CVE-2025-14586

CVE-2025-14586 affects TOTOLINK X5000R 9.1.0cu.2089_B20211224. The vulnerability is in snprintf in /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user, where manipulation of the User argument leads to an OS command injection. Remote exploitation is possible and has been publicly disclosed. Connected...

CVE-2025-14611

CVE-2025-14611 affects Gladinet CentreStack and Triofox prior to 16.12.10420.56791. The root cause is hardcoded, static keys/IVs used by the AES cryptosystem (AES-256-CBC) in the web services, enabling attackers to forge or decrypt access tickets and potentially trigger arbitrary local file inclu...

CVE-2025-43542

CVE-2025-43542 affects Apple devices via a state-management issue that can cause password fields to be revealed when a device is remotely controlled over FaceTime. Affected products/versions include iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Tahoe 26.2, an...

CVE-2025-43512

CVE-2025-43512 is a logic-issue privilege-escalation vulnerability affecting Apple platforms. Connected sources indicate the kernel component primarily at fault, enabling an app to elevate privileges. Apple fixed this in iOS/iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, and macOS Taho...

CVE-2025-43482

The CVE-2025-43482 issue affects Apple macOS versions including Sonoma 14.8.3, Sequoia 15.7.3, and Tahoe 26.2. It is described as caused by insufficient input validation and results in a possible denial-of-service when an app triggers certain input conditions. The vulnerability is fixed in the st...

CVE-2025-43532

The CVE-2025-43532 issue is a memory corruption vulnerability addressed by Apple in multiple OS updates. Affected components: memory handling in several Apple platforms (iOS/iPadOS, macOS, tvOS, visionOS, watchOS) with underlying bounds-check improvements. Fixed in iOS 18.7.3 / iPadOS 18.7.3, iOS...

CVE-2025-43510

Connected documents confirm CVE-2025-43510 is a Copy-on-Write bug in the XNU kernel used in a multi-stage DarkSword exploit chain. The iOS/iPadOS/macOS chain details stage 4: sandbox escape from GPU to mediaplaybackd via this kernel bug, enabling broader privilege escalation. The vulnerability af...

CVE-2025-46289

CVE-2025-46289 describes a logic issue in macOS file handling that could allow an app to access protected user data. The vulnerability is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3, and macOS Tahoe 26.2. Practically, an attacker could exploit improper file handling to leak data under the ...

CVE-2025-43520

CVE-2025-43520 is a kernel-level race-condition vulnerability in XNU’s VFS that can enable kernel memory read/write after exploitation, as detailed in the DarkSword full-chain exploit (Stage 5: Privilege Escalation). The connected exploit analysis describes a multi-stage chain culminating in a ke...

CVE-2025-43517

A privacy issue in macOS log redaction is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, and macOS Tahoe 26.2. The flaw allowed an app to access protected user data via log entries; it is addressed by the updated builds listed above. Affected products are macOS variants released around these...

CVE-2025-14174

CVE-2025-14174 = Out-of-bounds memory access in ANGLE within Google Chrome on macOS prior to 143.0.7499.110. A remote attacker could trigger memory access errors via a crafted HTML page. Affected software: Google Chrome on macOS; vulnerable component: ANGLE. Impact: high enough to potentially ena...

CVE-2025-55184

CVE-2025-55184 is a pre-authentication Denial of Service vulnerability in React Server Components from versions 19.0.0 through 19.2.2 (affecting react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack). The issue arises from unsafe deserialization of HTTP payloads sent t...

CVE-2025-14528

The CVE-2025-14528 issue affects D-Link DIR-803 routers (firmware up to 1.04, A1 era). A vulnerability in the Configuration Handler’s /getcfg.php allows manipulation of the AUTHORIZED_GROUP parameter via newline injection, resulting in an authentication bypass and exposure of administrator creden...

CVE-2025-8110

CVE-2025-8110 affects Gogs self-hosted Git service versions 0.13.3 and earlier, due to improper symbolic link handling in PutContents that allows a symlink to target outside the repository, enabling remote code execution. Root cause: API writes to file paths without validating symlinks. Impact: l...

CVE-2025-62221

CVE-2025-62221 is a local-elevation vulnerability in the Windows Cloud Files Mini Filter Driver (CLOUD FILES MINIFILTER DRIVER). It is a use-after-free condition in the driver that can allow an authorized local attacker to escalate to SYSTEM privileges. Public PoCs/Exploits exist (GitHub repos AB...

CVE-2025-59719

CVE-2025-59719 describes an improper verification of cryptographic signatures that enables an unauthenticated attacker to bypass Fortinet FortiCloud SSO login authentication via a crafted SAML response. Affected products include Fortinet FortiWeb (versions 7.4.x up to 7.4.9, 7.6.x up to 7.6.4) an...

CVE-2025-59718

CVE-2025-59718/59719 describe an improper verification of cryptographic signatures that allows an unauthenticated attacker to bypass Fortinet FortiCloud SSO login via a crafted SAML response. Affected products span FortiOS (multiple versions up to 7.6.3, and earlier lines listed), FortiProxy, For...

CVE-2025-62631

Fortinet FortiOS versions affected by CVE-2025-62631: FortiOS 7.4.0, all 7.2 versions, all 7.0 versions, and all 6.4 versions. The issue is an insufficient session expiration (CWE-613) that lets an attacker maintain access to network resources via an active SSLVPN session not terminated after a u...

CVE-2025-48633

CVE-2025-48633 concerns a logic error in Android Framework related to DevicePolicyManagerService.hasAccountsOnAnyUser, enabling a local attacker to add a Device Owner after provisioning and escalate privileges without user interaction. Connected sources (EUVD-2025-201737; Android Security Bulleti...

CVE-2025-48572

CVE-2025-48572 is an Android Framework privilege-escalation vulnerability. It stems from improper input validation in the Framework component, allowing a local application to launch activities from background and execute arbitrary code with elevated privileges. Affected products are Android devic...