CVE-2025-9146 Linksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryption

A flaw has been found in Linksys E5600 1.1.0.26. The affected element is the function verifygemtekheader of the file checkFw.sh of the component Firmware Handler. Executing manipulation can lead to risky cryptographic algorithm. The attack may be launched remotely. The attack requires a high leve...

CVE-2025-9146

A vulnerability (CVE-2025-9146) affects Linksys E5600 with firmware version 1.1.0.26. The flaw resides in the verify_gemtek_header function of the checkFw.sh file within the Firmware Handler component. The issue is described as enabling manipulation that leads to a risky cryptographic algorithm; ...

PT-2025-33752 · Jasonclark · Getsemantic

Name of the Vulnerable Software and Affected Versions: jasonclark getsemantic versions up to 040c96eb8cf9947488bd01b8de99b607b0519f7d Description: A vulnerability exists in jasonclark getsemantic. The issue is related to cross site scripting, triggered by manipulating the view argument in the...

PT-2025-33749 · Linksys · Linksys E5600

Name of the Vulnerable Software and Affected Versions: Linksys E5600 version 1.1.0.26 Description: A flaw exists in the Linksys E5600 due to a risky cryptographic algorithm within the verify gemtek header function of the checkFw.sh file in the Firmware Handler component. The attack can be launche...

CVE-2025-9119

A vulnerability was determined in Netis WF2419 1.2.29433. This vulnerability affects unknown code of the file /index.htm of the component Wireless Settings Page. This manipulation of the argument SSID with the input causes cross site scripting. Remote exploitation of the attack is possible. The...

CVE-2025-9119 Netis WF2419 Wireless Settings index.htm cross site scripting

A vulnerability was determined in Netis WF2419 1.2.29433. This vulnerability affects unknown code of the file /index.htm of the component Wireless Settings Page. This manipulation of the argument SSID with the input causes cross site scripting. Remote exploitation of the attack is possible. The...

CVE-2025-9119

The Netis WF2419 router (version 1.2.29433) contains a cross-site scripting vulnerability in the Wireless Settings Page (/index.htm). The vulnerability arises from unsafely handling the SSID parameter, allowing an attacker to inject payload such as to trigger XSS. The attack is remote and has a ...

CVE-2025-7693

A security issue exists due to improper handling of malformed CIP Forward Close packets during fuzzing. The controller enters a solid red Fault LED state and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and...

CVE-2025-7693

CVE-2025-7693 relates to Rockwell Automation Micro800 devices and describes improper handling of malformed CIP Forward Close packets during fuzzing. The affected controller can enter a solid red Fault LED state and become unresponsive; after a power cycle it enters a recoverable fault with MS and...

CVE-2025-9107

A vulnerability was determined in Portabilis i-Diario up to 1.5.0. This impacts an unknown function of the file /alunos/searchautocomplete. Executing manipulation of the argument q can lead to cross site scripting. The attack may be performed from a remote location. The exploit has been publicly...

CVE-2025-9107 Portabilis i-Diario search_autocomplete cross site scripting

A vulnerability was determined in Portabilis i-Diario up to 1.5.0. This impacts an unknown function of the file /alunos/searchautocomplete. Executing manipulation of the argument q can lead to cross site scripting. The attack may be performed from a remote location. The exploit has been publicly...

CVE-2025-9107

Portabilis i-Diario

CVE-2025-9106 Portabilis i-Diario Informações Adicionais /planos-de-ensino-por-disciplina cross site scripting

A vulnerability was found in Portabilis i-Diario up to 1.5.0. This affects an unknown function of the file /planos-de-ensino-por-disciplina/ of the component Informações Adicionais Page. Performing manipulation of the argument Parecer/Conteúdos/Objetivos results in cross site scripting. The attac...

CVE-2025-9106

Portabilis i-Diario

CVE-2025-9105

A vulnerability has been found in Portabilis i-Diario up to 1.5.0. The impacted element is an unknown function of the file /planos-de-ensino-por-areas-de-conhecimento/ of the component Informações Adicionais Page. Such manipulation of the argument Parecer/Conteúdos/Objetivos leads to cross site...

CVE-2025-9104

A flaw has been found in Portabilis i-Diario up to 1.5.0. The affected element is an unknown function of the file /planos-de-aulas-por-disciplina/ of the component Informações Adicionais Page. This manipulation of the argument Parecer/Objeto de Conhecimento/Habilidades causes cross site scripting...

CVE-2025-9105

Portabilis i-Diario up to version 1.5.0 is affected by a cross-site scripting vulnerability in the Informações Adicionais Page, specifically in the /planos-de-ensino-por-areas-de-conhecimento/ component. The issue arises from manipulation of the Parecer/Conteúdos/Objetivos argument, which can be ...

CVE-2025-9104

Portabilis i-Diario vulnerable up to version 1.5.0. Affected component: Informações Adicionais Page, file planos-de-aulas-por-disciplina/. Manipulation of the Parecer/Objeto de Conhecimento/Habilidades argument triggers cross-site scripting. It is a remote, publicly exploitable issue; exploit has...

CVE-2025-9104 Portabilis i-Diario Informações Adicionais /planos-de-aulas-por-disciplina cross site scripting

A flaw has been found in Portabilis i-Diario up to 1.5.0. The affected element is an unknown function of the file /planos-de-aulas-por-disciplina/ of the component Informações Adicionais Page. This manipulation of the argument Parecer/Objeto de Conhecimento/Habilidades causes cross site scripting...

CVE-2025-9102

A security vulnerability has been detected in 1&1 Mail & Media mail.com App 8.8.0 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.mail.mobile.android.mail. The manipulation leads to improper export of android application components. It is possible ...