PT-2025-32366 · Trendnet · Tpl-430Ap +2

Name of the Vulnerable Software and Affected Versions: TRENDnet TI-G160i versions up to 20250724 TRENDnet TI-PG102i versions up to 20250724 TRENDnet TPL-430AP versions up to 20250724 Description: A critical vulnerability exists in the SSH Service component of TRENDnet devices. The issue involves...

CVE-2025-8731: Use of Default Credentials

A vulnerability was identified in TRENDnet TI-G160i, TI-PG102i and TPL-430AP up to 20250724. This affects an unknown part of the component SSH Service. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-44651

In TRENDnet TPL-430AP FW1.0, the USERLIMITGLOBAL option is set to 0 in the bftpd-related configuration file. This can cause DoS attacks when unlimited users are connected...

CVE-2025-44651

In TRENDnet TPL-430AP FW1.0, the USERLIMITGLOBAL option is set to 0 in the bftpd-related configuration file. This can cause DoS attacks when unlimited users are connected...

CVE-2025-44651

In TRENDnet TPL-430AP FW1.0, the USERLIMITGLOBAL option is set to 0 in the bftpd-related configuration file. This can cause DoS attacks when unlimited users are connected...

CVE-2025-44651

In TRENDnet TPL-430AP FW1.0, the USERLIMITGLOBAL option is set to 0 in the bftpd-related configuration file. This can cause DoS attacks when unlimited users are connected...

CVE-2025-44651

The TRENDnet TPL-430AP wireless access point running FW1.0 is vulnerable to a Denial-of-Service (DoS) attack. The root cause is that the USERLIMIT_GLOBAL option is incorrectly set to 0 in the bftpd-related configuration file , allowing an unlimited number of users to connect and exhaust resources...

CVE-2025-44651

In TRENDnet TPL-430AP FW1.0, the USERLIMITGLOBAL option is set to 0 in the bftpd-related configuration file. This can cause DoS attacks when unlimited users are connected...

CVE-2025-44651

In TRENDnet TPL-430AP FW1.0, the USERLIMITGLOBAL option is set to 0 in the bftpd-related configuration file. This can cause DoS attacks when unlimited users are connected...

TRENDnet TPL-430AP 安全漏洞

The TRENDnet TPL-430AP is a wireless access point from Trendnet, Inc. A security vulnerability exists in the TRENDnet TPL-430AP FW version 1.0, which stems from the USERLIMITGLOBAL option being set to 0, which could lead to a denial of service attack...

CVE-2025-44651: Uncontrolled Resource Consumption

In TRENDnet TPL-430AP FW1.0, the USERLIMITGLOBAL option is set to 0 in the bftpd-related configuration file. This can cause DoS attacks when unlimited users are connected...

PT-2025-30292 · Trendnet · Trendnet Tpl-430Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TPL-430AP version FW1.0 Description: The USERLIMIT GLOBAL option is set to 0 in the bftpd-related configuration file, potentially leading to Denial-of-Service DoS attacks when an unlimited number of users connect. Recommendations:...

CVE-2025-7569: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Bigotry OneBase up to 1.3.6. It has been declared as problematic. Affected by this vulnerability is the function parseargs of the file /tpl/thinkexception.tpl. The manipulation of the argument args leads to cross site scripting. The attack can be launched remotely. Th...

CVE-2024-10689

The XLTab – Accordions and Tabs for Elementor Page Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4 via the 'XLTABINSERTTPL' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for...

CVE-2025-3533: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in YouDianCMS 9.5.21. This issue affects some unknown processing of the file /App/Tpl/Admin/Default/Channel/index.html.Attackers. The manipulation of the argument Parent leads to cross site scripting. The attack may be initiated...

CVE-2025-3532: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in YouDianCMS 9.5.21. This vulnerability affects unknown code of the file /App/Tpl/Member/Default/Order/index.html.Attackers. The manipulation of the argument OrderNumber leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-3397

Summary: CVE-2025-3397 affects YzmCMS 7.1 in an unknown function within message.tpl; manipulating the gourl argument triggers cross-site scripting. Exploitation is possible remotely and public disclosure exists. Multiple sources (CNVD/CNNVD/NVD/OSV/etc.) confirm the issue but provide no official ...

PT-2025-15314 · Yzmcms · Yzmcms

Name of the Vulnerable Software and Affected Versions: YzmCMS version 7.1 Description: A problematic vulnerability has been found, allowing for cross-site scripting through the manipulation of the gourl argument in an unknown function of the file message.tpl. This can be exploited remotely...

PT-2024-16464 · WordPress · Xltab

Name of the Vulnerable Software and Affected Versions: XLTab – Accordions and Tabs for Elementor Page Builder plugin for WordPress versions up to, and including, 1.4 Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from private or draft...

WordPress Beauty theme <= 1.1.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via tpl_featured_cat_id Parameter vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via tplfeaturedcatid Parameter vulnerability discovered by Francesco Carlucci in WordPress Theme Beauty versions = 1.1.4...