CVE Alert: CVE-2025-53097
Vulnerability Summary: CVE-2025-53097 Roo Code is an AI-powered autonomous coding agent. Prior to version 3.20.3, there was an issue where...
Vulnerability Summary: CVE-2025-53097 Roo Code is an AI-powered autonomous coding agent. Prior to version 3.20.3, there was an issue where...
Vulnerability Summary: CVE-2025-48923 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Toc.Js allows Cross-Site Scripting...
Vulnerability Summary: CVE-2025-48922 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal GLightbox allows Cross-Site Scripting...
Vulnerability Summary: CVE-2025-48921 Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open...
Vulnerability Summary: CVE-2025-52573 iOS Simulator MCP Server (ios-simulator-mcp) is a Model Context Protocol (MCP) server for interacting with iOS simulators....
Vulnerability Summary: CVE-2025-5966 Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments...
Vulnerability Summary: CVE-2025-6677 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Paragraphs table allows Cross-Site...
Vulnerability Summary: CVE-2025-6676 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Simple XML sitemap allows...
Vulnerability Summary: CVE-2025-6695 A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0 and classified as problematic. This issue affects some unknown...
Vulnerability Summary: CVE-2025-6694 A vulnerability has been found in LabRedesCefetRJ WeGIA 3.4.0 and classified as problematic. This vulnerability affects unknown...
Vulnerability Summary: CVE-2025-5682 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent...
Vulnerability Summary: CVE-2025-6675 Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal...
Vulnerability Summary: CVE-2025-6707 Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by...
Vulnerability Summary: CVE-2025-6710 MongoDB Server may be susceptible to stack overflow due to JSON parsing mechanism, where specifically crafted JSON...
Vulnerability Summary: CVE-2025-6709 The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific...
Vulnerability Summary: CVE-2025-6674 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CKEditor5 Youtube allows Cross-Site...
Vulnerability Summary: CVE-2025-29331 An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code...
Vulnerability Summary: CVE-2025-6706 An authenticated user may trigger a use after free that may result in MongoDB Server crash and...
Vulnerability Summary: CVE-2025-53002 LLaMA-Factory is a tuning library for large language models. A remote code execution vulnerability was discovered in...
Vulnerability Summary: CVE-2024-56915 Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the RSS...
Vulnerability Summary: CVE-2025-52902 File Browser provides a file managing interface within a specified directory and it can be used to...
Vulnerability Summary: CVE-2025-6696 A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been classified as problematic. Affected is an...
Vulnerability Summary: CVE-2025-6697 A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been declared as problematic. Affected by this...
Vulnerability Summary: CVE-2025-52887 cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In version 0.21.0, when many http headers...