2025

The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to mi

The WP AUDIO GALLERY plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validat

The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG

The URL Image Importer plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type valida

The WPBookit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css_code' parameter in all versi

The Realty Portal plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege esc

Uncontrolled search path element issue exists in the installer of LogStare Collector (for Windows). If exploited, arbitr

The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative u

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Z

vLLM is an inference and serving engine for large language models (LLMs). From versions 0.10.2 to before 0.11.1, a memor

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown p

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a ne

Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privile

Microsoft Defender Portal Spoofing Vulnerability

Azure Monitor Elevation of Privilege Vulnerability

IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fi

Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory.

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2

Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change othe

The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary fil

Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary command ex

Lite XL versions 2.1.8 and prior automatically execute the .lite_project.lua file when opening a project directory, with

SOPlanning is vulnerable to Privilege Escalation in user management tab. Users with user_manage_team role are allowed to

SOPlanning is vulnerable to Predictable Generation of Password Recovery Token. Due to weak mechanism of generating recov

Vulnerability in LimeSurvey 6.13.0 in the endpoint /optin that causes infinite HTTP redirects when accessed directly. Th

Vulnerability in LimeSurvey 6.13.0 in the endpoint /optout that causes infinite HTTP redirects when accessed directly.

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to ca

A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of

A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the fi

A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/Se

A flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executin

A security vulnerability has been detected in UTT 进取 750W up to 3.2.2-191225. Affected by this vulnerability is the func

A security flaw has been discovered in Muse Group MuseHub 2.1.0.1567. The affected element is an unknown function of the

Unrestricted Upload of File with Dangerous Type vulnerability in Narkom Communication and Software Technologies Trade Lt

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Narkom Comm

A vulnerability was detected in freeprojectscodes Sports Club Management System 1.0. The affected element is an unknown

A security vulnerability has been detected in itsourcecode Human Resource Management System 1.0. Impacted is an unknown

A weakness has been identified in itsourcecode Human Resource Management System 1.0. This issue affects some unknown pro

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attacke

Campcodes Online Hospital Management System 1.0 is vulnerable to SQL Injection in /admin/index.php via the parameter use

Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file p

A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected is an unknown function of

OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.9.5, an

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary

A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based

A path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary file writes when application is co

WBCE CMS is a content management system. Prior to version 1.6.4, a low-privileged user in WBCE CMS can escalate their pr

Homarr is an open-source dashboard. Prior to version 1.43.3, stored XSS vulnerability exists, allowing the execution of

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization vulnerabil