CVE-2025-59528

Flowise 3.0.5 contains a remote code execution vulnerability in the CustomMCP node. The mcpServerConfig string is parsed and passed to the Function() constructor via convertToValidJSONString without validation, allowing an attacker to execute arbitrary JavaScript with Node.js privileges (e.g., ac...

CVE-2025-48703

CWP (Control Web Panel) versions before 0.9.8.1205 are affected by an unauthenticated remote code execution vulnerability in filemanager/changePerm via shell metacharacters in t_total. Root cause: unsanitized input in t_total enables arbitrary code execution with a non-root user known. Impact is ...

CVE-2025-57296

The CVE-2025-57296 entry concerns Tenda AC6 router firmware 15.03.05.19. The formSetIptv function handles /goform/SetIPTVCfg requests and, when processing list and vlanId, uses a sub_ADBC0 helper that concatenates user-supplied values into nvram set system commands via doSystemCmd without validat...

CVE-2025-59689

Libraesva ESG is affected by CVE-2025-59689. The vulnerability allows command injection via a specially crafted compressed email attachment, impacting ESG 4.5 through 5.5.x prior to fixed versions. Affected fixes are: ESG 5.0.31, ESG 5.1.20, ESG 5.2.31, ESG 5.4.8, and ESG 5.5.7 (with older 4.5–5....

CVE-2025-10035

CVE-2025-10035 – GoAnywhere MFT deserialization flaw in the License Servlet allows an attacker with a forged license response signature to deserialize attacker-controlled data, potentially enabling command injection and remote code execution. Public analyses indicate the vulnerability affects GoA...

CVE-2025-59476

Summary: CVE-2025-59476 affects Jenkins 2.527 and earlier, and LTS 2.516.2 and earlier. The issue is that the log formatter does not restrict or transform characters in user-supplied log content, enabling an attacker to insert line breaks and forge subsequent log messages, potentially misleading ...

CVE-2025-59474

The connected data confirms CVE-2025-59474 affects Jenkins 2.527 and earlier, and LTS 2.516.2 and earlier, where a missing permission check in the sidepanel allows users lacking Overall/Read to list agent names via the sidepanel executors widget. Root cause: lack of permission enforcement for an ...

CVE-2025-9242

CVE-2025-9242: WatchGuard Fireware OS contains an out-of-bounds write in the iked process that may allow remote unauthenticated code execution on affected VPN configurations (Mobile User VPN with IKEv2 and Branch Office VPN with dynamic gateway peer). AffectedFireware OS versions include 11.10.2–...

CVE-2025-10204

AC Smart II contains an authentication bypass vulnerability (CVE-2025-10204) due to a hidden admin password-reset form that can be manipulated via browser developer tools to display and use the form. The form allows changing the administrator password without verifying login status or permissions...

CVE-2025-10364

CVE-2025-10364 affects the Evertz SDVN 3080ipx-10G web management interface. The issue is a command-injection vulnerability in feature-transfer-export.php that allows remote unauthenticated arbitrary code execution with root privileges. The connected sources confirm the vulnerability is tied to t...

CVE-2025-10365

The CVE-2025-10365 issue affects Evertz SDVN 3080ipx-10G web management (port 80). Connected docs identify two vulnerable endpoints (feature-transfer-import.php and feature-transfer-export.php) enabling arbitrary command execution, plus an authentication bypass. Remote unauthenticated attackers c...

CVE-2025-21043

CVE-2025-21043 is an out-of-bounds write vulnerability in Samsung’s image decoding library, libimagecodec.quram.so, that can lead to remote code execution. The vulnerability affects Samsung mobile devices’ Quram DNG processing, with attacker-controlled input (e.g., malformed DNG) triggering heap/...

CVE-2025-21042

CVE-2025-21042 is an out-of-bounds write in Samsung’s Quram library (libimagecodec.quram.so) used by com.samsung.ipservice to decode DNG images. The root cause is a bug in QuramDngOpcodeDeltaPerColumn: opcode_last_plane is miscalculated and there is no check that the current plane is within image...

CVE-2025-9807

The CVE-2025-9807 entry concerns the WordPress plugin The Events Calendar. Affected software: The Events Calendar plugin for WordPress (versions through 6.15.1). Vulnerability: time-based SQL Injection in the s parameter caused by insufficient escaping of user input and inadequate preparation of ...

CVE-2025-10211

ChanCMS 3.3.0 contains a server-side request forgery in the CollectController, triggered by manipulating the taskUrl parameter in /cms/collect/getArticle. The issue allows remote attackers to make arbitrary requests from the server. Public disclosures and a Nuclei template detail this SSRF, descr...

CVE-2025-54123

Hoverfly (versions

CVE-2025-10164

CVE-2025-10164 affects lmsys sglang 0.4.6. The vulnerability is in the main function of the file /update_weights_from_tensor, where manipulation of the serialized_named_tensors input enables deserialization, allowing remote exploitation. Public exploits exist and the vendor was unresponsive. Publ...

CVE-2025-54251

Affected product : Adobe Experience Manager (AEM) ≤ 6.5.23.0. Vulnerability type : XML Injection that can bypass security features. Root cause / vector : Unspecified in the CVE entry, but the Nuclei template and related notes describe an XML injection that allows manipulation of XML queries and c...

CVE-2025-54249

Adobe Experience Manager (AEM) versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that can bypass security features and allow unauthorized read access. The CVE identifier is CVE-2025-54249. Evidence from connected documents shows the issue is specific...

CVE-2025-54236

CVE-2025-54236 affects Adobe Commerce and Magento Open Source: Improper Input Validation could allow an attacker to take over customer sessions (high confidentiality/integrity impact) with network-level, no-interaction exploit. Affected: Adobe Commerce 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12,...