PT-2025-37765

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student File Management System version 1.0 Description: A weakness exists in SourceCodester Online Student File Management System 1.0 related to unrestricted file upload through manipulation of the /save file.php file an...

CVE-2025-10320 iteachyou Dreamer CMS updatePwd weak password

A vulnerability was detected in iteachyou Dreamer CMS up to 4.1.3.2. This issue affects some unknown processing of the file /admin/user/updatePwd. Performing manipulation results in weak password requirements. Remote exploitation of the attack is possible. A high degree of complexity is needed fo...

CVE-2025-55053

CWE-328: Use of Weak Hash...

CVE-2025-55048

Multiple CWE-78...

Exploit for CVE-2025-46408

CVE-2025-46408 Improper Hostname Verification in EagleEyes...

Linux Distros Unpatched Vulnerability : CVE-2010-3804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak...

IBM Security Verify Information Queue 加密问题漏洞

IBM Security Verify Information Queue is an integration product from International Business Machines IBM, Inc. utilizes Kafka technology and a publish/subscribe model to integrate data between IBM Security products. A cryptographic issue vulnerability exists in IBM Security Verify Information Que...

CVE-2025-55047

CWE-798 Use of Hard-coded Credentials...

CVE-2025-55053

CWE-328: Use of Weak Hash...

CVE-2025-55051

CVE-2025-55051 corresponds to CWE-1392 (Use of Default Credentials) with a CVSSv3.1 base score 10.0 (CRITICAL, NETWORK, no user interaction) affecting Baicells devices: Nova436Q; Nova430e/430i; NEUTRINO430; NOVA846. Root cause stated: default credentials being used leads to security feature bypas...

CVE-2025-55050

CWE-1242: Inclusion of Undocumented Features...

CVE-2025-55049

CVE-2025-55049: Use of a default cryptographic key (CWE-1394) with a root cause of hard-coded/public key in affected components. Concrete detail in sources identifies Baicells NEUTRINO430 LTE base stations as affected; other entries confirm the vulnerability name. Exploitation status is not provi...

CVE-2025-55049

Use of Default Cryptographic Key CWE-1394...

CVE-2025-55048

Multiple CWE-78...

CVE-2025-55047

Baicells SPECTRA LTE-U eNB outdoor base station is affected by a trust management issue described as hard-coded credentials (CVE-2025-55047). Root cause: hard-coded credentials leading to potential security feature bypass. Impact: unauthorized access or bypass of security features as indicated by...

CVE-2025-32486 WordPress Material Dashboard plugin <= 1.4.6 - Privilege Escalation Vulnerability

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hossein Material Dashboard material-dashboard.This issue affects Material Dashboard: from n/a through = 1.4.6...

CVE-2025-42933

CVE-2025-42933 affects SAP Business One through the SLD backend service, where a flaw in enforcing encryption of certain APIs exposes sensitive credentials in HTTP response bodies. The issue impacts confidentiality, integrity, and availability. CVSS 3.1 base score 8.8 (Network, Low attack complex...

PT-2025-36927

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The issue involves the use of a weak hash. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

Cisco Integrated Management Controller IMC is a set of software used by Cisco to manage UCS Unified Computing System, which supports HTTP, SSH access, etc., and allows operations such as powering up, shutting down and restarting the server. A cross-site scripting vulnerability exists in Cisco...

PT-2025-36823

Name of the Vulnerable Software and Affected Versions: Microsoft Graphics Component affected versions not specified Description: The issue allows an authorized attacker to elevate privileges locally. This is an elevation-of-privilege vulnerability that can affect the system. Recommendations: At t...