Aggregator

A vulnerability, which was classified as critical, was found in Progress WS_FTP Server up to 8.7.3/8.8.1. Affected is an unknown function of the component Ad Hoc Transfer Module. Executing manipulation can lead to deserialization. This vulnerability is tracked as CVE-2023-40044. The attack can be launched remotely. Moreover, an exploit is present. You should upgrade the affected component.

A vulnerability has been found in Summer Pearl Group Vacation Rental Management Platform Vulnerability up to 1.0.1 and classified as critical. This issue affects some unknown processing. The manipulation leads to improper authorization. This vulnerability is documented as CVE-2025-63562. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability categorized as problematic has been discovered in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. This impacts an unknown function of the component HTTP Connection Handler. Executing manipulation can lead to denial of service. This vulnerability is handled as CVE-2025-63561. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. Affected is an unknown function. The manipulation leads to manage user sessions. This vulnerability is uniquely identified as CVE-2025-63563. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Tenda AX-1803 1.0.0.1. This affects the function form_fast_setting_wifi_set. Performing manipulation of the argument timeZone results in stack-based buffer overflow. This vulnerability is cataloged as CVE-2025-63458. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Tenda AX-3 16.03.12.10_CN. This vulnerability affects the function get_parentControl_list_Info. Executing manipulation of the argument deviceId can lead to stack-based buffer overflow. This vulnerability is registered as CVE-2025-63454. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in ELOG. It has been declared as critical. The impacted element is an unknown function. Such manipulation leads to missing authorization. This vulnerability is traded as CVE-2025-64349. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Silabs Silicon Labs Z-Wave SDK up to 2025.6.1. It has been rated as critical. This affects an unknown function of the component SmartStart Inclusion. Performing manipulation results in algorithm downgrade. This vulnerability is known as CVE-2025-10693. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in F5 F5OS-A and F5OS-C. It has been declared as critical. The impacted element is an unknown function. The manipulation results in improper neutralization of directives in dynamically evaluated code. This vulnerability was named CVE-2025-61955. The attack needs to be approached locally. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability has been found in F5 F5OS-A and F5OS-C and classified as critical. Affected is an unknown function. This manipulation causes execution with unnecessary privileges. This vulnerability appears as CVE-2025-57780. The attack requires local access. There is no available exploit. The affected component should be upgraded.

A vulnerability was found in F5 F5OS-A up to 1.5.3/1.8.0. It has been classified as critical. The affected element is an unknown function of the component rSeries FIPS Module. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2025-60013. Local access is required to approach this attack. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in F5 F5OS-A and F5OS-C and classified as critical. This affects an unknown part. Such manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2025-60015. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability was found in F5 F5OS-C up to 1.6.2/1.8.1. It has been rated as critical. This affects an unknown part of the component Allowed IP Addresses Feature. Performing manipulation results in denial of service. This vulnerability is identified as CVE-2025-59778. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability was found in F5 F5OS-A up to 1.5.2/1.8.0. It has been classified as problematic. This vulnerability affects unknown code of the component FIPS Hardware Security Module. Performing manipulation results in information disclosure. This vulnerability was named CVE-2025-53860. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability was found in OpenSMTPD 7.7.0. It has been rated as problematic. This vulnerability affects unknown code of the file smtpd.sock of the component Unix Domain Socket Handler. This manipulation causes memory leak. This vulnerability appears as CVE-2025-62875. The attack requires local access. There is no available exploit. To fix this issue, it is recommended to deploy a patch.

A vulnerability was found in Kallyas Plugin up to 4.23.0 on WordPress. It has been declared as problematic. This affects an unknown part of the component Shortcode Handler. The manipulation results in cross site scripting. This vulnerability is reported as CVE-2025-6988. The attack can be launched remotely. No exploit exists.

A vulnerability was found in Import WP Plugin up to 2.14.16 on WordPress. It has been classified as problematic. Affected by this issue is the function attach_file of the component REST API Endpoint. The manipulation of the argument local_url leads to path traversal. This vulnerability is documented as CVE-2025-12137. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in Schema & Structured Data for WP & AMP Plugin up to 1.51 on WordPress and classified as problematic. Affected by this vulnerability is the function saswp_tiny_multiple_faq of the component Shortcode Handler. Executing manipulation can lead to cross site scripting. This vulnerability is registered as CVE-2025-11502. It is possible to launch the attack remotely. No exploit is available.

A vulnerability has been found in RadiusTheme Team Plugin up to 5.1.2 on WordPress and classified as problematic. Affected is an unknown function. Performing manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2025-12090. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Community Events Plugin up to 1.5.2 on WordPress. This impacts an unknown function of the component Event Detail Handler. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE-2025-11995. The attack may be performed from remote. There is no available exploit.