CVE-2024-55963

CVE-2024-55963 affects Appsmith prior to 1.51. The issue is improper access control on the restart API, allowing a non-admin user to trigger a server restart from within the Appsmith container. The impact is a denial of service on the Appsmith server (availability impact H) with the vulnerability...

CVE-2025-30567

CVE-2025-30567 affects WordPress WP01 plugin versions up to 2.6.2. The vulnerability is a path traversal flaw in the ZIP generation that allows unauthenticated attackers to download arbitrary files. Remediation: upgrade to WP01 version 2.6.3 or later, which validates file paths in the archive gen...

CVE-2025-29635

CVE-2025-29635 is a command-injection vulnerability in D-Link DIR-823X 240126–240802 that can be triggered by a POST to /goform/set_prohibiting, enabling remote command execution by an authenticated attacker. Connected sources document a Mirai-family campaign actively exploiting this flaw to depl...

CVE-2025-2712

CVE-2025-2712 affects Yonyou UFIDA ERP-NC 5.0. The vulnerability is a reflected cross-site scripting (XSS) in the langcode parameter, impacting /help/top.jsp (and, per related templates, /help/systop.jsp). Root cause: unsanitized input reflected in the response, enabling arbitrary JavaScript exec...

CVE-2025-2749

CVE-2025-2749 affects Kentico Xperience versions up to and including 13.0.178, where an authenticated Staging Sync Server can upload data to path-relative locations, causing path traversal and arbitrary file uploads that can lead to remote code execution. Root cause is authenticated path traversa...

CVE-2025-2747

Kentico Xperience 13 CMS is affected by an authentication bypass in the Staging Sync Server component, due to password handling for the server-defined None type. This allows bypass of authentication and potential control of administrative objects, with impact stated up to version 13.0.178. A reme...

CVE-2025-2746

CVE-2025-2746 – Kentico Xperience Staging Service authentication bypass : Affected product is Kentico Xperience (CMS) up to version 13.0.172. The vulnerability is an authentication bypass in the Staging Service that handles passwords for the Staging Sync Server using digest authentication with em...

CVE-2025-29927

CVE‑2025‑29927 affects Next.js before patches: versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3. The issue is an authorization bypass that can occur if the check runs in middleware. Fixed in the specified versions; patching to a safe version is recommended. If patching is infeasible, block external r...

CVE-2025-2539

The WordPress File Away plugin is vulnerable to unauthenticated arbitrary file read via a missing capability check in the ajax() endpoint in all versions up to 3.9.9.0.1. Authenticated status is not required (ATT&CK: None specified in documents), and the vulnerability allows reading server files ...

CVE-2024-4990

CVE-2024-4990 (Yii2

CVE-2025-29925

XWiki Platform REST API vulnerability CVE-2025-29925: the /rest/wikis/[wikiName]/pages endpoint could disclose information about protected/private pages to unauthenticated users before fixes. The issue occurs because the endpoint listed pages even when the user had no view rights, notably when th...

CVE-2025-30154

CVE-2025-30154 involves the GitHub Action reviewdog/action-setup@v1, which was compromised on 2025-03-11 (18:42–20:31 UTC). The malicious code dumps exposed secrets to GitHub Actions workflow logs. Related reviewdog actions that rely on action-setup@v1 (including action-shellcheck, action-composi...

CVE-2025-24799

GLPI pre-auth SQL injection in the Inventory feature affects versions up to 10.0.17 due to insufficient sanitization of XML input in handleAgent, where SimpleXMLElement objects can bypass dbEscapeRecursive and allow arbitrary SQL via the inventory endpoint. Impact: unauthenticated access to data....

CVE-2025-30066

CVE-2025-30066 affects tj-actions/changed-files before 46, where a malicious commit (0e58ed8) was used to alter tags (e.g., v1, v45.0.7) and cause secrets to be read from GitHub Actions logs. Public reports and advisories (CISA, OSV, GHSA) confirm secrets disclosure via runners’ logs in affected ...

CVE-2025-2264

CVE-2025-2264 describes a Path Traversal Information Disclosure in Sante PACS Server.exe. The nuclei template confirms an unauthenticated path traversal that allows reading arbitrary files from the server’s disk and cites Sante PACS Server

CVE-2025-29891

CVE-2025-29891 describes a bypass/injection in Apache Camel where the default incoming header filter may be bypassed, allowing headers to influence internal components (e.g., camel-bean, camel-exec) via HTTP parameters or headers. Affected versions: Camel 4.10.0–4.10.1/4.10.0–4.10.1, 4.8.0–4.8.4/...

CVE-2025-21590

CVE-2025-21590 – Junos OS kernel vulnerability : An improper isolation/compartmentalization flaw in the Junos OS kernel allows a local attacker with shell access and high privileges to inject arbitrary code and compromise device integrity (not exploitable from the Junos CLI). Affected are Junos O...

CVE-2025-27915

The CVE-2025-27915 issue affects Zimbra Collaboration (ZCS) Classic Web Client, where insufficient sanitization of HTML in ICS files enables stored XSS when viewing an email with a crafted ICS entry. The underlying flaw allows embedded JavaScript to execute via an ontoggle event inside a tag, en...

CVE-2025-24201

CVE-2025-24201 is a WebKit/WebKitGTK issue described in connected advisories as an out-of-bounds write that allowed breaking out of the Web Content sandbox. Root cause: out-of-bounds write in WebKit. Impact: potential sandbox breakout affecting Apple WebKit-based products (Safari, iOS/iPadOS 18.x...

CVE-2025-26633

CVE-2025-26633 is a local-privilege-escalation in Microsoft Management Console (MMC) caused by improper neutralization in how MMC loads language-twin .msc files. A malicious “evil twin” .msc in a language directory can execute payloads with the user’s privileges when a user opens a legitimate MMC...