CVE Alert: CVE-2025-3862
Vulnerability Summary: CVE-2025-3862 Contest Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all...
Vulnerability Summary: CVE-2025-3862 Contest Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all...
Vulnerability Summary: CVE-2025-2806 The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting...
Vulnerability Summary: CVE-2025-47730 The TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an authentication token) from the TM...
Vulnerability Summary: CVE-2025-4207 Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of...
Vulnerability Summary: CVE-2025-47729 The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal)...
Vulnerability Summary: CVE-2025-26844 An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag. Affected...
Vulnerability Summary: CVE-2025-26842 An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the...
Ransomware Group: MEDUSA VICTIM NAME: Lake Shore Paving NOTE: No files or stolen information are by RedPacket Security. Any legal...
Ransomware Group: CLOP VICTIM NAME: CHECKCITYCOM NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
Ransomware Group: NIGHTSPIRE VICTIM NAME: North Kitsap School District NOTE: No files or stolen information are by RedPacket Security. Any...
Ransomware Group: MEDUSA VICTIM NAME: Russell Child Development Center NOTE: No files or stolen information are by RedPacket Security. Any...
Ransomware Group: NIGHTSPIRE VICTIM NAME: CEE APTA NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
Ransomware Group: AKIRA VICTIM NAME: Bervar and Jones NOTE: No files or stolen information are by RedPacket Security. Any legal...
Ransomware Group: AKIRA VICTIM NAME: Klampfer Elektroanlagen NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
Vulnerability Summary: CVE-2025-1948 In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value...
Vulnerability Summary: CVE-2025-4132 Rapid7 Corporate Website prior to May 2nd 2025, suffered from a URL Redirection to Untrusted Site ('Open...
Vulnerability Summary: CVE-2025-44021 OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if...
Vulnerability Summary: CVE-2025-26845 An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the...
Vulnerability Summary: CVE-2025-26847 An issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all passwords are...
Vulnerability Summary: CVE-2024-12378 On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in...
Vulnerability Summary: CVE-2024-11186 On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to...
Vulnerability Summary: CVE-2025-30102 Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.1.0, contains an out-of-bounds write vulnerability. A local low privileged attacker...
Vulnerability Summary: CVE-2024-13009 In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a...
Vulnerability Summary: CVE-2025-30101 Dell PowerScale OneFS, versions 9.8.0.0 through 9.10.1.0, contain a time-of-check time-of-use (TOCTOU) race condition vulnerability. An unauthenticated...