CVE-2025-5824

CVE-2025-5824 affects Autel MaxiCharger AC Wallbox Commercial. The flaw is an origin validation error in Bluetooth pairing handling, allowing network-adjacent attackers to bypass authentication by exploiting insufficient validation of command origins. Multiple sources (ZDI-25-343, NVD/NVD-derived...

Julia GitForge 输入验证错误漏洞

Julia GitForge is a Julia open source interface for interacting with Git forges. An input validation error vulnerability exists in Julia GitForge versions prior to 5.9.1, which stems from a lack of input validation and could lead to a path traversal attack...

ServiceStack 输入验证错误漏洞

ServiceStack is an API for building high-performance web services from ServiceStack, Inc. An input validation error vulnerability exists in ServiceStack that stems from the GetErrorResponse method not properly validating user input, which could lead to an NTLM credential relay attack...

OpenBao 输入验证错误漏洞

OpenBao is OpenBao open source a sensitive data management software . OpenBao has an input validation error vulnerability that can be exploited by an attacker to cause a denial of service...

WordPress Automation By Autonami plugin Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An input validation error vulnerability exists in the WordPress Automation By Autonami plugin, which stems from an improper URL redirection, leading to a phishing attack. No...

Schneider Electric Modicon Controllers Input Validation Error Vulnerability

Schneider Electric Modicon Controllers are a series of Modicon series programmable logic controllers from Schneider Electric, France. An input validation error vulnerability exists in Schneider Electric Modicon Controllers that stems from improper input validation and can be exploited by an...

Schneider Electric Modicon Controllers Input Validation Error Vulnerability (CNVD-2025-15352)

Schneider Electric Modicon Controllers are a series of Modicon series programmable logic controllers from Schneider Electric, France. An input validation error vulnerability exists in Schneider Electric Modicon Controllers that stems from improper input validation and can be exploited by an...

NCR Atleos Terminal Handler 安全漏洞

NCR Atleos Terminal Handler is an ATM enterprise software solution from NCR Atleos that reduces costs, improves business agility and increases your competitive advantage. A security vulnerability exists in NCR Atleos Terminal Handler version 1.5.1, which stems from insufficient validation of text...

IBM Process Mining 输入验证错误漏洞

IBM Process Mining is a process mining solution from International Business Machines IBM. An input validation error vulnerability exists in IBM Process Mining versions 2.0.1 IF001 and 2.0.1, which stems from an open redirect and could lead to a phishing attack...

urllib3 输入验证错误漏洞

urllib3 is a Python HTTP library open-sourced by urllib3. It features thread-safe connection pooling, file publishing support, and more. An input validation error vulnerability exists in urllib3 versions prior to 2.5.0 that stems from an inability to control redirection behavior in the Pyodide...

AC6 /goform/setPptpUserList File Buffer Overflow Vulnerability in Shenzhen Jixiang Tengda Technology Co.

AC6 is a wireless router from Tenda, a Chinese company. Ltd. AC6 15.03.05.16 version of the buffer overflow vulnerability, the vulnerability stems from the file / goform / setPptpUserList parameter list fails to correctly validate the length of the input data size, a remote attacker can be used t...

X.org RandR Extension 输入验证错误漏洞

X.org RandR Extension is an extension from the X.org Foundation. An input validation error vulnerability exists in X.org RandR Extension, which stems from insufficient input validation and could lead to an integer overflow...

Adobe InCopy Input Validation Error Vulnerability (CNVD-2025-13325)

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from an input validation error vulnerability that is caused by an integer overflow error. An attacker could exploit this vulnerability to execute code on the system or cause...

WordPress plugin Automation By Autonami 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An input validation error vulnerability exists in the WordPress Automation By Autonami plugin, which stems from an improper URL redirection, leading to a phishing attack. No...

X.org Big Requests 输入验证错误漏洞

X.org Big Requests is an extension of the X.org Foundation. An input validation error vulnerability exists in X.org Big Requests that stems from improper request length checking, which can lead to integer overflow and bypassing size checking...

libgepub 输入验证错误漏洞

libgepub is a simple library by danigm personal developer that uses glib to read epub files. An input validation error vulnerability exists in libgepub that stems from incorrectly calculating file sizes when processing EPUB files, which could lead to a denial of service...

Astun Technology iShare Maps 输入验证错误漏洞

Astun Technology iShare Maps is a software for public map services from Astun Technology, UK. An input validation error vulnerability exists in Astun Technology iShare Maps version 5.4.0, which stems from an open redirect due to incorrect manipulation of the parameter ref in the file atCheckJS.as...

Adobe Experience Manager Input Validation Error Vulnerability (CNVD-2025-15852)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An inp...

Google Web Designer 输入验证错误漏洞

Google Web Designer is a professional-grade HTML5 ad and web content authoring tool from Google, Inc. that supports visual design and code editing. An input validation error vulnerability exists in Google Web Designer prior to version 16.3.0.0407, which stems from the presence of path traversal i...

Tenda AC6 安全漏洞

Tenda AC6 is a dual-band wireless router from Tenda. Tenda AC6 suffers from a buffer overflow vulnerability that originates from the failure of the schedStartTime and schedEndTime parameters in the /goform/openSchedWifi endpoints to correctly validate the length size of the input data, and no...