How CVE-2025-3452 Works The vulnerability exists in the `secupress_reinstall_plugins_admin_ajax_cb` function of the SecuPress Free WordPress security plugin (versions ≤ 2.3.9).
How CVE-2025-3874 Works The WordPress Simple Shopping Cart plugin (≤ v5.1.3) fails to randomize user-controlled cart session keys, enabling unauthenticated
How CVE-2025-1304 Works The NewsBlogger WordPress theme (≤v0.2.5.1) lacks a capability check in the `newsblogger_install_and_activate_plugin()` function, allowing authenticated attackers (even
The CVE-2025-3889 vulnerability in the WordPress Simple Shopping Cart plugin (up to v5.1.3) allows unauthenticated attackers to manipulate payment data
How CVE-2025-4179 Works The vulnerability exists in the `registerUser()` function of the Flynax Bridge plugin (≤ v2.2.0) for WordPress, which
How CVE-2025-3438 Works The MStore API plugin for WordPress (up to v4.17.4) fails to enforce role restrictions during user registration.
The NewsBlogger WordPress theme (≤v0.2.5.4) fails to implement nonce validation in its `newsblogger_install_and_activate_plugin()` function, enabling CSRF attacks. Attackers craft malicious
The WordPress Simple Shopping Cart plugin (up to v5.1.3) fails to sanitize user input in the `wp_cart_button` shortcode, allowing authenticated
The Formality plugin for WordPress (versions ≤1.5.8) fails to sanitize the `align` parameter, allowing authenticated attackers (Contributor+) to inject malicious
How the CVE Works CVE-2025-27091 is a heap overflow vulnerability in OpenH264, a widely used H.264 codec library. The flaw
The Taxonomy Chain Menu plugin (≤1.0.8) for WordPress fails to sanitize user-supplied attributes in the `pn_chain_menu` shortcode, enabling authenticated attackers
How CVE-2025-3510 Works The tagDiv Composer plugin (≤ v5.4) for WordPress fails to sanitize user-supplied attributes in multiple shortcodes. Authenticated
The Gutenverse plugin (up to v2.2.1) for WordPress fails to sanitize user-supplied input in its countdown block, enabling stored XSS.
How the CVE Works CVE-2025-1458 exploits insufficient input sanitization in Element Pack Addons for Elementor WordPress plugin (≤5.10.29). The vulnerability
The WP Project Manager plugin (≤ v2.6.22) fails to sanitize SVG file uploads, allowing authenticated attackers (Author+) to inject malicious
How CVE-2025-20670 Works CVE-2025-20670 is a critical vulnerability in MediaTek modems due to improper certificate validation during base station handshakes.
How CVE-2025-20668 Works The vulnerability in SCP (Secure Copy Protocol) arises due to a missing bounds check during memory operations,
CVE-2025-20667 is a critical vulnerability affecting certain modem chipsets, allowing remote attackers to exploit incorrect error handling in cellular baseband
How CVE-2025-20666 Works This vulnerability occurs in certain modem firmware when processing maliciously crafted signals from a rogue base station.
How CVE-2025-2575 Works The Z Companion plugin for WordPress fails to properly sanitize SVG file uploads, allowing authenticated attackers (Author
How CVE-2025-20665 Works CVE-2025-20665 is an information disclosure vulnerability in Android’s `devinfo` component caused by a missing SELinux policy. The
How the CVE Works CVE-2025-20671 is a race condition vulnerability in the thermal driver of MediaTek chipsets, leading to an
How the CVE Works: The vulnerability (CVE-2025-XXXX) in Linkerd affects versions before edge-25.2.1 and Enterprise releases 2.16. (before 2.16.5), 2.17.
Inspektor Gadget versions 0.31.0 to 0.40.0 contain a vulnerability where security policies (allowed-gadgets, disallow-pulling, verify-image) can be bypassed by a
Langroid’s `XMLToolMessage` class processes XML input without proper safeguards, enabling XML External Entity (XXE) injection. Attackers can submit malicious XML
The CVE-2023-XXXX vulnerability in the league/commonmark library’s Attributes extension allows attackers to bypass XSS protections by injecting malicious HTML attributes
How the CVE Works CVE-2025-30445 is a type confusion vulnerability affecting Apple’s macOS, iOS, tvOS, and visionOS. The flaw occurs
How the CVE Works: CVE-2025-31203 is an integer overflow vulnerability in Apple’s macOS, iOS, and related operating systems. The flaw
How CVE-2025-31650 Works Apache Tomcat fails to properly validate and clean up malformed HTTP/2 priority headers. When an attacker sends
How CVE-2025-31202 Works This vulnerability stems from improper input validation in Apple’s operating systems, leading to a null pointer dereference.
CVE-2025-31651 exploits improper neutralization of escape sequences in Apache Tomcat’s rewrite rules. When rewrite rules are misconfigured, an attacker can
How the CVE Works The vulnerability (CVE-2025-XXXX) in Grokability Snipe-IT before version 8.1.0 arises from improper authorization checks when accessing
How the CVE Works: The vulnerability occurs in OpenVM’s AUIPC chip due to incorrect byte decomposition of the program counter
How the CVE Works: The CVE-2025-XXXX vulnerability in WSO2 API Manager arises due to improper handling of XML input in
Craft CMS versions 4.0.0-RC1 to 4.14.12 and 5.0.0-RC1 to 5.6.14 are vulnerable to a critical Server-Side Template Injection (SSTI) attack
How the CVE Works: MobSF (Mobile Security Framework) versions <= v4.3.2 fail to validate the uncompressed size of uploaded ZIP
How the CVE Works: CVE-2025-27194 is an out-of-bounds write vulnerability in Adobe Media Encoder versions 25.1, 24.6.4, and earlier. The
CVE-2025-27193 is a critical heap-based buffer overflow vulnerability affecting Bridge versions 14.1.5, 15.0.2, and earlier. The flaw occurs when parsing
How CVE-2025-27198 Works CVE-2025-27198 is a heap-based buffer overflow vulnerability in Adobe Photoshop Desktop versions 25.12.1, 26.4.1, and earlier. When
How the CVE Works: CVE-2025-27196 is a heap-based buffer overflow vulnerability in Adobe Premiere Pro (versions 25.1, 24.6.4, and earlier).
How the CVE Works CVE-2025-27195 is a heap-based buffer overflow vulnerability in Adobe Media Encoder versions 25.1, 24.6.4, and earlier.
How the CVE Works The vulnerability arises when KeystoneJS processes `update` and `delete` mutations with multiple unique filters in the
How the CVE Works: The vulnerability exists in the `browser_use` module’s URL whitelist validation. The `_is_url_allowed()` method checks if a
The CVE-2025-1234 vulnerability in Browser Use (v0.1.45 and earlier) allows attackers to bypass `allowed_domains` restrictions by injecting a decoy domain
How the CVE Works The vulnerability in the `obfstr` crate (prior to v0.4.4) arises due to improper type validation in
How the CVE Works: CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Server 2.4.49. The flaw arises due to
How the CVE Works The vulnerability arises due to a logic error in the `summaly` function, where the `allowRedirects` option
How the CVE Works CVE-2025-30290 is a path traversal vulnerability in Adobe ColdFusion (versions 2023.12, 2021.18, 2025.0, and earlier). Attackers
The CVE-2025-0405 vulnerability in liujianview gymxmjpa 1.0 allows remote attackers to execute arbitrary SQL queries via the `goodsName` parameter in
The CVE-2025-0408 vulnerability in liujianview gymxmjpa 1.0 allows remote attackers to execute arbitrary SQL queries via the `loosName` parameter in
How CVE-2025-0407 Works The vulnerability exists in `EquipmentDaoImpl` within `EquipmentController.java` due to improper sanitization of the `hyname` parameter. Attackers inject
The CVE-2025-0410 vulnerability in liujianview gymxmjpa 1.0 allows remote attackers to execute arbitrary SQL queries via the `hyname` parameter in
The CVE-2025-0406 vulnerability in liujianview gymxmjpa 1.0 allows remote attackers to execute arbitrary SQL queries via the `subname` parameter in
The CVE-2025-0409 vulnerability in Liujianview Gymxmjpa 1.0 allows remote attackers to execute arbitrary SQL queries via the `typeName` parameter in
The CVE-2025-0488 vulnerability in Fanli2012 native-php-cms 1.0 allows remote attackers to execute arbitrary SQL queries via the `cat` parameter in
The CVE-2025-0489 vulnerability in Fanli2012 native-php-cms 1.0 allows remote attackers to execute arbitrary SQL queries via the `id` parameter in
How CVE-2025-0490 Works The vulnerability exists in `/fladmin/_dodel.php` due to improper sanitization of the `id` parameter. Attackers can inject malicious
The vulnerability in MobSF (<= v4.3.2) allows stored Cross-Site Scripting (XSS) via malicious SVG files during APK analysis. When an
How the CVE Works: CVE-2023-23752 is a security flaw in Joomla that allows authenticated administrators to bypass SVG file sanitization.
The vulnerability (CVE-2025-XXXX) in Keycloak’s authorization module (org.keycloak.authorization) allows attackers to bypass mandatory security measures like two-factor authentication (2FA). The
How the CVE Works CVE-2025-25992 exploits an SQL injection flaw in FeMiner wms 1.0 through the `inquire_inout_item.php` component. Attackers craft
This vulnerability allows unauthorized access to wiki-level attachments and metadata via XWiki’s REST API. The flaw occurs due to insufficient
How the CVE Works The vulnerability in @cloudflare/workers-oauth-provider allows an attacker to bypass Proof Key for Code Exchange (PKCE) protection
How the CVE Works The vulnerability (CVE-2025-XXXX) in Keycloak arises when the hostname verification policy is set to ‘ALL’, which
How the CVE Works The vulnerability (CVE-2023-3079) in Cloudflare’s `workers-oauth-provider` stems from improper validation of the `redirect_uri` parameter during OAuth
How the CVE Works: The vulnerability arises due to improper PKCE (Proof Key for Code Exchange) validation in Cloudflare’s workers-oauth-provider.
How the CVE Works The vulnerability (CVE-2024-0001) in Open Policy Agent (OPA) arises due to improper sanitization of HTTP request
How the CVE Works: CVE-2025-22928 exploits a SQL injection flaw in OS4ED openSIS versions 7.0 to 9.1. The vulnerability resides
How the CVE Works CVE-2025-XXXX exploits an authorization bypass flaw in OpenFGA versions 1.3.6 to 1.8.10. The vulnerability occurs due
This vulnerability affects the `org.xwiki.contrib.markdown:syntax-markdown-commonmark12` package, allowing attackers to inject malicious JavaScript via Markdown content. The issue arises due to
How the CVE Works: The vulnerability (CVE-2025-XXXX) in Cloudflare Workers OAuth Provider allows attackers to bypass Proof Key for Code
How the Vulnerability Works CVE-2025-4166 affects Hashicorp Vault Community and Enterprise KV (Key/Value) Version 2 plugin. When users submit malformed
How CVE-2021-41773 Works A flaw in Apache HTTP Server 2.4.49 allows attackers to exploit path traversal via URL-encoded directory traversal
How the CVE Works: The vulnerability occurs in ADOdb’s PostgreSQL drivers (postgres64, postgres7, postgres8, postgres9) due to improper escaping of
How CVE-2025-25994 Works This vulnerability in FeMiner WMS 1.0 arises due to improper input sanitization in the date1, date2, and
How the Vulnerability Works The CVE-2023-XXXX vulnerability in Vercel Flags SDK (versions ≤3.2.0 and @vercel/flags ≤3.1.1) allows unauthorized access to
How the CVE Works Vite’s `server.fs.deny` mechanism is designed to restrict access to sensitive files (e.g., .env, .git, certificates) in
How the CVE Works: CVE-2025-25993 is a critical SQL Injection flaw in FeMiner WMS 1.0. The vulnerability exists in the
How the CVE Works The vulnerability in Volcano Scheduler arises due to improper handling of responses from the Elastic service
The vulnerability in `mp3-metadata` arises due to insufficient bounds checking in the `get_id3()` method, which is utilized by mp3_metadata::read_from_slice(). When
How CVE-2025-32754 Works The vulnerability occurs in Jenkins/ssh-agent Docker images (v6.11.1 and earlier) where SSH host keys are generated during
How the CVE Works The vulnerability in ShowDoc before version 2.8.7 arises from insufficient validation of file extensions during uploads.
How the CVE Works: The vulnerability exists in XWiki’s authentication management, where unauthorized users can access `XWiki.Authentication.Administration` page due to
The vulnerability (CVE-2025-XXXX) in Hashicorp Vault Community and Enterprise arises due to improper validation of Azure-issued JWT tokens in the
How the CVE Works: This vulnerability exploits Unicode homograph characters in CryptoCoinJS base-x, a library for base encoding/decoding used in
How the CVE Works The vulnerability in XWiki Platform (CVE-2024-XXXX) allows unauthorized users to list protected pages via the REST
How CVE-2025-29909 Works The vulnerability occurs in CryptoLib’s `Crypto_TC_ApplySecurity()` function when processing Telecommand (TC) frames. The function fails to properly
How CVE-2025-29910 Works The vulnerability resides in the `crypto_handle_incrementing_nontransmitted_counter` function within `crypto_tc.c` of CryptoLib (v1.3.3 and prior). This function dynamically
How CVE-2025-31117 Works The CVE-2025-31117 vulnerability in OpenEMR (version <7.0.3.1) allows an attacker to perform Out-of-Band Server-Side Request Forgery (OOB
How CVE-2025-29924 Works This vulnerability exploits improper access control in XWiki’s REST API when subwikis enforce “Prevent unregistered users to
How CVE-2025-32783 Works This vulnerability affects XWiki Platform versions 5.0 to 16.7.1 when Message Stream is enabled and a wiki
How CVE-2025-29911 Works The vulnerability occurs in CryptoLib’s `Crypto_AOS_ProcessSecurity` function when processing AOS frames under SDLS-EP protocol. The function fails
How the CVE Works: CVE-2025-46237 is a stored XSS vulnerability in Yannick Lefebvre’s Link Library plugin (versions up to 7.8).
How the CVE Works CVE-2025-32969 is a critical blind SQL injection vulnerability in XWiki versions 1.8 through 15.10.15, 16.4.5, and
How the CVE Works: CVE-2025-32021 exposes sensitive credentials (e.g., GitHub PATs and usernames) in plaintext during the creation of a
How the CVE-2025-45428 Works The vulnerability exists in the `rebootTime` parameter of the `/goform/SetSysAutoRebbotCfg` endpoint in Tenda AC9 firmware v1.0
How the CVE Works: CVE-2025-30149 is a reflected Cross-Site Scripting (XSS) vulnerability in OpenEMR’s AJAX script interface (super/layout_listitems_ajax.php). The flaw
How the CVE Works: The CVE-2025-45429 vulnerability exists in Tenda AC9 routers (v1.0) running firmware V15.03.05.14_multi. The stack overflow occurs
How the CVE Works CVE-2025-32796 is an access control flaw in Dify (versions before 0.6.12) where normal users can bypass
How CVE-2025-32968 Works This vulnerability affects XWiki versions 1.6-milestone-1 through 15.10.15, 16.4.5, and 16.10.0. Attackers with SCRIPT rights can bypass
