WordPress plugin WP-Property 安全漏洞

WordPress WP-Property plugin is a real estate industry-specific plugin for the WordPress platform, which is mainly used to help users manage property listings, display listing information and attract potential customers. A file upload vulnerability exists in the WordPress WP-Property plugin, whic...

The vulnerability of the command.php file in D-Link DIR-300 and DIR-600 microprogramming routers allows a hacker to execute arbitrary commands and compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the command.php file in D-Link DIR-300 and DIR-600 router microprogramming systems arises from the lack of access and data validation restrictions in the cmd parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands and compromise the...

Gandia Integra Total 4.4.2236.1 - SQL Injection

/ Author : Byte Reaper CVE : CVE-2025-41373 Vulnerability : SQL Affected Path : /encuestas/integrawebv4/integra/html/view/hislistadoacciones.php?idestudio= Affected Versions : 2.1.2217.3 to v4.4.2236.1 Description: This endpoint concatenates the idestudio parameter directly into an SQL query...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the unzipFile function in the client.go file, which uses filepath.JoindestDir, f.Name without validating or sanitizing f.Name. An attacker can overwrite arbitrary files on the system outside of the intended...

CVE-2025-8480

Alpine iLX-507 Command Injection Remote Code Execution. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Tidal music...

Intelbras RX1500 安全漏洞

The Intelbras RX1500 is a router from the Brazilian company Intelbras. A security vulnerability exists in the Intelbras RX1500 version v2.2.9 and RX3000 version v1.0.11, which stems from an unvalidated connected device name and could lead to a cross-site scripting attack...

WordPress plugin AI Engine 代码问题漏洞

WordPress AI Engine plugin is a WordPress plugin that integrates artificial intelligence features, providing chatbots, content generation, image generation and other features, supporting docking with OpenAI and other platforms. WordPress AI Engine plugin has a code execution vulnerability that...

A10 Networks AX Loadbalancer 安全漏洞

A10 Networks AX Loadbalancer is a load balancer appliance from A10 Networks, USA. A security vulnerability exists in A10 Networks AX Loadbalancer 2.6.1-GR1-P5 and 2.7.0 and earlier versions, which stems from an unvalidated filename parameter that could lead to path traversal and information...

ProcessMaker Open Source 安全漏洞

ProcessMaker Open Source is a workflow management software from US-based ProcessMaker, Inc. A security vulnerability exists in ProcessMaker Open Source versions 2.0.23 through 2.5.1 that originates from multiple endpoints that do not validate user input and could lead to remote code execution...

Kimai 安全漏洞

kimai is a web-based multi-user time tracking application from the individual developer of kimai. A security vulnerability exists in version 0.9.2.x of Kimai, which stems from unvalidated dates POST parameters and could lead to SQL injection and remote code execution...

GestioIP 安全漏洞

GestioIP is a web-based IPv4/IPv6 address management software from GestioIP. A security vulnerability exists in GestioIP 3.0 commit ac67be and prior versions, which stems from an unvalidated ip parameter that could lead to remote command execution...

Q2A Ultimate SEO 跨站脚本漏洞

Q2A Ultimate SEO is a component of the Q2A Projects team that provides search engine optimization functionality for Question2Answer. A cross-site scripting vulnerability exists in Q2A Ultimate SEO that stems from insufficient validation of the name parameter input in /products//edit, which could...

Kloxo 安全漏洞

Kloxo is an open source hosting platform from LxCenter. A security vulnerability exists in Kloxo versions prior to 6.1.12 that stems from an unvalidated login-name parameter, which could lead to SQL injection and remote command execution...

Directory Traversal

Overview bugsink is a Self-hosted Error Tracking Affected versions of this package are vulnerable to Directory Traversal via the getfilenameforeventid function when constructing file locations from untrusted eventid input without validation. An attacker can overwrite or create files in arbitrary...

kernel: cifs: potential buffer overflow in handling symlinks

A buffer overflow vulnerability has been identified in the Linux kernel's Common Internet File System CIFS module, specifically within the parsemfsymlink function. This flaw is caused by insufficient input validation on the linklen value, which dictates the length of a symbolic link. An attacker...

GHSA-Q78P-G86F-JG6Q Bugsink path traversal via event_id in ingestion

Summary In affected versions, ingestion paths construct file locations directly from untrusted eventid input without validation. A specially crafted eventid can result in paths outside the intended directory, potentially allowing file overwrite or creation in arbitrary locations. Submitting such...

Vivaldi iCONTROL+ Server 安全漏洞

Vivaldi iCONTROL+ Server is an audio control device from the Italian company Vivaldi. A security vulnerability exists in Vivaldi iCONTROL+ Server 4.7.8.0.eden Logic 5.32 and earlier versions, which originates from an unvalidated error or edit-menu-item parameter and could lead to a cross-site...

Human Resource Management System 跨站脚本漏洞

Human Resource Management System is a human resource management system by maverickosama Individual Developer. A cross-site scripting vulnerability exists in Human Resource Management System version 1.0, which stems from an unvalidated employeeid parameter and could lead to a reflective cross-site...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unvalidated IRQ number range that could result in an out-of-bounds displacement...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unvalidated ninsns size that could lead to a memory allocation failure...