CVE Alert: CVE-2025-52807
Vulnerability Summary: CVE-2025-52807 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusWP...
Vulnerability Summary: CVE-2025-52807 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusWP...
Vulnerability Summary: CVE-2025-52813 Missing Authorization vulnerability in pietro MobiLoud allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects...
Vulnerability Summary: CVE-2025-52833 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in designthemes LMS allows...
Vulnerability Summary: CVE-2025-6740 The Contact Form 7 Database Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
Vulnerability Summary: CVE-2025-48172 CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chm_lib.c _chm_decompress_block integer overflow. There...
Vulnerability Summary: CVE-2025-52832 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpo-HR NGG Smart...
Vulnerability Summary: CVE-2025-49809 mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment...
Vulnerability Summary: CVE-2025-7061 A vulnerability was found in Intelbras InControl up to 2.21.60.9. It has been declared as problematic. This...
Vulnerability Summary: CVE-2025-46733 OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on...
Vulnerability Summary: CVE-2025-49601 In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at least 4...
Vulnerability Summary: CVE-2025-49600 In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation fails and internal errors...
Vulnerability Summary: CVE-2025-52497 Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_buffer and two mbedtls_pk_parse...
Vulnerability Summary: CVE-2025-52496 Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An...
Vulnerability Summary: CVE-2025-7067 A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5FS__sinfo_serialize_node_cb of...
Vulnerability Summary: CVE-2025-7069 A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FS__sect_link_size...
Vulnerability Summary: CVE-2025-48952 NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the...
Vulnerability Summary: CVE-2025-7070 A vulnerability has been found in IROAD Dashcam Q9 up to 20250624 and classified as problematic. Affected...
Vulnerability Summary: CVE-2025-7068 A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the...
Vulnerability Summary: CVE-2025-53602 Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar...
Exclusive Widespread outages across Ingram Micro's websites and client service portals are being attributed to "technical difficulties." The outages at Ingram...
A mysterious piece of "under development" code is playing havoc with the Windows Firewall after the latest preview update for...
Ransomware Group: INTERLOCK VICTIM NAME: Your Building Centers NOTE: No files or stolen information are by RedPacket Security. Any legal...
Vulnerability Summary: CVE-2025-27449 The MEAC300-FNADE4 does not implement sufficient measures to prevent multiple failed authentication attempts within a short time...
Vulnerability Summary: CVE-2025-27450 The Secure attribute is missing on multiple cookies provided by the MEAC300-FNADE4. An attacker can trick a...