Ultime CVE critiche

📅 2025-07-04

🔧 Unknown

CVE-2025-52833 (score: 9.3, severity: CRITICAL)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in designthemes LMS allows SQL Injection. This issue affects LMS: from n/a through 9.1.
- Ultimo aggiornamento: 2025-07-04
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/theme/lms/vulnerability/wordpress-lms-9-1-sql-injection-vulnerability?_s_id=cve]

CVE-2025-52832 (score: 9.3, severity: CRITICAL)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpo-HR NGG Smart Image Search allows SQL Injection. This issue affects NGG Smart Image Search: from n/a through 3.4.1.
- Ultimo aggiornamento: 2025-07-04
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/plugin/ngg-smart-image-search/vulnerability/wordpress-ngg-smart-image-search-3-4-1-sql-injection-vulnerability?_s_id=cve]
CVE-2025-52831 (score: 9.3, severity: CRITICAL)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in thanhtungtnt Video List Manager allows SQL Injection. This issue affects Video List Manager: from n/a through 1.7.
- Ultimo aggiornamento: 2025-07-04
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/plugin/video-list-manager/vulnerability/wordpress-video-list-manager-1-7-sql-injection-vulnerability?_s_id=cve]
CVE-2025-52830 (score: 9.3, severity: CRITICAL)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bsecuretech bSecure – Your Universal Checkout allows Blind SQL Injection. This issue affects bSecure – Your Universal Checkout: from n/a through 1.7.9.
- Ultimo aggiornamento: 2025-07-04
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/plugin/bsecure/vulnerability/wordpress-bsecure-your-universal-checkout-1-7-9-sql-injection-vulnerability?_s_id=cve]

CVE-2025-52828 (score: 8.8, severity: HIGH)
Deserialization of Untrusted Data vulnerability in designthemes Red Art allows Object Injection. This issue affects Red Art: from n/a through 3.7.
- Ultimo aggiornamento: 2025-07-04
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/theme/redart/vulnerability/wordpress-red-art-3-7-php-object-injection-vulnerability?_s_id=cve]
CVE-2025-49867 (score: 9.8, severity: CRITICAL)
Incorrect Privilege Assignment vulnerability in InspiryThemes RealHomes allows Privilege Escalation. This issue affects RealHomes: from n/a through 4.4.0.
- Ultimo aggiornamento: 2025-07-04
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/theme/realhomes/vulnerability/wordpress-realhomes-4-4-0-privilege-escalation-vulnerability?_s_id=cve]
CVE-2025-49417 (score: 9.8, severity: CRITICAL)
Deserialization of Untrusted Data vulnerability in BestWpDeveloper WooCommerce Product Multi-Action allows Object Injection. This issue affects WooCommerce Product Multi-Action: from n/a through 1.3.
- Ultimo aggiornamento: 2025-07-04
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/plugin/woo-product-multiaction/vulnerability/wordpress-woocommerce-product-multi-action-1-3-deserialization-of-untrusted-data-vulnerability?_s_id=cve]

CVE-2025-49414 (score: 10, severity: CRITICAL)
Unrestricted Upload of File with Dangerous Type vulnerability in Fastw3b LLC FW Gallery allows Using Malicious Files. This issue affects FW Gallery: from n/a through 8.0.0.
- Ultimo aggiornamento: 2025-07-04
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/plugin/fw-gallery/vulnerability/wordpress-fw-gallery-8-0-0-arbitrary-file-upload-vulnerability?_s_id=cve]
CVE-2025-49302 (score: 10, severity: CRITICAL)
Improper Control of Generation of Code ('Code Injection') vulnerability in Scott Paterson Easy Stripe allows Remote Code Inclusion. This issue affects Easy Stripe: from n/a through 1.1.
- Ultimo aggiornamento: 2025-07-04
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/plugin/easy-stripe/vulnerability/wordpress-easy-stripe-1-1-remote-code-execution-rce-vulnerability?_s_id=cve]
CVE-2025-30933 (score: 10, severity: CRITICAL)
Unrestricted Upload of File with Dangerous Type vulnerability in LiquidThemes LogisticsHub allows Upload a Web Shell to a Web Server. This issue affects LogisticsHub: from n/a through 1.1.6.
- Ultimo aggiornamento: 2025-07-04
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/theme/logistics-hub/vulnerability/wordpress-logisticshub-1-1-6-arbitrary-file-upload-vulnerability?_s_id=cve]

CVE-2025-28983 (score: 9.8, severity: CRITICAL)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge Click & Pledge Connect allows Privilege Escalation. This issue affects Click & Pledge Connect: from 25.04010101 through WP6.8.
- Ultimo aggiornamento: 2025-07-04
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/plugin/click-pledge-connect/vulnerability/wordpress-click-pledge-connect-plugin-25-04010101-wp6-8-privilege-escalation-via-sql-injection-vulnerability?_s_id=cve]
CVE-2025-23970 (score: 9.8, severity: CRITICAL)
Incorrect Privilege Assignment vulnerability in aonetheme Service Finder Booking allows Privilege Escalation. This issue affects Service Finder Booking: from n/a through 6.0.
- Ultimo aggiornamento: 2025-07-04
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/plugin/sf-booking/vulnerability/wordpress-service-finder-booking-6-0-privilege-escalation-vulnerability?_s_id=cve]
CVE-2025-28951 (score: 9.1, severity: CRITICAL)
Unrestricted Upload of File with Dangerous Type vulnerability in CreedAlly Bulk Featured Image allows Upload a Web Shell to a Web Server. This issue affects Bulk Featured Image: from n/a through 1.2.1.
- Ultimo aggiornamento: 2025-07-04
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/plugin/bulk-featured-image/vulnerability/wordpress-bulk-featured-image-plugin-1-2-1-arbitrary-file-upload-vulnerability?_s_id=cve]

CVE-2025-5953 (score: 8.8, severity: HIGH)
The WP Human Resource Management plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the ajax_insert_employee() and update_empoyee() functions in versions 2.0.0 through 2.2.17. The AJAX handler reads the client-supplied $_POST['role'] and, after basic cleaning via hrm_clean(), passes it directly to wp_insert_user() and later to $user->set_role() without verifying that the current user is allowed to assign that role. This makes it possible for authenticated attackers, with Employee-level access and above, to elevate their privileges to administrator.
- Ultimo aggiornamento: 2025-07-04
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://plugins.trac.wordpress.org/browser/hrm/tags/2.2.17/class/employee.php#L543] [https://plugins.trac.wordpress.org/browser/hrm/tags/2.2.17/class/employee.php#L591] [https://plugins.trac.wordpress.org/browser/hrm/tags/2.2.17/class/employee.php#L89] [https://wordpress.org/plugins/hrm/#developers] [https://www.wordfence.com/threat-intel/vulnerabilities/id/3ba33a18-429f-4a3e-b018-bdfbbe6e8482?source=cve]

📅 2025-07-03

🔧 Unknown

CVE-2025-23968 (score: 9.1, severity: CRITICAL)
Unrestricted Upload of File with Dangerous Type vulnerability in WPCenter AiBud WP allows Upload a Web Shell to a Web Server.This issue affects AiBud WP: from n/a through 1.8.5.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/plugin/aibuddy-openai-chatgpt/vulnerability/wordpress-aibud-wp-plugin-1-8-5-arbitrary-file-upload-vulnerability?_s_id=cve]
CVE-2025-6926 (score: 8.8, severity: HIGH)
Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1165117] [https://phabricator.wikimedia.org/T389010]

CVE-2025-53501 (score: 8.8, severity: HIGH)
Improper Access Control vulnerability in Wikimedia Foundation Mediawiki - Scribunto Extension allows : Accessing Functionality Not Properly Constrained by Authorization.This issue affects Mediawiki - Scribunto Extension: from 1.39.X before 1.39.12, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Scribunto/+/1164541] [https://phabricator.wikimedia.org/T397524]
CVE-2025-2932 (score: 8.8, severity: HIGH)
The JKDEVKIT plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'font_upload_handler' function in all versions up to, and including, 1.9.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). If WooCommerce is enabled, attackers will need Contributor-level access and above.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [http://example.com/wp-content/plugins/jkdevkit/inc/modules/fonts_manager.php#L1710] [https://www.wordfence.com/threat-intel/vulnerabilities/id/68679ff9-48a8-4146-a37f-5f844dc86c92?source=cve]

📅 2025-07-02

🔧 Unknown

CVE-2025-49713 (score: 8.8, severity: HIGH)
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49713]

CVE-2025-45813 (score: 9.8, severity: CRITICAL)
ENENSYS IPGuard v2 2.10.0 was discovered to contain hardcoded credentials.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-45813] [https://www.enensys.com/]
CVE-2025-45814 (score: 9.8, severity: CRITICAL)
Missing authentication checks in the query.fcgi endpoint of NS3000 v8.1.1.125110 , v7.2.8.124852 , and v7.x and NS2000 v7.02.08 allows attackers to execute a session hijacking attack.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-45814] [https://novelsat.com/]
CVE-2025-27025 (score: 8.8, severity: HIGH)
The target device exposes a service on a specific TCP port with a configured endpoint. The access to that endpoint is granted using a Basic Authentication method. The endpoint accepts also the PUT method and it is possible to write files on the target device file system. Files are written as root. Using Postman it is possible to perform a Directory Traversal attack and write files into any location of the device file system. Similarly to the PUT method, it is possible to leverage the same mechanism to read any file from the file system by using the GET method.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://euvd.enisa.europa.eu/vulnerability/CVE-2025-27025] [https://www.cvcn.gov.it/cvcn/cve/CVE-2025-27025]

CVE-2024-13786 (score: 9.8, severity: CRITICAL)
The education theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.6.10 via deserialization of untrusted input in the 'themerex_callback_view_more_posts' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://themeforest.net/item/education-center-training-courses-wordpress-theme/10652918#item-description__change-log] [https://www.wordfence.com/threat-intel/vulnerabilities/id/d0b27bc8-617a-4f98-954f-e49f87dca311?source=cve]
CVE-2025-6463 (score: 8.8, severity: HIGH)
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'entry_delete_upload_files' function in all versions up to, and including, 1.44.2. This makes it possible for unauthenticated attackers to include arbitrary file paths in a form submission. The file will be deleted when the form submission is deleted, whether by an Administrator or via auto-deletion determined by plugin settings. This can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://plugins.trac.wordpress.org/browser/forminator/trunk/library/model/class-form-entry-model.php#L1249] [https://plugins.trac.wordpress.org/changeset/3319860/forminator#file3] [https://www.wordfence.com/threat-intel/vulnerabilities/id/6dc9b4cb-d36b-4693-a7b9-1dad123b6639?source=cve]
CVE-2025-6459 (score: 8.8, severity: HIGH)
The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.89. This is due to missing or incorrect nonce validation on the bsaCreateAdTemplate function. This makes it possible for unauthenticated attackers to inject and execute arbitrary PHP code via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://codecanyon.net/item/ads-pro-plugin-multipurpose-wordpress-advertising-manager/10275010] [https://www.wordfence.com/threat-intel/vulnerabilities/id/22fa8290-ebab-4fa4-bcba-0053c3b79f76?source=cve]

CVE-2025-5746 (score: 9.8, severity: CRITICAL)
The Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the dnd_upload_cf7_upload_chunks() function in version 5.0 - 5.0.5 (when bundled with the PrintSpace theme) and all versions up to, and including, 1.7.1 (in the standalone version). This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. The execution of PHP is disabled via a .htaccess file but is still possible in certain server configurations.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://www.codedropz.com/woocommerce-drag-drop-multiple-file-upload/] [https://www.wordfence.com/threat-intel/vulnerabilities/id/3c1f625e-4456-45e4-8a7f-809b22edb66b?source=cve]
CVE-2025-5014 (score: 8.8, severity: HIGH)
The Home Villas | Real Estate WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'wp_rem_cs_widget_file_delete' function in all versions up to, and including, 2.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [http://localhost:1337/wp-content/themes/homevillas-real-estate/include/backend/cs-widgets/import/cs-class-widget-data.php#L384] [https://www.wordfence.com/threat-intel/vulnerabilities/id/afd4f2ca-9c27-4de0-ac82-3cd107b6a092?source=cve]
CVE-2025-4689 (score: 9.8, severity: CRITICAL)
The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion which leads to Remote Code Execution in all versions up to, and including, 4.89. This is due to the presence of a SQL Injection vulnerability and Local File Inclusion vulnerability that can be chained with an image upload. This makes it possible for unauthenticated attackers to execute code on the server upload image files on the server than can be fetched via a SQL injection vulnerability, and ultimately executed as PHP code through the local file inclusion vulnerability.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://codecanyon.net/item/ads-pro-plugin-multipurpose-wordpress-advertising-manager/10275010] [https://www.wordfence.com/threat-intel/vulnerabilities/id/038ddfcd-093b-4234-a0b8-a3bf9a3d329f?source=cve]

CVE-2025-3848 (score: 8.8, severity: HIGH)
The Download Manager and Payment Form WordPress Plugin – WP SmartPay plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 1.1.0 to 2.7.13. This is due to the plugin not properly validating a user's identity prior to updating their email through the update() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://plugins.trac.wordpress.org/browser/smartpay/tags/2.7.13/app/Http/Controllers/Rest/CustomerController.php#L51] [https://www.wordfence.com/threat-intel/vulnerabilities/id/c197e26f-745b-481a-a7b5-79d1211c02ea?source=cve]
CVE-2025-5692 (score: 8.8, severity: HIGH)
The Lead Form Data Collection to CRM plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the doFieldAjaxAction() function in all versions up to, and including, 3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. Other AJAX actions handling plugin settings are also insufficiently protected and exploitable.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://plugins.trac.wordpress.org/browser/wp-leads-builder-any-crm/trunk/includes/Functions.php#L423] [https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3319750%40wp-leads-builder-any-crm&new=3319750%40wp-leads-builder-any-crm&sfp_email=&sfph_mail=] [https://wordpress.org/plugins/wp-leads-builder-any-crm/] [https://www.wordfence.com/threat-intel/vulnerabilities/id/26404b5c-a0f2-4223-be61-1f03873666fb?source=cve]

🔧 cisco

CVE-2025-20309 (score: 10, severity: CRITICAL)
A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that cannot be changed or deleted. This vulnerability is due to the presence of static user credentials for the root account that are reserved for use during development. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and execute arbitrary commands as the root user.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssh-m4UBdpE7]

📅 2025-07-01

🔧 Unknown

CVE-2025-52101 (score: 9.8, severity: CRITICAL)
linjiashop
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://gist.github.com/NSW111/33824ceb4d1b920671124f77abfe27e8] [https://gitee.com/microapp/linjiashop]
CVE-2025-45006 (score: 9.1, severity: CRITICAL)
Improper mstatus.SUM bit retention (non-zero) in Open-Source RISC-V Processor commit f517abb violates privileged spec constraints, enabling potential physical memory access attacks.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/chipsalliance/rocket-chip.git] [https://github.com/heyfenny/Vulnerability_disclosure/blob/main/RISCV/Rocket-chip/CVE-2025-45006/details.md] [https://lf-riscv.atlassian.net/wiki/spaces/HOME/pages/16154769/RISC-V+Technical+Specifications#ISA-Specifications]
CVE-2025-53104 (score: 9.1, severity: CRITICAL)
gluestack-ui is a library of copy-pasteable components & patterns crafted with Tailwind CSS (NativeWind). Prior to commit e6b4271, a command injection vulnerability was discovered in the discussion-to-slack.yml GitHub Actions workflow. Untrusted discussion fields (title, body, etc.) were directly interpolated into shell commands in a run: block. An attacker could craft a malicious GitHub Discussion title or body (e.g., $(curl ...)) to execute arbitrary shell commands on the Actions runner. This issue has been fixed in commit e6b4271 where the discussion-to-slack.yml workflow was removed. Users should remove the discussion-to-slack.yml workflow if using a fork or derivative of this repository.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/gluestack/gluestack-ui/commit/e6b427150b35e97a089ea10409de8c5c52f8a7b9] [https://github.com/gluestack/gluestack-ui/security/advisories/GHSA-432r-9455-7f9x]
CVE-2025-45081 (score: 8.8, severity: HIGH)
Misconfigured settings in IITB SSO v1.1.0 allow attackers to access sensitive application data.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://pastebin.com/WH9GiMCQ]
CVE-2025-45080 (score: 8.8, severity: HIGH)
YONO SBI: Banking & Lifestyle v1.23.36 was discovered to use unencrypted communicatons, possibly allowing attackers to execute a man-in-the-middle attack.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://pastebin.com/z2gmGWP9]
CVE-2025-37099 (score: 9.8, severity: CRITICAL)
A remote code execution vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04878en_us&docLocale=en_US]
CVE-2025-6953 (score: 8.8, severity: HIGH)
A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/d2pq/cve/blob/main/616/26.md] [https://github.com/d2pq/cve/blob/main/616/26.md#poc] [https://vuldb.com/?ctiid.314490] [https://vuldb.com/?id.314490] [https://vuldb.com/?submit.605874] [https://www.totolink.net/]
CVE-2025-49029 (score: 9.1, severity: CRITICAL)
Improper Control of Generation of Code ('Code Injection') vulnerability in bitto.Kazi Custom Login And Signup Widget allows Code Injection.This issue affects Custom Login And Signup Widget: from n/a through 1.0.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://patchstack.com/database/wordpress/plugin/custom-login-and-signup-widget/vulnerability/wordpress-custom-login-and-signup-widget-plugin-1-0-arbitrary-code-execution-vulnerability?_s_id=cve]
CVE-2025-41656 (score: 10, severity: CRITICAL)
An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the Node_RED server is not configured by default.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://certvde.com/en/advisories/VDE-2025-045]
CVE-2025-41648 (score: 9.8, severity: CRITICAL)
An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available settings of the IndustrialPI.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://certvde.com/en/advisories/VDE-2025-039]
CVE-2025-6934 (score: 9.8, severity: CRITICAL)
The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Responsive WordPress Theme, is vulnerable to privilege escalation via in all versions up to, and including, 1.7.5. This is due to a lack of role restriction during registration in the 'on_regiser_user' function. This makes it possible for unauthenticated attackers to arbitrarily choose the role, including the Administrator role, assigned when registering.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://plugins.trac.wordpress.org/browser/opal-estate-pro/trunk/inc/user/class-opalestate-user.php#L228] [https://plugins.trac.wordpress.org/browser/opal-estate-pro/trunk/inc/user/class-opalestate-user.php#L235] [https://themeforest.net/item/fullhouse-real-estate-responsive-wordpress-theme/16179481] [https://www.wordfence.com/threat-intel/vulnerabilities/id/5d7b75a4-67b4-4347-91a6-dbf98da5ceaf?source=cve]
CVE-2025-6940 (score: 8.8, severity: HIGH)
A vulnerability classified as critical was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/awindog/cve/blob/main/688/27.md] [https://github.com/awindog/cve/blob/main/688/27.md#poc] [https://vuldb.com/?ctiid.314461] [https://vuldb.com/?id.314461] [https://vuldb.com/?submit.605861] [https://www.totolink.net/] [https://github.com/awindog/cve/blob/main/688/27.md] [https://github.com/awindog/cve/blob/main/688/27.md#poc]
CVE-2025-6939 (score: 8.8, severity: HIGH)
A vulnerability classified as critical has been found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formWlSiteSurvey of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/awindog/cve/blob/main/688/30.md] [https://vuldb.com/?ctiid.314460] [https://vuldb.com/?id.314460] [https://vuldb.com/?submit.605860] [https://www.totolink.net/] [https://github.com/awindog/cve/blob/main/688/30.md]
CVE-2025-53095 (score: 9.6, severity: CRITICAL)
Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.628.4510, the web UI of Sunshine lacks protection against Cross-Site Request Forgery (CSRF) attacks. This vulnerability allows an attacker to craft a malicious web page that, when visited by an authenticated user, can trigger unintended actions within the Sunshine application on behalf of that user. Specifically, since the application does OS command execution by design, this issue can be exploited to abuse the "Command Preparations" feature, enabling an attacker to inject arbitrary commands that will be executed with Administrator privileges when an application is launched. This issue has been patched in version 2025.628.4510.
- Ultimo aggiornamento: 2025-07-03
- Complessità di attacco: LOW
- Vettore di attacco: NETWORK
- Fonti: [https://github.com/LizardByte/Sunshine/commit/738ac93a0ec1cd10412d1f339968775f53bfefe0] [https://github.com/LizardByte/Sunshine/security/advisories/GHSA-39hj-fxvw-758m]

CVE critiche emesse negli ultimi giorni

📅 2025-07-04

🔧 Unknown

📅 2025-07-03

🔧 Unknown

📅 2025-07-02

🔧 Unknown

🔧 cisco

📅 2025-07-01

🔧 Unknown