CVE-2014-125119

CVE-2014-125119 describes a filename spoofing vulnerability in WinRAR when opening specially crafted ZIP archives. The root cause is an inconsistency between the Central Directory and Local File Header entries, which causes WinRAR to display the Central Directory filename while extracting and exe...

CVE-2025-32429

XWiki Platform contains an SQL injection in the getdeleteddocuments.vm template via the sort parameter (LiveData REST), affecting versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2. The vulnerability allows injection of SQL by injecting the ORDER BY value, with impact described as d...

CVE-2025-7852

CVE-2025-7852 : The WPBookit WordPress plugin is vulnerable to unauthenticated arbitrary file uploads due to missing file type validation in image_upload_handle(), exploited via the add_new_customer route. Affected versions are up to and including 1.0.6. The upload handler uses move_uploaded_file...

CVE-2018-25114

OSCommerce Online Merchant 2.3.4.1 : Remote code execution via insecure installer workflow. Unauthenticated attackers can access the install_4.php endpoint in an accessible /install/ directory and inject PHP code into configure.php, which is executed when included by the app. Affected component: ...

CVE-2025-6174

The WordPress Qwizcards plugin (versions up to 3.9.4) is affected by a Reflected XSS due to insufficient sanitisation/escaping of the stylesheet parameter(s) when reflected back in the page. Specifically, the vulnerability is described as affecting the _stylesheet parameter (per CVE description) ...

CVE-2025-34141

ETQ Reliance CG (legacy) is affected by a reflected XSS in the SQLConverterServlet. The vulnerability requires user interaction (e.g., clicking a crafted link) and could execute scripts in the authenticated user’s browser. The servlet was unnecessarily exposed to authenticated users and has been ...

CVE-2025-34143

CVE-2025-34143 affects ETQ Reliance on the CG (legacy) platform. The vulnerability enables authentication bypass by manipulating the username field to login as the internal SYSTEM account, which does not require a password, granting network-access attackers elevated access. After authentication, ...

CVE-2025-38352

CVE-2025-38352: In the Linux kernel, a TOCTOU race affects posix-cpu-timers between handle_posix_cpu_timers() and posix_cpu_timer_del() when an exiting non-autoreaping task runs from IRQ. The fix adds a tsk->exit_state check into run_posix_cpu_timers() to prevent misdetection of timer->it.c...

CVE-2025-51482

Letta Letta 0.7.12 is vulnerable to remote code execution via POST /v1/tools/run (run_tool_from_source) in letta.server.rest_api.routers.v1.tools.run_tool_from_source. The underlying issue allows an unauthenticated attacker to execute arbitrary Python code and OS commands by sending crafted tool ...

CVE-2025-53771

CVE-2025-53771 is an authentication spoofing (patch-bypass) vulnerability in Microsoft SharePoint Server on-premises, enabling bypass of access checks on /layouts/15/ToolPane.aspx (DisplayMode=Edit) via crafted Referer headers. Connected docs also describe a related RCE chain when paired with CVE...

CVE-2025-53770

CVE-2025-53770 is a critical remote code execution vulnerability in on-premises Microsoft SharePoint Server, achieved via deserialization of untrusted data and an unauthenticated POST to ToolPane.aspx. The attack chain typically bypasses authentication, retrieves MachineKey values from the web.co...

CVE-2025-54313

CVE-2025-54313 refers to eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 which contain embedded malicious code用于 supply-chain compromise. The description states that installing an affected package executes a malicious install.js that launches node-gyp.dll malware on Windows. Connected IB...

CVE-2025-54309

CVE-2025-54309 affects CrushFTP 10.x prior to 10.8.5 and 11.x prior to 11.3.4_23. The flaw resides in AS2 validation/HTTP session handling (DMZ proxy handling) that can let remote attackers gain admin access via HTTPS, historically exploited in the wild around July 2025. Multiple public PoCs/expl...

CVE-2025-54068

Summary (validated by connected docs): CVE-2025-54068 affects Laravel Livewire v3 up to 3.6.3, where the component hydration/update mechanism can allow unauthenticated remote command execution under specific mounting/config conditions. Public advisories and templates confirm an in-the-wild risk a...

CVE-2025-25257

CVE-2025-25257 is a pre-auth, SQL Injection in Fortinet FortiWeb (Fabric Connector) affecting FortiWeb 7.6.0–7.6.3, 7.4.0–7.4.7, 7.2.0–7.2.10, and ≤7.0.10. The issue arises from unsafely constructing SQL with the Authorization: Bearer header in get_fabric_user_by_token(), enabling unauthenticated...

CVE-2025-3415

Summary of CVE-2025-3415 (Grafana) : Grafana’s DingDing alerting integration was exposed to users with Viewer permissions due to insufficient protection, potentially leaking DingDing integration URLs and access tokens. This issue is documented with concrete remediation: it is fixed in Grafana rel...

CVE-2025-34117

CVE-2025-34117 describes a remote code execution via an undocumented backdoor listener on UDP port 53413 in Netcore/Netis routers with firmware released before August 2014. An unauthenticated attacker can send crafted UDP packets to execute commands, thanks to a hardcoded authentication mechanism...

CVE-2025-20337

CVE-2025-20337 affects Cisco Identity Services Engine (ISE) and ISE-PIC via an API injection vulnerability. An unauthenticated, remote attacker can submit a crafted API request to exploit insufficient input validation and achieve arbitrary code execution as root on the underlying OS. Reported imp...

CVE-2025-34300

Sawtooth Software Lighthouse Studio

CVE-2025-7673

CVE-2025-7673 affects Zyxel VMG8825-T50K with firmware versions prior to V5.50(ABOM.5)C0. A buffer overflow in the URL parser of the zhttpd web server could be triggered by a specially crafted HTTP request, allowing an unauthenticated attacker to cause a denial-of-service condition and potentiall...