2025

Missing Authorization vulnerability in Zara 4 Zara 4 Image Compression zara-4 allows Exploiting Incorrectly Configured A

Cross-Site Request Forgery (CSRF) vulnerability in Oganro XML Travel Portal Widget oganro-reservation-widget allows Cros

Cross-Site Request Forgery (CSRF) vulnerability in marcusjansen Live Sports Streamthunder live-sports-streamthunder allo

Cross-Site Request Forgery (CSRF) vulnerability in Oganro Oganro Travel Portal Search Widget for HotelBeds APITUDE API o

Cross-Site Request Forgery (CSRF) vulnerability in Oganro PixelBeds Channel Manager and Hotel Booking Engine pixelbeds-c

Cross-Site Request Forgery (CSRF) vulnerability in indgeek ClipLink cliplink allows Cross Site Request Forgery.This issu

Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to pr

Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to pr

An issue was discovered on COROS PACE 3 devices through 3.0808.0. The BLE implementation of the COROS smartwatch does no

An issue was discovered in the COROS application through 3.8.12 for Android. Bluetooth pairing and bonding is neither in

Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains an improper neutralization of special elements used i

An issue was discovered in GitLab EE affecting all versions starting from 17.0 prior to 17.0.6, starting from 17.1 prior

A vulnerability classified as problematic was found in code-projects School Fees Payment System 1.0. This vulnerability

A vulnerability was found in DedeCMS up to 5.7.2 and classified as critical. This issue affects some unknown processing

A vulnerability, which was classified as critical, was found in PHPGurukul Directory Management System 2.0. This affects

A vulnerability, which was classified as critical, has been found in PHPGurukul Directory Management System 2.0. Affecte

A vulnerability classified as critical was found in PHPGurukul Directory Management System 1.0. Affected by this vulnera

A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated as critical. This issue

A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by th

A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System 1.0. Affected is

The Euro FxRef Currency Converter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cur

A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0. This i

Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user proc

The Custom Post Carousels with Owl WordPress plugin before 1.4.12 uses the featherlight library and makes use of the dat

A vulnerability classified as critical was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this v

A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is a

A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part o

Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do

A vulnerability was found in PHPGurukul COVID19 Testing Management System 2021. It has been rated as problematic. This i

A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability a

A vulnerability was found in xlang-ai OpenAgents up to ff2e46440699af1324eb25655b622c4a131265bb and classified as critic

A vulnerability has been found in OpenBMB XAgent up to 1.0.0 and classified as critical. Affected by this vulnerability

A vulnerability, which was classified as critical, was found in TransformerOptimus SuperAGI up to 0.0.14. Affected is th

A vulnerability, which was classified as critical, has been found in Upsonic up to 0.55.6. This issue affects the functi

A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.pat

A vulnerability classified as critical has been found in Brilliance Golden Link Secondary System up to 20250609. This af

A vulnerability was found in Brilliance Golden Link Secondary System up to 20250609. It has been rated as critical. Affe

IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be

A vulnerability, which was classified as critical, has been found in HDF5 up to 1.14.6. Affected by this issue is the fu

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in

A vulnerability classified as critical was found in HDF5 up to 1.14.6. Affected by this vulnerability is the function H5

A vulnerability classified as problematic has been found in Luna Imaging up to 7.5.5.6. Affected is an unknown function

Hydra is a layer-two scalability solution for Cardano. Prior to version 0.22.0, the process assumes L1 event finality an

A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. It has been rated a

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution

A vulnerability was detected in Teledyne FLIR AX8 up to 1.46. Affected by this vulnerability is an unknown functionality

# Summary Unauthorized users can perform Arbitrary File Read and Deserialization attack by submit job using restful api

The Gutenverse News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘elementId’ parameter in a

The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modifi