CVE-2025-7068 affecting package hdf5 for versions less than 1.14.6-1

CVE-2025-7068 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...

CVE-2025-40258 affecting package kernel for versions less than 6.6.119.3-1

CVE-2025-40258 affecting package kernel for versions less than 6.6.119.3-1. An upgraded version of the package is available that resolves this issue...

AZL-74285 CVE-2025-68276 affecting package avahi for versions less than 0.8-6

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon with wide-area disabled by creating record browsers with the AVAHILOOKUPUSEWIDEAREA flag set via D-Bus. This can ...

Exploit for CVE-2024-28397

js2py Sandbox Escape CVE-2024-28397 Exploit para ejecución...

CVE-2025-67920

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Neo Ocular neoocular allows PHP Local File Inclusion.This issue affects Neo Ocular: from n/a through 1.2...

CVE-2025-40569

A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions V3.2, SCALANCE XCH328 6GK5328-4TS01-2EC2 All versions V3.2, SCALANCE XCM324 6GK5324-8TS01-2AC2 All versions V3.2, SCALANCE XCM328 6GK5328-4TS01-2AC2 All versions V3.2, SCALANCE XCM332 6GK5332-0GA01-2AC2 All...

CVE-2025-40773

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications contains a broken access control vulnerability. The authorization mechanism lacks sufficient server-side checks, allowing an attacker to execute a specific API request. Successful exploitation...

CVE-2025-40772

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications are vulnerable to stored Cross-Site Scripting XSS, allowing an attacker to inject malicious code that can be executed by other users when they visit the affected page. Successful exploitation...

CVE-2025-40746

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V3.2. Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT...

CVE-2024-39675

A vulnerability has been identified in RUGGEDCOM RMC30 All versions V4.3.10, RUGGEDCOM RMC30NC All versions V4.3.10, RUGGEDCOM RP110 All versions V4.3.10, RUGGEDCOM RP110NC All versions V4.3.10, RUGGEDCOM RS400 All versions V4.3.10, RUGGEDCOM RS400NC All versions V4.3.10, RUGGEDCOM RS401 All...

CVE-2025-10543 affecting package telegraf for versions less than 1.29.4-18

CVE-2025-10543 affecting package telegraf for versions less than 1.29.4-18. A patched version of the package is available...

CVE-2025-6816 affecting package hdf5 for versions less than 1.14.6-1

CVE-2025-6816 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...

CVE-2025-61661 affecting package grub2 for versions less than 2.06-16

CVE-2025-61661 affecting package grub2 for versions less than 2.06-16. A patched version of the package is available...

CVE-2025-58436 affecting package cups for versions less than 2.3.3op2-11

CVE-2025-58436 affecting package cups for versions less than 2.3.3op2-11. A patched version of the package is available...

CVE-2025-2926 affecting package hdf5 for versions less than 1.14.6-1

CVE-2025-2926 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...

CVE-2025-65637 affecting package kubernetes for versions less than 1.28.4-21

CVE-2025-65637 affecting package kubernetes for versions less than 1.28.4-21. A patched version of the package is available...

WordPress Sticky Action Buttons plugin <= 1.1 - Cross-Site Request Forgery to Plugin Settings Update vulnerability

Cross-Site Request Forgery to Plugin Settings Update vulnerability discovered by afnaan - SMKN 1 Bantul in WordPress Plugin Sticky Action Buttons versions = 1.1...

WordPress Hendon theme < 1.7 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Hendon versions 1.7...

WordPress Optimize theme < 2.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Optimize versions 2.4...

AZL-73751 CVE-2025-15444 affecting package libsodium for versions less than 1.0.19-2

Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium libsodium = 1.0.20 or a version of libsodium released before December 30, 2025 contains a vulnerability documented as CVE-2025-69277 https://vulners.com/cve/CVE-2025-69277 . The libsodium...