unauthenticated remote attackers to read, modify, and delete database contents. Connected sources corroborate a SQLi issue but vary on affected versions; CNNVD cites a+HRD 7.5 and prior,...

CVE-2025-0584 aEnrich Technology a+HRD - Server-Side Request Forgery (SSRF)

The a+HRD from aEnrich Technology has a Server-side Request Forgery, allowing unauthenticated remote attackers to exploit this vulnerability to probe internal network...

CVE-2025-0584 aEnrich Technology a+HRD - Server-Side Request Forgery (SSRF)

The a+HRD from aEnrich Technology has a Server-side Request Forgery, allowing unauthenticated remote attackers to exploit this vulnerability to probe internal network...

CVE-2025-0584

The CVE-2025-0584 entry concerns the a+HRD product from aEnrich Technology and is described as a Server-Side Request Forgery (SSRF). The vulnerability enables unauthenticated remote attackers to probe an internal network, indicating possible internal-asset discovery or access risk. Documented det...

CVE-2025-0583 aEnrich Technology a+HRD - Reflected Cross-site Scripting(XSS)

The a+HRD from aEnrich Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...

CVE-2025-0583

CVE-2025-0583 concerns the a+HRD component from aEnrich Technology with a Reflected Cross-site Scripting (XSS) vulnerability. The canonical description across sources states that unauthenticated remote attackers can craft phishing-initiated requests to cause the execution of arbitrary JavaScript ...