31.12.25

IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication mechanisms and gain

unauthorized access to the application.

31.12.25

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server,
potentially enabling remote code execution.

27.12.25

Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client.

25.12.25

An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in
 successfully without being prompted for the second factor of authentication (FortiToken) if they changed the case of their username.

25.12.25

Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

25.12.25

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

25.12.25

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12.

24.12.25

n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote
Code Execution (RCE) vulnerability in their workflow expression evaluation system.

19.12.25

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code.

19.12.25

(CVSS score: 7.0) - A protection mechanism failure vulnerability affecting ASRock, ASRock Rack, and ASRock Industrial motherboards using
 Intel 500, 600, 700, and 800 series chipsets

19.12.25

(CVSS score: 7.0) - A protection mechanism failure vulnerability affecting ASUS motherboards using Intel Z490, W480, B460, H410,
Z590, B560, H510, Z690, B660, W680, Z790, B760, and W790 series chipsets

19.12.25

(CVSS score: 7.0) - A protection mechanism failure vulnerability affecting GIGABYTE motherboards using Intel Z890, W880, Q870, B860, H810, Z790,
B760, Z690, Q670, B660, H610, W790 series chipsets

19.12.25

(CVSS score: 7.0) - A protection mechanism failure vulnerability affecting MSI motherboards using Intel 600 and 700 series chipsets

18.12.25

A remote code execution issue exists in HPE OneView.

18.12.25

ASUS Live Update Embedded Malicious Code Vulnerability

18.12.25

SonicWall SMA1000 Missing Authorization Vulnerability

18.12.25

Cisco is aware of a potential vulnerability.  Cisco is currently investigating and will update these details as appropriate 
as more information becomes available.

18.12.25

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

17.12.25

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary c
ode on a Confluence Server or Data Center instance.

17.12.25

(CVSS score: 8.6) - Numerous authenticated SQL injection vulnerabilities impacting four unique endpoints (basestation, model, firmware,
and custom extension) and 11 affected parameters that enable read and write access to the underlying SQL database

17.12.25

(CVSS score: 8.6) - An authenticated arbitrary file upload vulnerability that allows an attacker to exploit the firmware upload endpoint to
upload a PHP web shell after obtaining a valid PHPSESSID and run arbitrary commands to leak the contents of sensitive files (e.g., "/etc/passwd")

17.12.25

(CVSS score: 9.3) - An authentication bypass vulnerability that occurs when the "Authorization Type" (aka AUTHTYPE) is set to "webserver,"
allowing an attacker to log in to the Administrator Control Panel via a forged Authorization header

14.12.25

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

14.12.25

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

14.12.25

(CVSS score: 8.8) - A memory corruption issue in WebKit that may lead to memory corruption when processing maliciously crafted
web content

14.12.25

Apple fixes two zero-day flaws exploited in 'sophisticated' attacks By Lawrence Abrams December 12, 2025 06:23 PM 0 Apple has released
emergency updates to patch two zero-day vulnerabilities that were exploited in an “extremely sophisticated attack” targeting specific individuals.

13.12.25

CVE-2025-54100 - PowerShell Remote Code Execution Vulnerability

13.12.25

CVE-2025-64671 - GitHub Copilot for Jetbrains Remote Code Execution Vulnerability

13.12.25

CVE-2025-62221 - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

13.12.25

PowerShell Remote Code Execution Vulnerability

13.12.25

Under certain conditions, a high privileged user could exploit a deserialization vulnerability in SAP jConnect to launch remote code execution.

13.12.25

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages

13.12.25

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module.

12.12.25

Meta React Server Components Remote Code Execution Vulnerability

12.12.25

OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

12.12.25

(CVSS score: 7.5) - A pre-authentication denial of service vulnerability arising from unsafe deserialization of payloads from HTTP requests to
 Server Function endpoints, triggering an infinite loop that hangs the server process and may prevent future HTTP requests from being served

12.12.25

(CVSS score: 7.5) - An incomplete fix for CVE-2025-55184 that has the same impact

12.12.25

(CVSS score: 5.3) - An information leak vulnerability that may cause a specifically crafted HTTP request sent to a vulnerable Server Function to return
the source code of any Server Function

12.12.25

Gogs is an open source self-hosted Git service. A malicious user is able to write a file to an arbitrary path on the server to gain SSH access to the server.

12.12.25

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.

10.12.25

(CVSS score: 7.8) - A command injection vulnerability in Windows PowerShell that allows an
unauthorized attacker to execute code locally

10.12.25

(CVSS score: 8.4) - A command injection vulnerability in GitHub Copilot for JetBrains that allows
an unauthorized attacker to execute code locally

10.12.25

Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability

10.12.25

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

10.12.25

Cursor is a code editor built for programming with AI. In versions below 1.3, an attacker can bypass
the allow list in auto-run mode with a backtick (`) or $(cmd).

10.12.25

In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61,

10.12.25

Roo Code is an AI-powered autonomous coding agent that lives in users' editors.

10.12.25

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. I

10.12.25

Roo Code is an AI-powered autonomous coding agent that lives in users' editors.

10.12.25

(Forbidden IDE Reordering) – A missing integrity check on a receiving port may allow re-ordering of PCIe traffic, leading the receiver to process stale data

10.12.25

(Completion Timeout Redirection) – Incomplete flushing of a completion timeout may allow a receiver to accept incorrect data when an attacker
 injects a packet with a matching tag.

10.12.25

(Delayed Posted Redirection) – Incomplete flushing or re-keying of an IDE stream may result in the receiver consuming stale, incorrect data packets.

10.12.25

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files.

10.12.25

RARLAB WinRAR Path Traversal Vulnerability

10.12.25

Microsoft Windows Use After Free Vulnerability

10.12.25

An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4,

10.12.25

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8,

8.12.25

The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server.

8.12.25

The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeit_articles_pagination_callback() function.

7.12.25

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the
following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from HTTP requests to Server Function endpoints.

7.12.25

Windows Mark of the Web Security Feature Bypass Vulnerability

7.12.25

Cursor is a code editor built for programming with AI. Prior to 0.51.0, by default, the setting json.schemaDownload.enable was set to True.

7.12.25

Roo Code is an AI-powered autonomous coding agent. Prior to version 3.20.3, there was an issue where the Roo Code agent's `
search_files` tool did not respect the setting to disable reads outside of the VS Code workspace

7.12.25

In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50,
252.284.54, 251.284.54, 251.284.50, 243.284.54, 243.284.50 information disclosure was possible via search_project function

7.12.25

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual
Studio allows an unauthorized attacker to execute code locally.

7.12.25

Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval
 in versions less than 1.3.9. If the file is a dotfile, editing it requires approval but creating a new one doesn't.

7.12.25

Roo Code is an AI-powered autonomous coding agent. Prior to 3.22.6, if the victim had "Write" auto-approved,
an attacker with the ability to submit prompts to the agent could write to VS Code settings files and trigger code execution.

7.12.25

Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve
Remote Code Execution (RCE) by bypassing user permission checks.

7.12.25

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.

7.12.25

Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution (RCE) attacks through Visual Studio Code Workspaces.

7.12.25

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a
vulnerability where certain VS Code workspace configuration files (.code-workspace) are not protected in the same way as the .vscode folder.

7.12.25

Meta React Server Components Remote Code Execution Vulnerability

7.12.25

Memory corruption while handling IOCTL calls to set mode.

7.12.25

Memory corruption while processing MFC channel configuration during music playback.

7.12.25

Memory corruption during video playback when video session open fails with time out error.

7.12.25

Memory corruption while copying packets received from unix clients.

7.12.25

Memory Corruption when processing IOCTLs for JPEG data without verification.

7.12.25

Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.

7.12.25

Information disclosure while processing system calls with invalid parameters.

7.12.25

Memory corruption while routing GPR packets between user and root when handling large data packet.

7.12.25

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.

7.12.25

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

6.12.25

Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker
 to carry out XML External Entity injection via a crafted XFA file inside of a PDF.

6.12.25

Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms
allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. This CVE covers the same vulnerability as in CVE-2025-54988.

6.12.25

A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function print_file
of the file /handle_config.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely.

4.12.25

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including th
e following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack.

4.12.25

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
o execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the
 target must visit a malicious page or open a malicious file.

4.12.25

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable
to privilege escalation in versions 24.12.92 to 51.1.14 .

3.12.25

(CVSS score: 9.3/7.8) - A file extension bypass vulnerability that can be used to undermine the scanner and load the model when providing
a standard pickle file with a PyTorch-related extension such as .bin or .pt

3.12.25

(CVSS score: 9.3/7.5) - A bypass vulnerability that can be used to disable ZIP archive scanning by introducing a Cyclic Redundancy
 Check (CRC) error

3.12.25

(CVSS score: 9.3/8.3) - A bypass vulnerability that can be used to undermine Picklescan's unsafe globals check, leading to arbitrary code
 execution by getting around a blocklist of dangerous imports

2.12.25

This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2025-12-05
or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version.

2.12.25

OpenPLC ScadaBR Cross-site Scripting Vulnerability: OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm.

30.11.25

An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1
structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions.

30.11.25

An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality,
potentially leading to allow execution of specific functions without proper authorization. Refer to the Security Update for ASUS Router Firmware section
on the ASUS Security Advisory for more information.

30.11.25

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory,
 aka 'Microsoft Exchange Memory Corruption Vulnerability'.

30.11.25

Microsoft Exchange Server Remote Code Execution Vulnerability

30.11.25

Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

24.11.25

Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions.

24.11.25

Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with network access or the
ability to write records into Splunk or Elasticsearch can supply tag_key values containing special characters such as newlines or ../ that are treated as valid tags.

24.11.25

Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fails to enforce exact key-length matching.

24.11.25

The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer without validating length.

24.11.25

Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names. When the File option is omitted, the plugin
 uses untrusted tag input to construct file paths.

23.11.25

Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly
using an independent vulnerability.

23.11.25

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code.

23.11.25

An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request,
 potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information.

23.11.25

The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc function,
 allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post.

23.11.25

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file
system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.

23.11.25

Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem
images without verifying signatures,

23.11.25

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacke
r to cause Denial of Service (DoS), which could cause an impacted firewall to crash.

23.11.25

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through

23.11.25

Windows Cryptographic Services Security Feature Bypass Vulnerability

22.11.25

This Security Alert addresses vulnerability CVE-2025-61884 in Oracle E-Business Suite.

22.11.25

This Security Alert addresses vulnerability CVE-2025-61882 in Oracle E-Business Suite.

22.11.25

Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

21.11.25

A vulnerability classified as critical was found in Netgear JWNR2000v2 1.0.0.11.

21.11.25

Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API

21.11.25

Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF.

21.11.25

LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here:

21.11.25

LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication.

21.11.25

A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication.

20.11.25

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

20.11.25

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability

20.11.25

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability

19.11.25

An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions.

19.11.25

An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution.

19.11.25

On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter.

19.11.25

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module.

19.11.25

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module.

19.11.25

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module.

19.11.25

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module.

19.11.25

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiWeb 8.0.0 through
8.0.1, FortiWeb 7.6.0 through 7.6.5,..

19.11.25

Unity Runtime before 2025-10-02 on Android, Windows, macOS, and Linux allows argument injection that can result in loading of library
code from an unintended location.

18.11.25

Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

17.11.25

In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. This could lead to remote code execution
in combination with other bugs, with no additional execution privileges needed.

16.11.25

An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access
into the affected system.

16.11.25

CVE-2025-12686 allows remote attackers to execute arbitrary code

15.11.25

SQL Anywhere Monitor (Non-GUI) baked credentials into the code,exposing the resources or functionality to unintended users and providing attackers
with the possibility of arbitrary code execution.This could cause high impact on confidentiality integrity and availability of the system.

15.11.25

The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables.

15.11.25

15.11.25

15.11.25

15.11.25

13.11.25

Microsoft Windows Race Condition Vulnerability

13.11.25

Gladinet Triofox Improper Access Control Vulnerability

13.11.25

WatchGuard Firebox Out-of-Bounds Write Vulnerability

12.11.25

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

12.11.25

This vulnerability is already being exploited. It is a privilege escalation vulnerability in the Windows Kernel.

12.11.25

A critical GDI+ remote execution vulnerability. GDI+ parses various graphics files.

12.11.25

A code execution vulnerability in Microsoft Office. Another component with a huge attack surface that is often exploited.

12.11.25

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server,
 ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

12.11.25

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to
 execute arbitrary code on the underlying operating system as root.

11.11.25

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to
initial setup pages even after setup is complete.

9.11.25

Cisco Secure Firewall Adaptive Security Appliance Software, Secure Firewall Threat Defense Software, IOS Software, IOS
XE Software, and IOS XR Software Web Services Remote Code Execution Vulnerability

9.11.25

A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated,
remote attacker to bypass authentication and obtain administrative permissions pertaining to script creation and execution.

9.11.25

Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability

9.11.25

Cisco Adaptive Security Appliance and Firepower Threat Defense Software Web Services Denial of Service Vulnerability

8.11.25

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

8.11.25

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.

8.11.25

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an i
nstance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.

8.11.25

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, l
og messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints

8.11.25

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated
attacker to execute arbitrary code on a Confluence Server or Data Center instance.

7.11.25

Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Unauthorized Access Vulnerability

7.11.25

Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability

5.11.25

(CVSS score: 7.5) - A vulnerability in files or directories accessible to external parties in Gladinet CentreStack and Triofox that could result in unintended disclosure of system files.

5.11.25

(CVSS score: 9.0) - An operating system command injection vulnerability in Control Web Panel (formerly CentOS Web Panel) that results in
unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request.

4.11.25

Critical RCE Vulnerability CVE-2025-11953 Puts React Native Developers at Risk

4.11.25

Microsoft Teams for iOS Spoofing Vulnerability

4.11.25

A buffer overflow vulnerability that may lead to an unexpected process crash when processing maliciously crafted web content (addressed through improved bounds checking)

4.11.25

An unspecified vulnerability that could result in an unexpected process crash when processing maliciously crafted web content (addressed through improved state management)

4.11.25

Two unspecified vulnerabilities that may lead to memory corruption when processing maliciously crafted web content (addressed through improved memory handling)

4.11.25

Two unspecified vulnerabilities that may lead to memory corruption when processing maliciously crafted web content (addressed through improved memory handling)

4.11.25

A use-after-free vulnerability that may lead to an unexpected Safari crash when processing maliciously crafted web content (addressed through improved state management)

3.11.25

Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming
 requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.

3.11.25

Multiple Vulnerabilities in Cisco IOS XE Software Web UI Feature

3.11.25

Check Point Quantum Security Gateways Information Disclosure Vulnerability

3.11.25

Linux Kernel Use-After-Free Vulnerability

3.11.25

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

3.11.25

Anti-Malware Security and Brute-Force Firewall – Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read – POC

2.11.25

The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize some REST API endpoints, allowing unauthenticated
requests to install and activate arbitrary Hunk Companion WordPress plugin before 1.9.0 from the WordPress.org repo, including vulnerable Hunk
Companion WordPress plugin before 1.9.0 that have been closed.

2.11.25

The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability
check on the /wp-json/hc/v1/themehunk-import REST API endpoint in all versions up to, and including, 1.8.4.
 

2.11.25

The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to arbitrary file uploads due
 to a missing capability check on the install_and_activate_plugin_from_external() function (install-active-plugin REST API endpoint) in all versions up to, and including, 2.1.0.

1.11.25

Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming
requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.

1.11.25

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

1.11.25

XWiki Platform Eval Injection Vulnerability

30.10.25

October 24 Advisory: BIND 9 Resolver Enables Cache Poisoning Via Unsolicited Answers [CVE-2025-40778]

30.10.25

A Remote code execution vulnerability in PHPUnit

30.10.25

A Remote code execution vulnerability in Laravel

30.10.25

A Remote code execution vulnerability in ThinkPHP Framework

29.10.25

(CVSS score: 8.0) - A code injection vulnerability in Dassault Systèmes DELMIA Apriso that could allow an attacker to execute arbitrary code.

29.10.25

(CVSS score: 9.1) - A missing authorization vulnerability in Dassault Systèmes DELMIA Apriso that could allow an attacker to gain privileged access to the application.

29.10.25

(CVSS score: 9.8) - An improper neutralization of input in a dynamic evaluation call (aka eval injection) in XWiki that could allow any guest user
 to perform arbitrary remote code execution through a request to the "/bin/get/Main/SolrSearch" endpoint.

29.10.25

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker
to perform a sandbox escape via a malicious file.

27.10.25

astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a
boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar header handling.

26.10.25

Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap
 corruption via a crafted HTML page. (Chromium security severity: High)

26.10.25

In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure.

26.10.25

The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updates, dependencies, and integrations.

26.10.25

In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS.

26.10.25

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.

25.10.25

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

25.10.25

SessionReaper, unauthenticated RCE in Magento & Adobe Commerce (CVE-2025-54236)

25.10.25

Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

22.10.25

(CVSS score: 8.6) - An operating system command injection vulnerability that could be exploited by an attacker who can log in
 to the web management interface to run arbitrary commands

22.10.25

(CVSS score: 9.3) - An operating system command injection vulnerability that could be exploited by a remote unauthenticated
attacker to run arbitrary commands

22.10.25

(CVSS score: 9.3) - An operating system command injection vulnerability that could be exploited by an attacker in possession
of an administrator password of the web portal to run arbitrary commands

22.10.25

(CVSS score: 8.7) - An improper privilege management vulnerability that could be exploited by an attacker to obtain the
 root shell on the underlying operating system under restricted conditions

22.10.25

ToolShell Used to Compromise Telecoms Company in Middle East

22.10.25

TARmageddon (CVE-2025-62518): RCE Vulnerability Highlights the Challenges of Open Source Abandonware

21.10.25

Apple Multiple Products Unspecified Vulnerability 

21.10.25

Kentico Xperience Staging Sync Server Digest Password Authentication Bypass Vulnerability

21.10.25

Kentico Xperience Staging Sync Server None Password Type Authentication Bypass Vulnerability

21.10.25

Microsoft Windows SMB Client Improper Access Control Vulnerability 

21.10.25

Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

17.10.25

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code.

16.10.25

CVE-2025-54253: Pre-Auth RCE – Adobe AEM Forms on JEE Critical OGNL Injection

16.10.25

(CVSS score: 7.8) - Windows Agere Modem Driver ("ltmdm64.sys") Elevation of Privilege Vulnerability

16.10.25

(CVSS score: 7.8) - Windows Remote Access Connection Manager (RasMan) Elevation of Privilege Vulnerability

16.10.25

When user authentication is not enabled the shell can execute commands with the highest privileges.

16.10.25

Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP.

16.10.25

ICTBroadcast Command Injection Actively Exploited (CVE-2025-2611)

16.10.25

SAP Print Service (SAPSprint) performs insufficient validation of path information provided by users. An unauthenticated attacker could
traverse to the parent directory and over-write system files causing high impact on confidentiality integrity and availability of the application.

13.10.25

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14.

11.10.25

Unity Gaming Engine Editor vulnerability

11.10.25

A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response
signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.

11.10.25

Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack
portal's hardcoded machineKey use, as exploited in the wild in March 2025.

11.10.25

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw
that allows unintended disclosure of system files.

10.10.25

The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to,
and including, 6.0.

8.10.25

figma-developer-mcp vulnerable to command injection in get_figma_data tool

7.10.25

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration).

7.10.25

Lua Use-After-Free may lead to remote code execution

7.10.25

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration).

7.10.25

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site scripting (XSS) vulnerability
exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files.

5.10.25

On July 22, a security vulnerability was identified in DrayOS routers. The vulnerability can be triggered when unauthenticated r
emote attackers send crafted HTTP or HTTPS requests to the device's Web User Interface (WebUI).

5.10.25

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-
administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled
may exploit this vulnerability to escalate privileges to root on the same VM.

5.10.25

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is
 used with the --chroot option.

5.10.25

An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms
allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST.

5.10.25

VMware NSX contains a weak password recovery mechanism vulnerability. An unauthenticated malicious actor may exploit this t
o enumerate valid usernames, potentially enabling brute-force attacks. Impact: Username enumeration → credential brute force risk.

5.10.25

Description: VMware NSX contains a username enumeration vulnerability. An unauthenticated malicious actor may exploit this
to enumerate valid usernames, potentially leading to unauthorized access attempts. Impact: Username enumeration → facilitates unauthorized access.

4.10.25

An argument injection flaw that attackers can use to trigger a denial of service (DoS), crashing the router or overwhelming remote servers.

4.10.25

An unauthenticated command injection vulnerability that allows attackers to remotely execute arbitrary commands on the device.

4.10.25

A security bypass that attackers can exploit to corrupt system files, cause a persistent denial-of-service, or achieve arbitrary file writes.

3.10.25

GNU Bash OS Command Injection Vulnerability

3.10.25

Juniper ScreenOS Improper Authentication Vulnerability

3.10.25

Jenkins Remote Code Execution Vulnerability

3.10.25

Smartbedded Meteobridge Command Injection Vulnerability

3.10.25

Samsung Mobile Devices Out-of-Bounds Write Vulnerability

3.10.25

A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example
 as a data scientist using a standard Jupyter notebook, can escalate their privileges to a full cluster administrator.

3.10.25

In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 (even though this secret
 should only be returned when an App is first created),

28.9.25

There is a vulnerability in the BMC firmware image authentication design at Supermicro MBD-X12DPG-OA6 .

28.9.25

CVE-2025-10184: OnePlus OxygenOS Telephony provider permission bypass (NOT FIXED)

27.9.25

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2,
multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted input against a default
GeoServer installation due to unsafely evaluating property names as XPath expressions.

26.9.25

A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response
signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.

26.9.25

(CVSS score: 9.9) - An improper validation of user-supplied input in HTTP(S) requests vulnerability that could allow an authenticated,
remote attacker with valid VPN user credentials to execute arbitrary code as root on an affected device by sending crafted HTTP requests

26.9.25

(CVSS score: 6.5) - An improper validation of user-supplied input in HTTP(S) requests vulnerability that could allow an unauthenticated, remote attacker
 to access restricted URL endpoints without authentication by sending crafted HTTP requests

25.9.25

Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

24.9.25

(CVSS score: 9.1) - An authentication bypass vulnerability that exists within the permissions granted to a storage account token

24.9.25

(CVSS score: 9.4) - An authentication bypass vulnerability that exists within the permissions granted to an SAS token

24.9.25

A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe.

24.9.25

Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix h
as been released in 5.0.31.

24.9.25

(CVSS score: 6.4) - A crafted firmware image can bypass the Supermicro BMC firmware verification logic of the Signing Table to
 update the system firmware by redirecting the program to a fake signing table ("sig_table") in the unsigned region

24.9.25

(CVSS score: 6.6) - A crafted firmware image can bypass the Supermicro BMC firmware verification logic of Root of Trust (RoT)
1.0 to update the system firmware by redirecting the program to a fake "fwmap" table in the unsigned region