CVE Alert: CVE-2025-27929
Vulnerability Summary: CVE-2025-27929 Unauthenticated attackers can retrieve full list of users associated with arbitrary accounts. Affected Endpoints: No affected endpoints...
Vulnerability Summary: CVE-2025-27929 Unauthenticated attackers can retrieve full list of users associated with arbitrary accounts. Affected Endpoints: No affected endpoints...
Vulnerability Summary: CVE-2025-30970 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Easy Contact allows Reflected...
Vulnerability Summary: CVE-2025-30966 Path Traversal vulnerability in NotFound WPJobBoard allows Path Traversal. This issue affects WPJobBoard: from n/a through n/a....
Vulnerability Summary: CVE-2025-30257 Unauthenticated attackers can retrieve serial number of smart meters associated to a specific user account. Affected Endpoints:...
Vulnerability Summary: CVE-2025-30510 An attacker can upload an arbitrary file instead of a plant image. Affected Endpoints: No affected endpoints...
Vulnerability Summary: CVE-2025-30512 Unauthenticated attackers can send configuration settings to device and possible perform physical actions remotely (e.g., on/off). Affected...
Vulnerability Summary: CVE-2025-30967 Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Upload a Web Shell to a Web Server....
Vulnerability Summary: CVE-2025-31950 An unauthenticated attacker can obtain EV charger energy consumption information of other users. Affected Endpoints: No affected...
Vulnerability Summary: CVE-2025-31654 An attacker can get information about the groups of the smart home devices for arbitrary users (i.e.,...
Vulnerability Summary: CVE-2025-31945 An unauthenticated attacker can obtain other users' charger information. Affected Endpoints: No affected endpoints listed. Published Date:...
Vulnerability Summary: CVE-2025-31360 Unauthenticated attackers can trigger device actions associated with specific "scenes" of arbitrary users. Affected Endpoints: No affected...
Vulnerability Summary: CVE-2025-31147 Unauthenticated attackers can query information about total energy consumed by EV chargers of arbitrary users. Affected Endpoints:...
Vulnerability Summary: CVE-2025-32388 SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.20.6 ,...
Vulnerability Summary: CVE-2025-30984 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound SEO Tools allows Reflected...
Vulnerability Summary: CVE-2025-32782 Ash Authentication provides authentication for the Ash framework. The confirmation flow for account creation currently uses a...
Vulnerability Summary: CVE-2025-32435 Hydra is a Continuous Integration service for Nix based projects. Evaluation of untrusted non-flake nix code could...
Vulnerability Summary: CVE-2025-32923 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Tourmaster allows Reflected XSS....
Vulnerability Summary: CVE-2025-3559 A vulnerability has been found in ghostxbh uzy-ssm-mall 1.0.0 and classified as critical. This vulnerability affects the...
Vulnerability Summary: CVE-2025-31344 Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C....
Vulnerability Summary: CVE-2025-3558 A vulnerability, which was classified as critical, was found in ghostxbh uzy-ssm-mall 1.0.0. This affects an unknown...
Vulnerability Summary: CVE-2025-3556 A vulnerability classified as problematic was found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this vulnerability is an...
Vulnerability Summary: CVE-2025-3557 A vulnerability, which was classified as problematic, has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this...
Vulnerability Summary: CVE-2025-3561 A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0. It has been classified as problematic. Affected is an...
Vulnerability Summary: CVE-2025-3562 A vulnerability was found in Yonyou YonBIP MA2.7. It has been declared as problematic. Affected by this...