Ultime CVE critiche

📅 2025-07-09

🔧 Unknown

CVE-2025-53624 (score: 10, severity: CRITICAL)
The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuration options. The token, intended for build-time API access only, is inadvertently included in client-side JavaScript bundles, making it accessible to anyone who can view the website's source code. This vulnerability is fixed in 4.0.0.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/webbertakken/docusaurus-plugin-content-gists/commit/8d4230b82412edb215ddfa9e609d178510a5fe31] [https://github.com/webbertakken/docusaurus-plugin-content-gists/security/advisories/GHSA-qf34-qpr4-5pph]

CVE-2025-53546 (score: 9.1, severity: CRITICAL)
Folo organizes feeds content into one timeline. Using pull_request_target on .github/workflows/auto-fix-lint-format-commit.yml can be exploited by attackers, since untrusted code can be executed having full access to secrets (from the base repo). By exploiting the vulnerability is possible to exfiltrate GITHUB_TOKEN which has high privileges. GITHUB_TOKEN can be used to completely overtake the repo since the token has content write privileges. This vulnerability is fixed in commit 585c6a591440cd39f92374230ac5d65d7dd23d6a.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/RSSNext/Folo/commit/585c6a591440cd39f92374230ac5d65d7dd23d6a] [https://github.com/RSSNext/Folo/security/advisories/GHSA-h87r-5w74-qfm4] [https://github.com/RSSNext/Folo/security/advisories/GHSA-h87r-5w74-qfm4]
CVE-2025-6514 (score: 9.6, severity: CRITICAL)
mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/geelen/mcp-remote/commit/607b226a356cb61a239ffaba2fb3db1c9dea4bac] [https://jfrog.com/blog/2025-6514-critical-mcp-remote-rce-vulnerability] [https://research.jfrog.com/vulnerabilities/mcp-remote-command-injection-rce-jfsa-2025-001290844/]
CVE-2025-3499 (score: 10, severity: CRITICAL)
The device has two web servers that expose unauthenticated REST APIs on the management network (TCP ports 8084 and 8086). Exploiting OS command injection through these APIs, an attacker can send arbitrary commands that are executed with administrative permissions by the underlying operating system.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://www.cvcn.gov.it/cvcn/cve/CVE-2025-3499]

CVE-2025-3498 (score: 9.9, severity: CRITICAL)
An unauthenticated user with management network access can get and modify the Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) configuration. The device has two web servers that expose unauthenticated REST APIs on the management network (TCP ports 8084 and 8086). An attacker can use these APIs to get access to all system settings, modify the configuration and execute some commands (e.g., system reboot).
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://www.cvcn.gov.it/cvcn/cve/CVE-2025-3498]
CVE-2025-4606 (score: 9.8, severity: CRITICAL)
The Sala - Startup & SaaS WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.4. This is due to the theme not properly validating a user's identity prior to updating their details like password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://themeforest.net/item/sala-startup-saas-wordpress-theme/33843955?s_rank=4] [https://www.wordfence.com/threat-intel/vulnerabilities/id/aa385a1f-1623-4f0a-bb2f-d4564b8f91bf?source=cve]
CVE-2025-7206 (score: 9.8, severity: CRITICAL)
A vulnerability, which was classified as critical, has been found in D-Link DIR-825 2.10. This issue affects the function sub_410DDC of the file switch_language.cgi of the component httpd. The manipulation of the argument Language leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/i-Corner/cve/issues/2] [https://vuldb.com/?ctiid.315155] [https://vuldb.com/?id.315155] [https://vuldb.com/?submit.607661] [https://www.dlink.com/] [https://github.com/i-Corner/cve/issues/2]

CVE-2025-4855 (score: 9.8, severity: CRITICAL)
The Support Board plugin for WordPress is vulnerable to unauthorized access/modification/deletion of data due to use of hardcoded default secrets in the sb_encryption() function in all versions up to, and including, 3.8.0. This makes it possible for unauthenticated attackers to bypass authorization and execute arbitrary AJAX actions defined in the sb_ajax_execute() function. An attacker can use this vulnerability to exploit CVE-2025-4828 and various other functions unauthenticated.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://codecanyon.net/item/support-board-help-desk-and-chat/20359943] [https://www.wordfence.com/threat-intel/vulnerabilities/id/afd48bc8-d490-4a3e-97fc-70cf008cbf66?source=cve]
CVE-2025-4828 (score: 9.8, severity: CRITICAL)
The Support Board plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the sb_file_delete function in all versions up to, and including, 3.8.0. This makes it possible for attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). An attacker can leverage CVE-2025-4855 vulnerability to exploit this vulnerability unauthenticated.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://codecanyon.net/item/support-board-help-desk-and-chat/20359943] [https://www.wordfence.com/threat-intel/vulnerabilities/id/33989611-8640-4c33-a34e-14f10cd7286d?source=cve]

📅 2025-07-08

🔧 Unknown

CVE-2025-49533 (score: 9.8, severity: CRITICAL)
Adobe Experience Manager (MS) versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://helpx.adobe.com/security/products/aem-forms/apsb25-67.html]

CVE-2025-27203 (score: 9.6, severity: CRITICAL)
Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does require user interaction and scope is changed.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://helpx.adobe.com/security/products/connect/apsb25-61.html]
CVE-2025-7194 (score: 8.8, severity: HIGH)
A vulnerability was found in D-Link DI-500WF 17.04.10A1T. It has been declared as critical. Affected by this vulnerability is the function sprintf of the file ip_position.asp of the component jhttpd. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/BigMancer/CVE/issues/1] [https://vuldb.com/?ctiid.315133] [https://vuldb.com/?id.315133] [https://vuldb.com/?submit.607311] [https://www.dlink.com/]
CVE-2025-49551 (score: 8.8, severity: HIGH)
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a Use of Hard-coded Credentials vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized access to sensitive systems or data. Exploitation of this issue does not require user interaction. The vulnerable component is restricted to internal IP addresses.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: ADJACENT_NETWORK
- Fonti: [https://helpx.adobe.com/security/products/coldfusion/apsb25-69.html]

CVE-2025-49535 (score: 9.3, severity: CRITICAL)
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in a Security feature bypass. An attacker could exploit this vulnerability to access sensitive information or denial of service by bypassing security measures. Exploitation of this issue does not require user interaction and scope is changed. The vulnerable component is restricted to internal IP addresses.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: ADJACENT_NETWORK
- Fonti: [https://helpx.adobe.com/security/products/coldfusion/apsb25-69.html]
CVE-2025-37103 (score: 9.8, severity: CRITICAL)
Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing anyone with knowledge of it to bypass normal device authentication. Successful exploitation could allow a remote attacker to gain administrative access to the system.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04894en_us&docLocale=en_US]
CVE-2025-0928 (score: 8.8, severity: HIGH)
In Juju versions prior to 3.6.8 and 2.9.52, any authenticated controller user was allowed to upload arbitrary agent binaries to any model or to the controller itself, without verifying model membership or requiring explicit permissions. This enabled the distribution of poisoned binaries to new or upgraded machines, potentially resulting in remote code execution.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/juju/juju/security/advisories/GHSA-4vc8-wvhw-m5gv]

CVE-2025-53513 (score: 8.8, severity: HIGH)
The /charms endpoint on a Juju controller lacked sufficient authorization checks, allowing any user with an account on the controller to upload a charm. Uploading a malicious charm that exploits a Zip Slip vulnerability could allow an attacker to gain access to a machine running a unit through the affected charm.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/juju/juju/security/advisories/GHSA-24ch-w38v-xmh8] [https://github.com/juju/juju/security/advisories/GHSA-24ch-w38v-xmh8]
CVE-2025-49753 (score: 8.8, severity: HIGH)
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49753]
CVE-2025-49740 (score: 8.8, severity: HIGH)
Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49740]

CVE-2025-49739 (score: 8.8, severity: HIGH)
Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49739]
CVE-2025-49729 (score: 8.8, severity: HIGH)
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49729]
CVE-2025-49724 (score: 8.8, severity: HIGH)
Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49724]

CVE-2025-49723 (score: 8.8, severity: HIGH)
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: LOCAL
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49723]
CVE-2025-49704 (score: 8.8, severity: HIGH)
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704]
CVE-2025-49701 (score: 8.8, severity: HIGH)
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49701]

CVE-2025-49688 (score: 8.8, severity: HIGH)
Double free in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49688]
CVE-2025-49687 (score: 8.8, severity: HIGH)
Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: LOCAL
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49687]
CVE-2025-49676 (score: 8.8, severity: HIGH)
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49676]

CVE-2025-49674 (score: 8.8, severity: HIGH)
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49674]
CVE-2025-49673 (score: 8.8, severity: HIGH)
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49673]
CVE-2025-49672 (score: 8.8, severity: HIGH)
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49672]

CVE-2025-49670 (score: 8.8, severity: HIGH)
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49670]
CVE-2025-49669 (score: 8.8, severity: HIGH)
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49669]
CVE-2025-49668 (score: 8.8, severity: HIGH)
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49668]
CVE-2025-49663 (score: 8.8, severity: HIGH)
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49663]
CVE-2025-49657 (score: 8.8, severity: HIGH)
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49657]
CVE-2025-48824 (score: 8.8, severity: HIGH)
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48824]
CVE-2025-48817 (score: 8.8, severity: HIGH)
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48817]
CVE-2025-47998 (score: 8.8, severity: HIGH)
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47998]
CVE-2025-47986 (score: 8.8, severity: HIGH)
Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: LOCAL
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47986]
CVE-2025-47981 (score: 9.8, severity: CRITICAL)
Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47981]
CVE-2025-21450 (score: 9.1, severity: CRITICAL)
Cryptographic issue occurs due to use of insecure connection method while downloading.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html]
CVE-2025-41224 (score: 8.8, severity: HIGH)
A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: ADJACENT_NETWORK
- Fonti: [https://cert-portal.siemens.com/productcert/html/ssa-083019.html]
CVE-2025-40738 (score: 8.8, severity: HIGH)
A vulnerability has been identified in SINEC NMS (All versions
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://cert-portal.siemens.com/productcert/html/ssa-078892.html]
CVE-2025-40737 (score: 8.8, severity: HIGH)
A vulnerability has been identified in SINEC NMS (All versions
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://cert-portal.siemens.com/productcert/html/ssa-078892.html]
CVE-2025-40736 (score: 9.8, severity: CRITICAL)
A vulnerability has been identified in SINEC NMS (All versions
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://cert-portal.siemens.com/productcert/html/ssa-078892.html]
CVE-2025-40735 (score: 8.8, severity: HIGH)
A vulnerability has been identified in SINEC NMS (All versions
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://cert-portal.siemens.com/productcert/html/ssa-078892.html]
CVE-2025-41668 (score: 8.8, severity: HIGH)
A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://certvde.com/en/advisories/VDE-2025-054]
CVE-2025-41667 (score: 8.8, severity: HIGH)
A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://certvde.com/en/advisories/VDE-2025-054]
CVE-2025-41666 (score: 8.8, severity: HIGH)
A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write and execute access to any file on the device after the watchdog has been initialized.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://certvde.com/en/advisories/VDE-2025-054]
CVE-2025-25271 (score: 8.8, severity: HIGH)
An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: ADJACENT_NETWORK
- Fonti: [https://certvde.com/de/advisories/VDE-2025-019]
CVE-2025-25270 (score: 9.8, severity: CRITICAL)
An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://certvde.com/de/advisories/VDE-2025-019]
CVE-2025-25268 (score: 8.8, severity: HIGH)
An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting in read and write access due to missing authentication.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: ADJACENT_NETWORK
- Fonti: [https://certvde.com/de/advisories/VDE-2025-019]
CVE-2025-20680 (score: 9.8, severity: CRITICAL)
In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418044; Issue ID: MSV-3482.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://corp.mediatek.com/product-security-bulletin/July-2025]
CVE-2025-42980 (score: 9.1, severity: CRITICAL)
SAP NetWeaver Enterprise Portal Federated Portal Network is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://me.sap.com/notes/3620498] [https://url.sap/sapsecuritypatchday]
CVE-2025-42967 (score: 9.9, severity: CRITICAL)
SAP S/4HANA and SAP SCM Characteristic Propagation has remote code execution vulnerability. This allows an attacker with user level privileges to create a new report with his own code potentially gaining full control of the affected SAP system causing high impact on confidentiality, integrity, and availability of the application.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://me.sap.com/notes/3618955] [https://url.sap/sapsecuritypatchday]
CVE-2025-42966 (score: 9.1, severity: CRITICAL)
SAP NetWeaver XML Data Archiving Service allows an authenticated attacker with administrative privileges to exploit an insecure Java deserialization vulnerability by sending a specially crafted serialized Java object. This could lead to high impact on confidentiality, integrity, and availability of the application.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://me.sap.com/notes/3610892] [https://url.sap/sapsecuritypatchday]
CVE-2025-42964 (score: 9.1, severity: CRITICAL)
SAP NetWeaver Enterprise Portal Administration is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://me.sap.com/notes/3621236] [https://url.sap/sapsecuritypatchday]
CVE-2025-42963 (score: 9.1, severity: CRITICAL)
A critical vulnerability in SAP NetWeaver Application server for Java Log Viewer enables authenticated administrator users to exploit unsafe Java object deserialization. Successful exploitation can lead to full operating system compromise, granting attackers complete control over the affected system. This results in a severe impact on the confidentiality, integrity, and availability of the application and host environment.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://me.sap.com/notes/3621771] [https://url.sap/sapsecuritypatchday]

🔧 mediatek

CVE-2025-20686 (score: 8.8, severity: HIGH)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415570; Issue ID: MSV-3404.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: ADJACENT_NETWORK
- Fonti: [https://corp.mediatek.com/product-security-bulletin/July-2025]
CVE-2025-20685 (score: 8.8, severity: HIGH)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416226; Issue ID: MSV-3409.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: ADJACENT_NETWORK
- Fonti: [https://corp.mediatek.com/product-security-bulletin/July-2025]
CVE-2025-20684 (score: 9.8, severity: CRITICAL)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416939; Issue ID: MSV-3422.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://corp.mediatek.com/product-security-bulletin/July-2025]
CVE-2025-20683 (score: 9.8, severity: CRITICAL)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; Issue ID: MSV-3444.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://corp.mediatek.com/product-security-bulletin/July-2025]
CVE-2025-20682 (score: 9.8, severity: CRITICAL)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416937; Issue ID: MSV-3445.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://corp.mediatek.com/product-security-bulletin/July-2025]
CVE-2025-20681 (score: 9.8, severity: CRITICAL)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; Issue ID: MSV-3446.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://corp.mediatek.com/product-security-bulletin/July-2025]

🔧 openwrt

CVE-2025-20686 (score: 8.8, severity: HIGH)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415570; Issue ID: MSV-3404.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: ADJACENT_NETWORK
- Fonti: [https://corp.mediatek.com/product-security-bulletin/July-2025]
CVE-2025-20685 (score: 8.8, severity: HIGH)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416226; Issue ID: MSV-3409.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: ADJACENT_NETWORK
- Fonti: [https://corp.mediatek.com/product-security-bulletin/July-2025]
CVE-2025-20683 (score: 9.8, severity: CRITICAL)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; Issue ID: MSV-3444.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://corp.mediatek.com/product-security-bulletin/July-2025]
CVE-2025-20682 (score: 9.8, severity: CRITICAL)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416937; Issue ID: MSV-3445.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://corp.mediatek.com/product-security-bulletin/July-2025]
CVE-2025-20681 (score: 9.8, severity: CRITICAL)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; Issue ID: MSV-3446.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://corp.mediatek.com/product-security-bulletin/July-2025]

🔧 radiustheme

CVE-2025-7327 (score: 8.8, severity: HIGH)
The Widget for Google Reviews plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.15 via the layout parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. This is limited to just PHP files.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3316262%40business-reviews-wp%2Ftrunk&old=3201057%40business-reviews-wp%2Ftrunk&sfp_email=&sfph_mail=] [https://www.wordfence.com/threat-intel/vulnerabilities/id/4681e56f-1dad-46a7-8ac7-1f543a383433?source=cve]

🔧 xtemos

CVE-2025-6746 (score: 8.8, severity: HIGH)
The WoodMart plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.2.3 via the 'layout' attribute. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php files can be uploaded and included.
- Ultimo aggiornamento: 2025-07-09
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://themeforest.net/item/woodmart-woocommerce-wordpress-theme/20264492] [https://www.wordfence.com/threat-intel/vulnerabilities/id/98c1363e-b25d-46fc-b6bf-0285a37f748c?source=cve]

📅 2025-07-07

🔧 Unknown

CVE-2025-53499 (score: 9.1, severity: CRITICAL)
Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Unauthorized Access.This issue affects Mediawiki - AbuseFilter Extension: from 1.43.X before 1.43.2.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1166045] [https://phabricator.wikimedia.org/T397196]
CVE-2025-53495 (score: 9.1, severity: CRITICAL)
Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Unauthorized Access.This issue affects Mediawiki - AbuseFilter Extension: from 1.43.X before 1.43.2.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1166040] [https://phabricator.wikimedia.org/T396750]
CVE-2025-53529 (score: 9.8, severity: CRITICAL)
WeGIA is a web manager for charitable institutions. An SQL Injection vulnerability was identified in the /html/funcionario/profile_funcionario.php endpoint. The id_funcionario parameter is not properly sanitized or validated before being used in a SQL query, allowing an unauthenticated attacker to inject arbitrary SQL commands. The vulnerability is fixed in 3.4.3.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/LabRedesCefetRJ/WeGIA/commit/0a061bcc5024937edd18ab3e65ccc8f38deb6957] [https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-rrj6-pj6w-8j2r]
CVE-2024-25178 (score: 9.1, severity: CRITICAL)
LuaJIT through 2.1 has an out-of-bounds read in the stack-overflow handler in lj_state.c
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://gist.github.com/pwnhacker0x18/423b4292f301ab274b42d5ed6e0b87d8] [https://github.com/LuaJIT/LuaJIT/commit/defe61a56751a0db5f00ff3ab7b8f45436ba74c8] [https://github.com/LuaJIT/LuaJIT/issues/1152] [https://github.com/LuaJIT/LuaJIT/issues/1152]
CVE-2024-25176 (score: 9.8, severity: CRITICAL)
LuaJIT through 2.1 has a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://gist.github.com/pwnhacker0x18/cd75d01fc7c9b6c85c183fbe5353d276] [https://github.com/LuaJIT/LuaJIT/commit/343ce0edaf3906a62022936175b2f5410024cbfc] [https://github.com/LuaJIT/LuaJIT/issues/1149] [https://github.com/LuaJIT/LuaJIT/issues/1149]
CVE-2025-47202 (score: 9.1, severity: CRITICAL)
In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400, the lack of a length check leads to out-of-bounds writes.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://semiconductor.samsung.com/support/quality-support/product-security-updates/] [https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-47202/]
CVE-2025-45479 (score: 9.8, severity: CRITICAL)
Insufficient security mechanisms for created containers in educoder challenges v1.0 allow attackers to execute arbitrary code via injecting crafted content into a container.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/YX-hueimie/CVE-Issues/blob/main/CVE-2025-45479.md] [https://www.educoder.net/] [https://www.educoder.net/shixuns/fb7qhjgz/challenges] [https://github.com/YX-hueimie/CVE-Issues/blob/main/CVE-2025-45479.md]
CVE-2025-45065 (score: 9.8, severity: CRITICAL)
employee record management system in php and mysql v1 was discovered to contain a SQL injection vulnerability via the loginerms.php endpoint.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://docs.google.com/document/d/1Sq08I_eKCY-YOmVOQPIEj4Ui2pW0gIgXHcqD9fcvR7M/edit?usp=sharing] [https://medium.com/@shrutukapoor25/cve-2025-45065-b58a33e65860] [https://docs.google.com/document/d/1Sq08I_eKCY-YOmVOQPIEj4Ui2pW0gIgXHcqD9fcvR7M/edit?tab=t.0#heading=h.vb8p0lepu9vn]
CVE-2025-43933 (score: 9.8, severity: CRITICAL)
fblog through 983bede allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a reset depends on the Host HTTP header.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/ghost123gg/fblog/blob/983bedec9f837a54ab2dfd358a9cb45504a2e709/app/templates/auth/email/resetPassword.html#L1-L8] [https://github.com/ghost123gg/fblog/issues/5]
CVE-2025-43932 (score: 9.8, severity: CRITICAL)
JobCenter through 7e7b0b2 allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a reset depends on the Host HTTP header.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/guomaoqiu/JobCenter/blob/7e7b0b2f756d66bba7e592a6c8952c78a3573d9c/app/templates/auth/email/reset_password.txt] [https://github.com/guomaoqiu/JobCenter/issues/18]
CVE-2025-43931 (score: 9.8, severity: CRITICAL)
flask-boilerplate through a170e7c allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a reset depends on the Host HTTP header.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://gist.github.com/BrookeYangRui/19fcc6c19df7bb4d8437476c609a6129] [https://github.com/MaxHalford/flask-boilerplate/blob/a170e7cec605906801680567c4279b30ccd9630b/app/views/user.py#L103-L126]
CVE-2025-6811 (score: 9.8, severity: CRITICAL)
Mescius ActiveReports.NET TypeResolutionService Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mescius ActiveReports.NET. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the TypeResolutionService class. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25397.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://www.zerodayinitiative.com/advisories/ZDI-25-449/]
CVE-2025-6810 (score: 9.8, severity: CRITICAL)
Mescius ActiveReports.NET ReadValue Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mescius ActiveReports.NET. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the implementation of the ReadValue method. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25246.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://www.zerodayinitiative.com/advisories/ZDI-25-448/]
CVE-2025-6802 (score: 9.8, severity: CRITICAL)
Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the getFileFromURL method. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-24922.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://www.zerodayinitiative.com/advisories/ZDI-25-464/]
CVE-2025-6794 (score: 9.8, severity: CRITICAL)
Marvell QConvergeConsole saveAsText Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the saveAsText method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-24913.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://www.zerodayinitiative.com/advisories/ZDI-25-454/]
CVE-2025-6793 (score: 9.4, severity: CRITICAL)
Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability. This vulnerability allows remote attackers to delete arbitrary files and disclose sensitive information on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability. The specific flaw exists within the QLogicDownloadImpl class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to delete files and disclose information in the context of SYSTEM. Was ZDI-CAN-24912.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://www.zerodayinitiative.com/advisories/ZDI-25-450/]
CVE-2025-43930 (score: 9.8, severity: CRITICAL)
Hashview 0.8.1 allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a reset depends on the Host HTTP header.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/hashview/hashview/blob/579a082176279f4af0e128e44c9da5667f82ec5a/hashview/users/routes.py#L198-L218] [https://github.com/hashview/hashview/issues/145]
CVE-2025-4779 (score: 9.1, severity: CRITICAL)
lunary-ai/lunary versions prior to 1.9.24 are vulnerable to stored cross-site scripting (XSS). An unauthenticated attacker can inject malicious JavaScript into the `v1/runs/ingest` endpoint by adding an empty `citations` field, triggering a code path where `dangerouslySetInnerHTML` is used to render attacker-controlled text. This vulnerability allows the execution of arbitrary JavaScript in the context of the user's browser, potentially leading to session hijacking, data theft, or other malicious actions.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/lunary-ai/lunary/commit/18750294a76ff6c0f3f1b6af4ac1a23399836b16] [https://huntr.com/bounties/c603b64e-5171-4eed-8983-a7f656ce2c4d]
CVE-2025-3626 (score: 9.1, severity: CRITICAL)
A remote attacker with administrator account can gain full control of the device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') while uploading a config file via webUI.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://certvde.com/en/advisories/VDE-2025-030]
CVE-2025-3466 (score: 9.8, severity: CRITICAL)
langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions. The vulnerability arises from the ability to override global functions in JavaScript, such as parseInt, before sandbox security restrictions are imposed. This can lead to unauthorized access to secret keys, internal network servers, and lateral movement within dify.ai. The issue is resolved in version 1.1.3.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/langgenius/dify/commit/1be0d26c1feb4bcbbdd2b4ae4eeb25874aadaddb] [https://huntr.com/bounties/f8dc17a3-5536-4944-a680-24070903cd2d]
CVE-2025-7118 (score: 8.8, severity: HIGH)
A vulnerability, which was classified as critical, has been found in UTT HiPER 840G up to 3.1.1-190328. This issue affects some unknown processing of the file /goform/formPictureUrl. The manipulation of the argument importpictureurl leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/d2pq/cve/blob/main/616/8.md] [https://github.com/d2pq/cve/blob/main/616/8.md#poc] [https://vuldb.com/?ctiid.315029] [https://vuldb.com/?id.315029] [https://vuldb.com/?submit.605875]
CVE-2025-7117 (score: 8.8, severity: HIGH)
A vulnerability classified as critical was found in UTT HiPER 840G up to 3.1.1-190328. This vulnerability affects unknown code of the file /goform/websWhiteList. The manipulation of the argument addHostFilter leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/d2pq/cve/blob/main/616/9.md] [https://github.com/d2pq/cve/blob/main/616/9.md#poc] [https://vuldb.com/?ctiid.315028] [https://vuldb.com/?id.315028] [https://vuldb.com/?submit.605864]
CVE-2025-7116 (score: 8.8, severity: HIGH)
A vulnerability classified as critical has been found in UTT 进取 750W up to 3.2.2-191225. This affects an unknown part of the file /goform/Fast_wireless_conf. The manipulation of the argument ssid leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/d2pq/cve/blob/main/616/10.md] [https://github.com/d2pq/cve/blob/main/616/10.md#poc] [https://vuldb.com/?ctiid.315027] [https://vuldb.com/?id.315027] [https://vuldb.com/?submit.605862]
CVE-2025-41672 (score: 10, severity: CRITICAL)
A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://cert.vde.com/en/advisories/VDE-2025-057] [https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-057.json]
CVE-2025-48501 (score: 9.8, severity: CRITICAL)
An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed on the server where the product is running.
- Ultimo aggiornamento: 2025-07-08
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://aws.amazon.com/marketplace/seller-profile?id=08fb48d1-5d60-4feb-93c6-c0c219278a2c] [https://jvn.jp/en/jp/JVN88251376/]

CVE critiche emesse negli ultimi giorni

📅 2025-07-09

🔧 Unknown

📅 2025-07-08

🔧 Unknown

🔧 mediatek

🔧 openwrt

🔧 radiustheme

🔧 xtemos

📅 2025-07-07

🔧 Unknown