cisa.gov | Bulletins - TheNote.app

cisa.gov | Bulletins
Follow

The Cybersecurity and Infrastructure Security Agency (CISA) website provides a wealth of information on protecting critical infrastructure and enhancing cybersecurity. It offers resources for businesses, government agencies, and individuals to understand and address cybersecurity risks. Key features include threat alerts, security best practices, and guidance on how to respond to incidents. The site also provides updates on emerging threats and vulnerabilities, as well as tools and services to help improve your organization’s security posture.

Bulletins cisa.gov

RSS feeds.feedburner.com

RSS Hunter • Aug 19, 2024

Thread Of Notes

Vulnerability Summary for the Week of May 25, 2026

Several high vulnerabilities have been reported in various products, including MaxKB, Woocommerce Envato Affiliates, and Acrel Electrical's EEMS Enterprise Power Operation and Maintenance Cloud Platform. The MaxKB vulnerability allows unauthenticated attackers to invoke webhook triggers and execute bound tasks, while the Woocommerce Envato Affiliates vulnerability allows access to functionality not properly constrained by ACLs. Acrel Electrical's EEMS Enterprise Power Operation and Maintenance Cloud Platform has multiple vulnerabilities, including SQL injection and path traversal vulnerabilities. Other products with reported vulnerabilities include AgataSoft Auto PingMaster, which contains a stack-based buffer overflow vulnerability, and agno, which contains a SQL injection vulnerability in the ClickHouse vector database backend. AiOPMSD Final has multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries. The airjp73 rvf library has a prototype pollution vulnerability that allows attackers to set arbitrary properties on Object.prototype of the running server process. The amir20 dozzle library has a vulnerability that allows attackers to send an HTTP POST to a supplied URL with attacker-controlled request headers. Arjun Thakur's Duplicate Page and Post has an improper neutralization of special elements used in an SQL command vulnerability, while auth0's auth0.js has a vulnerability that may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. Autodesk's 3ds Max has multiple vulnerabilities, including out-of-bounds write and memory corruption vulnerabilities. Avaiga's taipy has a path traversal vulnerability that allows unauthenticated attackers to escape the intended module directory, while B&R Industrial Automation GmbH's PPT30 Operating System has an allocation of resources without limits or throttling vulnerability. Babel has a vulnerability that can cause it to generate output code that executes arbitrary code, and bentoml's BentoML has multiple vulnerabilities, including a vulnerability that allows malicious bento.yaml files to smuggle arbitrary Dockerfile directives into the generated Dockerfile. These vulnerabilities can be exploited by attackers to gain unauthorized access, execute arbitrary code, or cause other malicious effects, and users are advised to update to the latest versions of the affected products to mitigate these risks. The CVSS scores for these vulnerabilities range from 7.1 to 8.8, indicating a high level of severity.

https://www.cisa.gov/news-events/bulletins/sb26-152 cisa.gov

RSS Hunter • Jun 1

Vulnerability Summary for the Week of May 18, 2026

Multiple software products exhibit critical vulnerabilities, exposing systems to various security risks. Stack-based buffer overflows exist in 10-Strike Network Inventory Explorer and Audiograbber, allowing for arbitrary code execution. 10-Strike Network Scanner also has a buffer overflow, enabling code execution. Several products like 10Web Form Maker, SOGo Webmail, and Smartshop are vulnerable to SQL injection, enabling unauthorized data access and manipulation. AWS products, including Amazon Braket SDK and Amazon Redshift connector for Python, have vulnerabilities allowing code execution or data exfiltration. Kiro CLI and RabbitMQ AWS present risks of arbitrary tool execution and file reads, respectively. Typebot.io, a chatbot builder, suffers from multiple vulnerabilities like SSRF and XSS, leading to credential theft and privilege escalation. LiteLLM has privilege escalation vulnerabilities through API key generation and user role modification. A cross-site scripting flaw exists in Basamak DernekWeb, enabling stored XSS attacks. Finally, a vulnerability was found within Besen BS20 EV Charging Station.

https://www.cisa.gov/news-events/bulletins/sb26-145 cisa.gov

RSS Hunter • May 26

Vulnerability Summary for the Week of May 11, 2026

The provided text details multiple high-severity vulnerabilities across various software products. ACL Analytics has an arbitrary code execution flaw allowing attackers to use the EXECUTE function. GitBucket suffers from an unauthenticated remote code execution vulnerability related to secret token generation. WordPress plugins, including Peugeot Music and WP Super Edit, have file upload vulnerabilities. Ecommerce Systempay has a weak cryptography issue susceptible to key brute-forcing. iDS6 DSSPro bypasses CAPTCHA security, and libbabl has a double-free detection issue. Python jsonpickle allows remote code execution through deserialization. Several products, including Zechat, Joomla! extensions, and Nordex Wind Turbine Web Server, are vulnerable to SQL injection. Atomic Alarm Clock has a stack overflow, while HS Brand Logo Slider enables unrestricted file uploads. Additionally, VX Search and Allok splitters also have buffer overflow vulnerabilities.

https://www.cisa.gov/news-events/bulletins/sb26-138 cisa.gov

RSS Hunter • May 18

Vulnerability Summary for the Week of May 4, 2026

Several software products have high-severity vulnerabilities, exposing systems to significant risks. Gotenberg's Docker API allows attackers with control of metadata values to inject commands, leading to file manipulation and potential system compromise. OpenVPN's oauth2 plugin incorrectly admits unauthorized clients in experimental plugin mode before version 1.27.3. Postiz-app's Docker build workflow enables unauthenticated code execution and GITHUB_TOKEN exfiltration. GeoVision's GV-VMS V20 has a stack overflow vulnerability that enables full code execution due to a lack of ASLR. Microsoft Azure DevOps allows information disclosure, potentially exposing sensitive data. Eclipse BaSyx has a path traversal vulnerability that could lead to RCE. OpenCart, WordPress plugins (MStore API, Download From Files, TheCartPress, and OpenCATS) have vulnerabilities for session fixation, privilege escalation, and file upload, enabling unauthorized access or code execution. Eclipse Equinox OSGi has remote code execution via its console interface. The Mentoring WordPress plugin has a privilege escalation vulnerability allowing attackers to create administrator accounts. Tegsoft's Online Support Application is vulnerable to cross-site scripting (XSS). VM2, a Node.js sandbox, has multiple sandbox breakout vulnerabilities, resulting in potential host system command execution.

https://www.cisa.gov/news-events/bulletins/sb26-131 cisa.gov

RSS Hunter • May 11

Vulnerability Summary for the Week of April 27, 2026

Several vulnerabilities have been identified across various software and hardware products. OVMS3 3.3.005 exhibits a buffer overflow in canformat_gvret.cpp, potentially leading to denial of service or code execution. Tenda routers, including W308R, W3002R, and FH303/A300, suffer cookie session weaknesses, allowing DNS manipulation. Weaver E-office versions before 10.0_20221201 are vulnerable to unauthenticated arbitrary file upload. Synway SMG Gateway Management has an OS command injection flaw in its RADIUS configuration. Directorist Booking and Directorist Social Login plugins are susceptible to SQL injection and privilege escalation respectively. Milesight AIOT cameras use default SSL certificates with weak keys. AGL app-framework-main is vulnerable to a Zip Slip path traversal. Cannelloni v2.0.0 also has a buffer overflow issue. Carlson VASCO-B GNSS Receiver lacks authentication, allowing unauthorized configuration changes. Finally, several applications, including Prime95, XATABoost CMS, and others present various buffer overflows and code execution vulnerabilities.

https://www.cisa.gov/news-events/bulletins/sb26-125 cisa.gov

RSS Hunter • May 5

Vulnerability Summary for the Week of April 20, 2026

The document details multiple vulnerabilities across various software products from different vendors. Several vulnerabilities allow remote code execution, granting attackers the ability to execute arbitrary code. Other vulnerabilities lead to buffer overflows, potentially enabling code execution or denial-of-service attacks. Many of the vulnerabilities are related to structured exception handling (SEH) exploitation, involving crafted payloads. A few vulnerabilities result in denial-of-service conditions, causing applications to crash when specific inputs are provided. Some vulnerabilities allow attackers to bypass login limits using the SFTP service. The discovered vulnerabilities range from high to medium severity. Attackers can exploit these flaws through different input fields and mechanisms. The document provides details on specific CVEs, CVSS scores, and related advisory information.

https://www.cisa.gov/news-events/bulletins/sb26-117 cisa.gov

RSS Hunter • Apr 27

Vulnerability Summary for the Week of April 13, 2026

This document details several high-severity vulnerabilities across various software and systems. Grafana Pyroscope exposes a secret key if accessed directly, exploitable when using Tencent COS. Multiple SQL injection vulnerabilities exist in a Grocery Store Management System and a School Management System. WordPress themes, specifically WebStack and Career Section, allow arbitrary file uploads and deletions, respectively. Cisco ISE software has multiple vulnerabilities allowing remote code execution with varying levels of access. Cisco Webex Meetings is vulnerable to impersonation through improper certificate validation in SSO integration. Ubiquiti UniFi Play products are affected by path traversal, command injection, and improper access control. A remote, low-privileged attacker can exploit functions in Festo MSE6 products. Nozomi Networks Guardian has access control and XSS vulnerabilities in threat intelligence and assets/nodes. Finally, the Livemesh Addons for Elementor plugin and Cloud Foundry UUA are also vulnerable to local file inclusion and SAML 2.0 bypass, respectively.

https://www.cisa.gov/news-events/bulletins/sb26-110 cisa.gov

RSS Hunter • Apr 20

Vulnerability Summary for the Week of April 6, 2026

Several vulnerabilities are detailed across various software and plugins, with severe consequences ranging from arbitrary file uploads to remote code execution. SandboxJS library versions prior to 0.8.36 allowed bypassing global object protection. CF Image Hosting Script 1.6.5 permits unauthorized database access, leading to picture deletion. The Tianxin Internet Behavior Management System has a command injection flaw allowing command execution. Contemporary Controls BASControl20 is vulnerable to packet forgery, leading to arbitrary requests. Ninja Forms and ProSolution WP Client WordPress plugins suffer from arbitrary file upload vulnerabilities. IBM Verify Identity Access Container versions have a privilege escalation vulnerability. Quick Playground WordPress plugin allows remote code execution via API endpoints. LibRaw has multiple heap-based buffer overflow vulnerabilities exploitable through crafted files. Weaver E-cology has a remote code execution vulnerability via a debug endpoint. Rukovoditel CRM is susceptible to reflected cross-site scripting (XSS). Chamilo LMS faces an OS command injection flaw during file movement. Lastly, Everest Forms plugin has a PHP object injection vulnerability.

https://www.cisa.gov/news-events/bulletins/sb26-103 cisa.gov

RSS Hunter • Apr 13

Vulnerability Summary for the Week of February 2, 2026

The text details multiple high-severity vulnerabilities across various software products. These vulnerabilities include SQL injection, command execution, and remote code execution bugs. Several products like AdminPando, TCIS-3+, and Docan[.]co are affected, enabling complete system compromise. Others, such as Synectix and SignalK, allow unauthenticated modification or command injection respectively. Several SandboxJS vulnerabilities lead to sandbox escapes and arbitrary code execution. Additional vulnerabilities exist in CI4MS leading to RCE and Microsoft’s Semantic Kernel introducing an arbitrary file write. EPyT-Flow has an issue related to JSON deserialization leading to command execution. Other vulnerabilities include buffer overflows that allow for arbitrary code execution or denial of service in StreamRipper32, GoldWave, Filetto, Konica Minolta FTP Utility and CloudMe. CraftCMS suffered from a deserialization issue within its vCard plugin. Each vulnerability lists a CVSS score of 9.8 or 10, indicating critical severity, along with a CVE identifier, and links for further information.

https://www.cisa.gov/news-events/bulletins/sb26-040 cisa.gov

RSS Hunter • Feb 9

Vulnerability Summary for the Week of January 26, 2026

Multiple software products across various vendors are vulnerable to high-severity vulnerabilities. These vulnerabilities include buffer overflows, which can lead to remote code execution and bypass security protections. Several applications are susceptible to unquoted service path vulnerabilities, enabling privilege escalation to the SYSTEM level. Authentication bypass flaws are present in some applications allowing remote command execution. SQL injection vulnerabilities are found in certain applications, potentially leading to database manipulation. Directory traversal vulnerabilities allow attackers to read arbitrary files and access sensitive data. Additionally, some products suffer from denial-of-service, due to issues like oversized subject titles triggering crashes. Input neutralization issues allow for file tampering and remote code execution through path traversal. Finally, argument injection vulnerabilities in a cybersecurity framework permit arbitrary command execution.

https://www.cisa.gov/news-events/bulletins/sb26-033 cisa.gov

RSS Hunter • Feb 2

Vulnerability Summary for the Week of January 19, 2026

Several software products are affected by high severity vulnerabilities. AgataSoft PingMaster Pro 2.1 has a denial-of-service flaw due to a buffer overflow in its trace route feature. Multiple SQL injection vulnerabilities impact Hotel Guest Hotspot and Altium AES. Altium AES also suffers from HTML injection vulnerabilities. Altium 365 has a permissive CORS policy allowing unauthorized data access. MeetingHub and PrismX MX100 AP controller have arbitrary file upload vulnerabilities. Appsmith versions below 1.94 allow unauthenticated execution of edit-mode actions. Autodesk Fusion has multiple stored XSS vulnerabilities. OpenPLC v3 allows authenticated remote code execution. B&R Automation Studio has an improper certificate validation issue. Backstage is vulnerable to symlink-based path traversal attacks. Typebot.io versions before 3.13.2 expose user credentials. Sufirmam has authentication bypass and brute-force vulnerabilities. Brother BRAdmin Professional has an unquoted service path vulnerability. BuddyPress plugin for WordPress is vulnerable to arbitrary shortcode execution.

https://www.cisa.gov/news-events/bulletins/sb26-026 cisa.gov

RSS Hunter • Jan 26

Vulnerability Summary for the Week of January 12, 2026

The document details several high-severity vulnerabilities across various software products from different vendors. These vulnerabilities include buffer overflows, unquoted service path issues, and remote command execution flaws. Some vulnerabilities allow for remote code execution, while others enable privilege escalation to the system level. Several Adobe products, such as Dreamweaver and Illustrator, are affected by vulnerabilities, including heap-based buffer overflows and improper input validation. These issues often require user interaction, such as opening a malicious file, to be exploited. Advantech's IoTSuite and IoT Edge Products have a critical SQL injection vulnerability. Acer products like Acer Backup Manager and Updater Service also present unquoted service path vulnerabilities. The CVSS scores range from 7.8 to 10, indicating significant risk. The published dates for these vulnerabilities are primarily in January 2026. Exploitation details, including CVE identifiers and links to vendor advisories or exploit databases, are provided. These vulnerabilities often allow attackers to execute arbitrary code or gain unauthorized access.

https://www.cisa.gov/news-events/bulletins/sb26-020 cisa.gov

RSS Hunter • Jan 20

Vulnerability Summary for the Week of January 5, 2026

The provided text details multiple high-severity vulnerabilities across various software and hardware products. These vulnerabilities include SQL injection, privilege escalation, cross-site scripting (XSS), and authentication bypass. Affected products include WordPress plugins, networking devices, and software frameworks. The vulnerabilities often allow attackers to gain unauthorized access, modify data, or execute arbitrary code. Many of these issues involve improper input handling, lack of authentication, or use of default credentials. Several exploits are publicly available, increasing the risk of exploitation. Specific examples include vulnerabilities in AA-Team, ABB, Adtec Digital, aiohttp, and others. CVSS scores range from moderate to critical, indicating significant risk. The provided information includes CVE identifiers, published dates, and links to source and patch information. Several vendors have yet to respond to the disclosed vulnerabilities. Users are advised to promptly update their software or hardware to mitigate these risks.

https://www.cisa.gov/news-events/bulletins/sb26-012 cisa.gov

RSS Hunter • Jan 12

Vulnerability Summary for the Week of December 29, 2025

Multiple vulnerabilities across various vendors are detailed, each with a high CVSS score, indicating significant risk. SmarterMail allows arbitrary file uploads, potentially enabling remote code execution. MiniDVBLinux contains a remote command execution vulnerability, allowing unauthenticated root access. SOUND4 products have multiple flaws, including ICMP flooding, radio stream disclosure, file disclosure, and command injection. JM-DATA ONU JF511-TV uses default credentials, enabling unauthorized access. Akuvox Smart Doorphone exposes live video streams without authentication. Flamingo XL has a restricted shell vulnerability allowing attackers to break from the sandbox. The Branda WordPress plugin has a privilege escalation vulnerability through password changes. Delta Electronics' DVP-12SE11T has password bypass and out-of-bounds write vulnerabilities. Ksenia Security Lares 4.0 exposes the alarm system PIN. D-Link DIR-600 has a stack-based buffer overflow. Both Sunnet and WELLTEND TECHNOLOGY products have arbitrary file upload vulnerabilities. Tenda W6-S has a stack-based buffer overflow. ConoHa by GMO WING WordPress Migrator is susceptible to CSRF leading to web shell uploads. Signal K Server versions before 2.19.0 allowed for account takeover. RomanCode MapSVG suffers from unrestricted file uploads, which can be exploited to upload a web shell.

https://www.cisa.gov/news-events/bulletins/sb26-005 cisa.gov

RSS Hunter • Jan 5

Vulnerability Summary for the Week of December 1, 2025

The 10Web Booster WordPress plugin has a critical vulnerability allowing authenticated subscribers to delete arbitrary folders due to insufficient file path validation. Advantech iView versions prior to 5.7.05.7057 are susceptible to SQL injection via unsanitized SNMP v1 trap requests. The Aimeos GrapesJS CMS extension is vulnerable to stored XSS if Content Security Policy is disabled, with patches available in specific versions. Ajitdas Flex QR Code Generator plugin allows arbitrary file uploads by unauthenticated attackers due to missing file type validation. Akamai Guardicore Platform Agent for Windows has a local privilege escalation vulnerability; unprivileged users can gain SYSTEM privileges by creating a crafted configuration file. Argus Technology Inc. BILGER versions before 2.4.9 have an information insertion vulnerability related to message identifiers. Array Networks ArrayOS AG versions before 9.4.5.9 are vulnerable to command injection, with active exploitation reported. Auth0 node-jws versions up to 3.2.2 and 4.0.0 have an improper signature verification vulnerability when using the HS256 algorithm. Avast Antivirus is affected by multiple vulnerabilities on Windows and macOS, including privilege escalation, code execution, and denial of service, with various affected versions. The BACnet Protocol Stack library has a denial-of-service vulnerability due to out-of-bounds reads in the npdu_is_expected_reply function.

https://www.cisa.gov/news-events/bulletins/sb25-342 cisa.gov

RSS Hunter • Dec 8, 2025

Vulnerability Summary for the Week of November 24, 2025

Several high and critical vulnerabilities were discovered in various software products in late November 2025. HexStrike AI's MCP server is susceptible to command injection, potentially allowing root privilege escalation. AMD products including AMD uProf and Xilinx Run Time (XRT) have issues ranging from KSLR bypass to integer overflows and use-after-free conditions. ASR Lapwing_Linux contains an out-of-bounds read vulnerability, while the Blubrry PowerPress plugin for WordPress allows arbitrary file uploads. Chanjet CRM and several code-projects applications including COVID Tracking System, Jonnys Liquor, Library System, and Question Paper Generator are vulnerable to SQL injection attacks. Cursor software has a command injection vulnerability, enabling arbitrary code execution. Dassault Systmes' DELMIA Service Process Engineer and ENOVIA Product Manager are affected by stored cross-site scripting vulnerabilities. The Tiger theme for WordPress and FindAll Listing plugin suffer from privilege escalation, and the FindAll Membership plugin has an authentication bypass flaw. Eaton Galileo Software is vulnerable to path traversal allowing unauthorized code execution, and FACTION framework allows remote code execution via untrusted extensions.

https://www.cisa.gov/news-events/bulletins/sb25-335 cisa.gov

RSS Hunter • Dec 1, 2025

Vulnerability Summary for the Week of November 17, 2025

This document details multiple high-severity vulnerabilities across various software products from different vendors. ABB Ability Edgenius has an authentication bypass vulnerability, while AMD StoreMI contains DLL hijacking and incorrect permissions flaws. The Vitepos Point of Sale (POS) for WooCommerce plugin suffers from an arbitrary file upload issue. Several vulnerabilities affect Broadcom's BCM5820X chip within Dell ControlVault, including privilege escalation, hard-coded passwords, and buffer overflows. Multiple out-of-bounds read and write vulnerabilities also affect the same Broadcom chip. The URL Image Importer plugin for WordPress has an arbitrary file upload vulnerability. Finally, multiple Campcodes products, including Online Polling System and School Fees Payment Management System, are affected by SQL injection vulnerabilities. Each vulnerability is assigned a CVE, CVSS score, and includes links to relevant source information and patch details where applicable.

https://www.cisa.gov/news-events/bulletins/sb25-328 cisa.gov

RSS Hunter • Nov 24, 2025

Vulnerability Summary for the Week of November 10, 2025

The text details multiple high-severity vulnerabilities across various software and hardware products. These vulnerabilities range from sensitive information exposure to remote code execution and privilege escalation. Several WordPress plugins, including TNC Toolbox, WP for CPI, EasyCommerce, and Holiday class post calendar, are affected. IBM AIX and VIOS systems face multiple issues, including command execution and insecure key storage. SAP, D-Link, Dell, and Microsoft products also experience critical vulnerabilities. Other impacted products include General Industrial Controls Lynx+ Gateway, TrioFox, pgAdmin, and Zohocorp ManageEngine Analytics Plus. Some vulnerabilities allow for arbitrary file uploads, unauthorized access, and complete system compromise. Specific issues include a stack-based buffer overflow in D-Link DIR-816L and an SSRF vulnerability in charmbracelet soft-serve. The text provides CVE numbers, CVSS scores, and links to further information and patch details for each vulnerability. Several vendors, including Avast and Fortinet, are also listed with their vulnerability details.

https://www.cisa.gov/news-events/bulletins/sb25-321 cisa.gov

RSS Hunter • Nov 17, 2025

Vulnerability Summary for the Week of September 22, 2025

Flowise AI's Flowise version 3.0.5 has a critical remote code execution vulnerability where user input in the CustomMCP node is executed as JavaScript without validation. This allows access to sensitive Node.js modules, and has been fixed in version 3.0.6. HaruTheme's WooCommerce Designer Pro, up to version 1.9.24, suffers from an unrestricted file upload vulnerability. Iron Mountain's enVision software experiences command injection before version 250563. TalentSys Consulting's Inka.Net also has command injection issues before version 6.7.1. The Podlove Podcast Publisher WordPress plugin, up to version 4.2.6, allows arbitrary file uploads through its 'move_as_original_file' function. WooCommerce Uni CPO (Premium) plugin, up to version 4.9.54, has similar arbitrary file upload vulnerabilities. Red Hat's Nx build system package and its plugins were compromised via a supply-chain attack, stealing credentials. Cisco's Adaptive Security Appliance and Threat Defense software have vulnerabilities allowing arbitrary code execution via crafted HTTP requests. Cisco's IOS, IOS XE, and IOS XR software also have code execution flaws due to improper input validation in HTTP requests. Qualcomm Snapdragon processors have memory corruption vulnerabilities in handling RTP packets and during PLMN selection. SolarWinds Web Help Desk has an unauthenticated deserialization RCE vulnerability. Airship AI's Acropolis is vulnerable due to a default administrative account with static credentials. WAGO Device Sphere's web application database is exposed without authentication. Yonisink's Custom Post Type Images WordPress plugin has a CSRF vulnerability leading to code injection. Cloud-hosted Flowise experienced cross-tenant data exposure via the Custom JavaScript Function node. DNN Platform's Prompt module, prior to version 10.1.0, allows for script execution. Horilla HRMS has a stored XSS vulnerability in its ticket comment editor. ADB MCP Server is vulnerable to command injection in its tool definitions. Flag Forge CTF has session invalidation issues allowing authenticated users continued access after logout.

https://www.cisa.gov/news-events/bulletins/sb25-272 cisa.gov

RSS Hunter • Sep 29, 2025

Vulnerability Summary for the Week of September 15, 2025

Multiple software products have been identified with high-severity vulnerabilities, many of which are SQL injection flaws. These vulnerabilities allow attackers to potentially inject malicious code or bypass security measures. Fortra GoAnywhere MFT has a deserialization vulnerability enabling command injection. Spring Cloud Gateway is susceptible to Spring Environment property modification under specific conditions. Tenda AC1206 routers suffer from a stack-based buffer overflow. WordPress theme "Goza" allows for unauthorized file uploads, potentially leading to remote code execution. NVIDIA Triton Inference Server is vulnerable to remote code execution due to its Python backend. Several other products, including Dover Fueling Solutions devices and BGS Interactive's SINAV.LINK, also have SQL injection vulnerabilities. BMC Control-M/Agent has authentication bypass vulnerabilities, and Dyad is vulnerable to arbitrary code execution. Linkr lacks manifest verification, leading to potential file injection and remote code execution. Finally Jinjava, and Chaos Controller Manager have vulnerabilities allowing for remote code execution and complete cluster takeover.

https://www.cisa.gov/news-events/bulletins/sb25-265 cisa.gov

RSS Hunter • Sep 22, 2025

Vulnerability Summary for the Week of September 8, 2025

This report details numerous high-severity vulnerabilities affecting various software products. Adobe products are heavily impacted, with Acrobat Reader, Adobe Commerce, and ColdFusion all susceptible to vulnerabilities leading to code execution or session takeover. Adobe Experience Manager has a security feature bypass, while Dreamweaver and Premiere Pro also face code execution risks. Multiple vulnerabilities are identified in Adobe's Substance3D Modeler and Viewer applications, primarily related to memory corruption and leading to code execution. AMI's AptioV BIOS contains vulnerabilities allowing information disclosure and data writing. WordPress plugins like LWS Cleaner and Goza are vulnerable to arbitrary file deletion, potentially leading to remote code execution. The Axios JavaScript library has a denial-of-service vulnerability when handling data URIs. AxxonSoft's Axxon One VMS is affected by multiple issues, including exploitation of unmaintained third-party components and vulnerable PostgreSQL versions, posing risks of code execution and privilege escalation. Baicells network devices exhibit severe vulnerabilities like default credentials, hard-coded credentials, and undocumented features, with some rated at CVSS 10. Beckhoff's TwinCAT 3 Engineering has a vulnerability allowing command execution via manipulated project files. Bender CC612 devices expose credentials and transmit sensitive data insecurely. BeyondCart Connector for WordPress allows privilege escalation through JWT misconfigurations. Several Campcodes systems, including Grocery Sales and Inventory System and Online Loan Management System, are vulnerable to SQL injection in their AJAX endpoints.

https://www.cisa.gov/news-events/bulletins/sb25-258 cisa.gov

RSS Hunter • Sep 15, 2025

Vulnerability Summary for the Week of September 1, 2025

The provided text lists numerous high-severity vulnerabilities affecting various software products. SQL injection is a recurring vulnerability found in multiple systems, including 1000projects Beauty Parlour Management System and several Campcodes systems. Improper restriction of excessive authentication attempts allows for authentication bypass in many Akinsoft products like e-Mutabakat and LimonDesk. Cross-Site Request Forgery (CSRF) is present in aakash1911 WP likes and AkÄ±nsoft QR MenÃ¼. AMD processors and graphics products are affected by issues like improper cleanup, type confusion, and improper input validation leading to potential code execution or data loss. Argo CD faces a critical vulnerability allowing API tokens to retrieve sensitive repository credentials. Other vulnerabilities include Reflected XSS, PHP Local File Inclusion, and missing authentication. Many of these exploits are publicly available and could be exploited remotely. The listed vulnerabilities range in CVSS scores, with some reaching critical levels like 9.8 and 10.

https://www.cisa.gov/news-events/bulletins/sb25-251 cisa.gov

RSS Hunter • Sep 8, 2025

Vulnerability Summary for the Week of August 25, 2025

A SQL injection vulnerability exists in 1000projects Online Project Report Submission and Evaluation System 1.0, allowing remote attackers to manipulate the batch_id argument. Yahoo! WebPlayer versions up to 2.0.6 are affected by Reflected Cross-site Scripting (XSS). WPMU Ldap Authentication versions up to 5.0.1 suffer from Cross-Site Request Forgery (CSRF) leading to Stored XSS. Drag and Drop File Upload for Elementor Forms versions up to 1.5.3 has an Unrestricted File Upload vulnerability allowing web shell uploads. Agiloft Release 28 has critical system packages downloaded over insecure HTTP and contains default credentials for privilege escalation. QbiCRMGateway by Ai3 has an Arbitrary File Reading vulnerability via Relative Path Traversal. Arista EOS platforms may accept maliciously formed UDP packets on port 3503. Poll, Survey & Quiz Maker Plugin by Opinion Stage versions up to 19.11.0 allows PHP Local File Inclusion. Asterisk versions prior to 20.15.2, 21.10.2, and 22.5.2 have a crash vulnerability in res_pjsip_authenticator_digest due to improper handling of SIP authorization headers. Tiktok Feed by bPlugins versions up to 1.0.21 have a Missing Authorization vulnerability.

https://www.cisa.gov/news-events/bulletins/sb25-245 cisa.gov

RSS Hunter • Sep 2, 2025

Vulnerability Summary for the Week of August 18, 2025

Several software products have been identified with significant vulnerabilities. VaulTLS versions prior to 0.9.1 suffer from an authentication bypass, allowing logins with empty passwords. Elite Video Player up to version 10.0.5 has a cross-site scripting vulnerability. Ads.txt Guru Connect, up to version 1.1.1, is susceptible to Cross-Site Request Forgery. Audiobookshelf versions 2.6.0 through 2.26.3 have an OpenID Connect callback vulnerability leading to account takeover. Aiven-db-migrate versions prior to 1.0.7 contain privilege escalation flaws in PostgreSQL migrations. BuddyPress XProfile Custom Image Field up to version 3.0.1 allows path traversal. FunnelKit Automations and Funnel Builder plugins expose sensitive information via a shortcode. Pin WP versions prior to 7.2 allow unrestricted file uploads of dangerous types. Eventin AI Powered Event Manager, up to version 4.0.37, has a server-side request forgery vulnerability. Ashlar-Vellum Cobalt and related products, prior to 12.6.1204.204, have multiple vulnerabilities leading to arbitrary code execution due to improper file parsing. AVEVA PI Integrator allows authenticated users to persist executable files. NEX-Forms, up to version 9.1.3, is vulnerable to CSRF. ZoloBlocks, up to version 2.3.2, has a PHP remote file inclusion vulnerability. Belkin AX1800 version 1.1.00.016 has a firmware update handler vulnerability. Screenshot-desktop versions prior to 1.15.2 allow command injection. SEOPress for MainWP, up to version 1.4, has a PHP remote file inclusion vulnerability. Oik, up to version 4.15.2, has a cross-site scripting vulnerability. SureDash, up to version 1.0.3, has an incorrect privilege assignment vulnerability. Bravis User and Case Theme User plugins, up to versions 1.0.0 and 1.0.3 respectively, have authentication bypass vulnerabilities. Centreon web versions are affected by SQL injection vulnerabilities in event logs and meta service indicator pages. Caliris, up to version 1.5, and Paid Member Subscriptions, up to version 2.15.4, have PHP remote file inclusion vulnerabilities. WP Webhooks, up to version 3.3.5, allows arbitrary file copy. CM Map Locations, up to version 2.1.6, has a cross-site scripting vulnerability.

https://www.cisa.gov/news-events/bulletins/sb25-237 cisa.gov

RSS Hunter • Aug 25, 2025

Vulnerability Summary for the Week of August 11, 2025

Several critical vulnerabilities have been publicly disclosed and are potentially exploitable. The 1000 Projects Sales Management System, version 1.0, is affected by multiple SQL injection vulnerabilities in various PHP files, allowing remote attacks. 2100 Technology's Official Document Management System has a critical authentication bypass flaw, enabling unauthenticated users to obtain connection tokens and gain access. The Assistant for NextGEN Gallery WordPress plugin has a directory deletion vulnerability, potentially causing complete loss of availability. ABB products, including ASPECT and ABB AbilityTM zenon, exhibit various issues such as code injection, improperly protected credentials, authorization bypass, and missing authentication for critical functions. Acato's WP REST Cache has a PHP Remote File Inclusion vulnerability. Adobe Commerce versions prior to specific patches are susceptible to Cross-Site Request Forgery and stored Cross-Site Scripting, with potential for privilege escalation and data compromise. Adobe Commerce also faces improper input validation leading to denial-of-service and incorrect authorization allowing security bypass. Multiple Adobe products, including Framemaker, Animate, Illustrator, InCopy, and InDesign Desktop, have various memory corruption vulnerabilities like Use After Free, out-of-bounds writes, and buffer overflows. These Adobe vulnerabilities generally require user interaction, often through opening malicious files, to achieve arbitrary code execution. The overall severity of these disclosed vulnerabilities is high, with CVSS scores ranging significantly.

https://www.cisa.gov/news-events/bulletins/sb25-230 cisa.gov

RSS Hunter • Aug 18, 2025

Vulnerability Summary for the Week of August 4, 2025

Adobe Experience Manager versions 6.5.23 and earlier are vulnerable to misconfiguration allowing arbitrary code execution and XXE leading to file system reads. ADOdb versions 5.22.9 and below have an SQL injection vulnerability in specific methods when used with SQLite. The Eventin WordPress plugin, up to version 4.0.34, allows privilege escalation through account takeover. Autodesk 3ds Max is susceptible to arbitrary code execution from crafted RBG and TGA files due to out-of-bounds write and memory corruption. Belkin F9K1009 and F9K1010 versions 2.00.04/2.00.09 contain critical hard-coded credentials in their web interface. Burk Technology ARC Solo devices allow unauthenticated attackers to change the administrator password. The react-native-bottom-tabs library, up to version 0.9.2, has a workflow vulnerability enabling arbitrary code execution and secret exfiltration. GLPI-screenshot-plugin versions below 2.0.2 allow authenticated users to leak files or use PHP wrappers. CesiumLab Web up to version 4.0 has a critical SQL injection vulnerability affecting its lodmodels component. CleverReach WP plugin for WordPress, up to version 1.5.20, is vulnerable to time-based SQL injection via the 'title' parameter. Code-projects Online Medicine Guide 1.0 and Simple Art Gallery 1.0 both suffer from critical SQL injection vulnerabilities. CODESYS Control RTE (SL) allows low-privileged attackers to read and write certificates and keys, and also has a NULL pointer dereference vulnerability. Cursor code editor versions below 1.3.9 can allow attackers to write to workspace files without approval, potentially leading to RCE. The Assemblyline 4 Service Client, before version 4.6.1.dev138, is vulnerable to path traversal. LibreChat versions 0.0.6 through 0.7.7-rc1 expose a testing endpoint allowing arbitrary chat reading. DELMIA Apriso releases 2020 through 2025 have missing authorization and code injection vulnerabilities. Dell Avamar versions prior to 19.12 have a server-side trusting HTTP permission methods vulnerability. Dell Digital Delivery versions prior to 5.6.1.0 have insufficiently protected credentials. Dell ECS versions prior to 3.8.1.5 and ObjectScale 4.0.0.0 use hard-coded cryptographic keys. Dell Enterprise SONiC OS version 4.5.0 has a cryptographic key vulnerability in SSH. Dell PowerProtect Data Domain and DD OS versions have an authentication bypass by spoofing vulnerability.

https://www.cisa.gov/news-events/bulletins/sb25-223 cisa.gov

RSS Hunter • Aug 11, 2025

Vulnerability Summary for the Week of July 28, 2025

Several software products contain critical vulnerabilities, posing significant security risks. These vulnerabilities range from denial-of-service attacks to remote code execution and privilege escalation. Affected software includes vproxy, 1Panel, Copyparty, PowerCMS, and Pearcleaner, among others. The vulnerabilities stem from various causes, such as insecure handling of user input, incomplete certificate verification, and insufficient input validation. Many vulnerabilities allow attackers to execute arbitrary code, compromise system security, and potentially steal sensitive data. Patches are available for some of the identified vulnerabilities, but others remain unpatched. The Common Vulnerability Scoring System (CVSS) scores range from 7.2 to 9.9, indicating a high severity level. Exploits for some vulnerabilities are publicly available, increasing the urgency for updates and mitigations. Organizations using these products should prioritize applying security patches immediately.

https://www.cisa.gov/news-events/bulletins/sb25-216 cisa.gov

RSS Hunter • Aug 4, 2025

Vulnerability Summary for the Week of July 21, 2025

Multiple vulnerabilities have been discovered in various software systems, including 1000 Projects' ABC Courier Management System, alexacrm's Dataverse Integration, ASKEY's RTF8207w, Autodesk's RealDWG and Revit, AWS Client VPN, Bayraktar Solar Energies' ScadaWatt Otopilot, Bloomberg's Comdb2, bsecuretech's bSecure Your Universal Checkout, Campcodes' Sales and Inventory System, Canonical's MAAS, Chanjet's CRM, code-projects' Church Donation System, Exam Form Submission, and Online Ordering System.These vulnerabilities include SQL injection, privilege escalation, stack-based buffer overflow, out-of-bounds read, and denial of service attacks, among others. They can be exploited remotely and may allow attackers to execute arbitrary code, hijack accounts, or read sensitive data.The affected software versions range from 1.0 to 8.1, and the vulnerabilities have been assigned CVE IDs and CVSS scores ranging from 7.3 to 9.8. The exploits have been disclosed to the public and may be used by attackers.Users are advised to discontinue any new installations of affected software and to update to the latest versions to mitigate these vulnerabilities.

https://www.cisa.gov/news-events/bulletins/sb25-209 cisa.gov

RSS Hunter • Jul 28, 2025

Vulnerability Summary for the Week of July 14, 2025

The aapanel WP Toolkit plugin is vulnerable to privilege escalation, allowing subscribers to gain admin privileges. Attachment Manager plugin versions up to 2.1.2 are vulnerable to arbitrary file deletion, potentially leading to remote code execution. Adrian Tobey's Groundhogg plugin, up to version 4.2.1, allows unrestricted upload of dangerous file types, enabling web shell uploads. Alcatel-Lucent OmniAccess Stellar Products have multiple critical vulnerabilities, including command injection with root privileges and session ID spoofing, allowing attackers full control of access points. Arisoft's Contact Form 7 Editor Button suffers from Reflected XSS, and Atakan Au's Import CDN-Remote Images has Stored XSS via CSRF. August Infotech's Multi-language Responsive Contact Form has missing authorization, allowing unauthorized access to functionality. Awethemes' Hillter theme has a deserialization vulnerability enabling object injection. B1.lt plugin versions up to 2.2.56 allow SQL injection for authenticated users. Alone Charity Multipurpose Non-profit WordPress Theme by Bearsthemes has vulnerabilities for arbitrary file deletion and arbitrary file uploads, potentially leading to remote code execution. Bears Backup plugin versions up to 2.0.0 allow unauthenticated attackers to execute arbitrary code on the server. BossSoft CRM 6.0 and Campcodes Online Movie Theater Seat Reservation System 1.0 are vulnerable to SQL injection. Cisco Identity Services Engine Software has an API vulnerability allowing unauthenticated root privilege escalation. CMSJunkie's WP-BusinessDirectory plugin up to 3.1.3 is susceptible to Blind SQL Injection. cmsMinds' Pay with Contact Form 7 has Reflected XSS. Multiple code-projects systems, including AVL Rooms, Church Donation System, and Electricity Billing System, exhibit critical SQL injection vulnerabilities. Finally, chainguard-dev's apko, up to version 0.29.4, had critical file permission issues that could be abused for root escalation.

https://www.cisa.gov/news-events/bulletins/sb25-202 cisa.gov

RSS Hunter • Jul 21, 2025

Vulnerability Summary for the Week of July 7, 2025

Multiple high-vulnerability issues have been identified in various products, including Radiflow's iSAP Smart Collector, WAGO's Wago Device Sphere, and wftpserver's Wing FTP Server. These vulnerabilities allow for remote code execution, arbitrary file uploads, and OS command injection, among other issues. The CVSS scores for these vulnerabilities range from 9.1 to 10, indicating a high level of severity. Other affected products include webbertakken's docusaurus-plugin-content-gists, eemitch's Simple File List, and AIT Themes' AIT CSV import/export. Qualcomm's Snapdragon and Honeywell's C300 PCNT02 also have high-severity vulnerabilities, including cryptographic issues and integer underflow vulnerabilities. Phoenix Contact's CHARX SEC-3150 and Adobe's Adobe Connect have vulnerabilities that allow for remote code execution and deserialization of untrusted data. Other affected products include Axis Communications' AXIS Camera Station Pro, Frauscher's FDS102, and Hewlett Packard Enterprise's HPE Networking Instant On. SAP SE has multiple high-severity vulnerabilities in its products, including SAP NetWeaver Application Server for Java and SAP S/4HANA. Microsoft's Windows 10 Version 1809 and Schiocco's Support Board also have high-severity vulnerabilities, including heap-based buffer overflow and arbitrary file deletion issues.

https://www.cisa.gov/news-events/bulletins/sb25-195 cisa.gov

RSS Hunter • Jul 14, 2025

Vulnerability Summary for the Week of June 30, 2025

Multiple vulnerabilities have been discovered in various products, including ABB RMC-100, Alinto SOPE, aonetheme Service Finder Booking, ApusWP Kossy, and asaquzzaman WP Human Resource Management. These vulnerabilities include stack-based buffer overflow, privilege escalation, PHP remote file inclusion, and cross-site scripting. The affected products and versions are listed, along with their corresponding CVE numbers and CVSS scores. The vulnerabilities can be exploited remotely and may allow attackers to overflow buffers, escalate privileges, inject code, or perform other malicious actions. Some vendors were contacted about the disclosures but did not respond. The exploits have been disclosed to the public and may be used. The vulnerabilities affect various components, including REST interfaces, web pages, and PHP programs. Users are advised to update their products to the latest versions to mitigate these vulnerabilities. The CVSS scores range from 7.1 to 9.8, indicating high to critical severity.

https://www.cisa.gov/news-events/bulletins/sb25-188 cisa.gov

RSS Hunter • Jul 7, 2025

Vulnerability Summary for the Week of June 23, 2025

Multiple vulnerabilities have been discovered in various products, including 70mai M300, AcmeeDesign WPShapere Lite, and Adrian Tobey FormLift for Infusionsoft Web Forms, which are affected by critical issues such as use of default credentials, cross-site request forgery, and cross-site scripting. The vulnerabilities can be exploited by attackers to gain unauthorized access, execute arbitrary code, or steal sensitive information. The affected products and their respective vulnerabilities have been disclosed to the public, and users are advised to update their software to the latest versions to mitigate the risks. The Common Vulnerabilities and Exposures (CVE) system has assigned unique identifiers to each vulnerability, such as CVE-2025-6529 and CVE-2025-53317, to track and manage the issues. The CVSS scores, which range from 7.1 to 10, indicate the severity of the vulnerabilities, with higher scores representing more critical issues. The vendors of the affected products have been notified, and some have released patches or updates to address the vulnerabilities. Users are recommended to review the CVE listings and apply the necessary patches or updates to protect their systems from potential attacks. The vulnerabilities affect a wide range of products, including WordPress plugins, web applications, and network devices, highlighting the importance of regular security updates and patches. Overall, the discovered vulnerabilities pose significant risks to the security and integrity of the affected systems, and prompt action is necessary to mitigate the threats.

https://www.cisa.gov/news-events/bulletins/sb25-181 cisa.gov

RSS Hunter • Jun 30, 2025

Vulnerability Summary for the Week of June 16, 2025

Multiple vulnerabilities have been discovered in various software products, including Elite Video Player, Virtual Moderator, PostaPanduri, WP Front User Submit / Front Editor, and others. These vulnerabilities include Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), SQL Injection, and arbitrary file uploads. The affected products and versions are listed, along with the publication dates and CVSS scores. The vulnerabilities can be exploited by attackers to inject malicious scripts, steal sensitive data, or take control of affected systems. In some cases, the vulnerabilities can be exploited remotely, while in others, authentication is required. The exploits have been disclosed to the public and can be used by attackers. Patches and updates have been released to fix some of the vulnerabilities, while others remain unpatched. Users are advised to update their software and take necessary precautions to prevent exploitation. The vulnerabilities have been assigned CVE IDs and have been rated according to their severity. The affected products and vendors are listed, along with the details of the vulnerabilities and their potential impact.

https://www.cisa.gov/news-events/bulletins/sb25-174 cisa.gov

RSS Hunter • Jun 23, 2025

Vulnerability Summary for the Week of June 9, 2025

Acer ControlCenter has a remote code execution vulnerability due to a misconfigured Windows Named Pipe, allowing remote attackers to execute arbitrary code with elevated privileges. Adobe Acrobat Reader has multiple vulnerabilities, including use-after-free and out-of-bounds write vulnerabilities, that could result in arbitrary code execution in the context of the current user. Adobe Commerce has multiple vulnerabilities, including stored cross-site scripting and improper authorization vulnerabilities, that could lead to security feature bypass and privilege escalation. Adobe Experience Manager has reflected cross-site scripting and improper authorization vulnerabilities that could lead to session takeover. Adobe InCopy and InDesign Desktop have multiple vulnerabilities, including integer overflow, heap-based buffer overflow, and use-after-free vulnerabilities, that could result in arbitrary code execution in the context of the current user. Adobe Substance3D - Painter and Sampler have out-of-bounds write vulnerabilities that could result in arbitrary code execution in the context of the current user. Alex Zaytseff Multi CryptoCurrency Payments has a SQL injection vulnerability that allows SQL injection. Amazon Cloud Cam has a pairing status vulnerability that allows network traffic interception and modification. AMD EPYC 7002 Series Processors have an improper register access control vulnerability that may allow privileged attackers to perform unauthorized access to ASP's Crypto Co-Processor registers.

https://www.cisa.gov/news-events/bulletins/sb25-167 cisa.gov

RSS Hunter • Jun 16, 2025

Vulnerability Summary for the Week of June 2, 2025

Multiple vulnerabilities have been discovered in various products, including ABC Courier Management System, Online Notice Board, EIBPORT V3 KNX, and others. These vulnerabilities range from critical to high severity and can be exploited remotely. Some of the vulnerabilities include SQL injection, cross-site request forgery, and deserialization of untrusted data. Others involve improper neutralization of special elements, improper control of filename for include/require statements. The vulnerabilities affect various products, including WordPress plugins, desktop applications, and online management systems. The CVSS scores range from 7.1 to 9.8, indicating high to critical severity. The vulnerabilities have been disclosed to the public and may be used, while others have been addressed in recent updates. Users are advised to upgrade to the latest versions to resolve the issues. The vulnerabilities can lead to unauthorized access, execute arbitrary code, and disclose sensitive data.

https://www.cisa.gov/news-events/bulletins/sb25-160 cisa.gov

RSS Hunter • Jun 9, 2025

Vulnerability Summary for the Week of May 26, 2025

Multiple vulnerabilities have been discovered in various products, including 1000 Projects Daily College Class Work Report Book, argoproj, Avast Business Antivirus, and Best Practical RT. These vulnerabilities can lead to SQL injection, cross-site scripting, and arbitrary actions on behalf of victims. Some of these vulnerabilities have been patched in newer versions, while others remain unpatched. The vulnerabilities have been assigned CVSS scores ranging from 7.2 to 9.8, indicating high to critical severity. The affected products include Avast Business Antivirus, Best Practical RT, and Consilium Safety CS5000 Fire Panel. Some of these products can be exploited remotely, allowing attackers to perform arbitrary actions, spoof or tamper with update files, and leak secret access tokens. The vulnerabilities have been disclosed to the public and may be used by attackers. Patches have been released for some of the vulnerabilities, while others require users to take alternative measures to mitigate the risks.

https://www.cisa.gov/news-events/bulletins/sb25-153 cisa.gov

RSS Hunter • Jun 2, 2025

Vulnerability Summary for the Week of May 19, 2025

Multiple vulnerabilities have been discovered in various products, including AutomationDirect's MB-Gateway, mojoomla's Hospital Management System and WPAMS, TemplateInvaders' TI WooCommerce Wishlist, and others. These vulnerabilities include unrestricted upload of files with dangerous types, deserialization of untrusted data, and improper neutralization of special elements. They can lead to remote code execution, arbitrary file upload, and SQL injection, among other issues. The affected products and versions are listed, along with their corresponding CVE numbers and CVSS scores. The CVSS scores range from 9 to 10, indicating high to critical severity. The vulnerabilities were published between May 19 and May 25, 2025. The affected vendors include AutomationDirect, mojoomla, TemplateInvaders, STAGGS, printcart, Ajar Productions, StoreKeeper B.V., TYPO3, ABB, Canon Inc., and others. The vulnerabilities affect various products, including web servers, printers, and WooCommerce plugins. Users are advised to update their products to the latest patches to prevent potential attacks.

https://www.cisa.gov/news-events/bulletins/sb25-147 cisa.gov

RSS Hunter • May 27, 2025

Vulnerability Summary for the Week of May 12, 2025

Multiple vulnerabilities were reported on May 13th and 15th, 2025, affecting various software products. The UiPress Lite WordPress plugin has a remote code execution vulnerability allowing authenticated attackers to execute arbitrary code with a CVSS score of 8.8. Adobe Connect is vulnerable to cross-site scripting, potentially leading to session takeover with a CVSS score of 9.3. Several Adobe products, including Animate, Bridge, Dimension, Dreamweaver, Illustrator, InDesign, Lightroom, Photoshop, and Substance3D, have vulnerabilities that could result in arbitrary code execution. These Adobe vulnerabilities often require user interaction, such as opening a malicious file, and have CVSS scores of 7.8. Adobe ColdFusion has multiple vulnerabilities, including improper input validation, incorrect authorization, and OS command injection, potentially leading to arbitrary code execution with CVSS scores of 9.1. Some ColdFusion vulnerabilities also include improper access control that could lead to arbitrary file system read. One ColdFusion vulnerability requires user interaction and has a CVSS score of 8.4. These vulnerabilities could allow attackers to bypass security mechanisms or gain unauthorized access to sensitive data. Exploitation of these vulnerabilities could lead to arbitrary code execution in the context of the current user.

https://www.cisa.gov/news-events/bulletins/sb25-139 cisa.gov

RSS Hunter • May 19, 2025

Vulnerability Summary for the Week of May 5, 2025

Multiple vulnerabilities have been discovered in various products, including WordPress plugins, Arista Networks' CloudVision Portal, Avira Prime, and ATEN's LCD KVM over IP Switch CL5708IM. These vulnerabilities can lead to unauthorized data modification, privilege escalation, and remote code execution. The affected products include 1 Click WordPress Migration Plugin, Aira Prime, Arista CloudVision Portal, and ATEN's CL5708IM. The vulnerabilities have been assigned CVSS scores ranging from 7.3 to 10, indicating high to critical severity. The vulnerabilities can be exploited remotely, while others require local access or authenticated users. The affected products are used in various industries, including cybersecurity, networking, and e-commerce. The vulnerabilities have been disclosed to the public, and exploits may be available. Users are advised to update their products to the latest versions and apply security patches to prevent exploitation. The vulnerabilities have been assigned CVE IDs, including CVE-2025-3455, CVE-2024-9524, and CVE-2025-0505.

https://www.cisa.gov/news-events/bulletins/sb25-132 cisa.gov

RSS Hunter • May 12, 2025

Vulnerability Summary for the Week of April 28, 2025

Multiple critical vulnerabilities have been identified in various software and systems. Novel-Plus is susceptible to missing authentication in its genCode function. The WordPress Page View Count plugin allows unauthorized data modification leading to denial of service. ABB ANC and Automation Builder products are affected by Modification of Assumed-Immutable Data and Incorrect Permission Assignment vulnerabilities. Bosch Rexroth's ctrlX OS contains vulnerabilities in its web application, allowing remote command execution and file manipulation. SureTriggers plugin has an incorrect privilege assignment vulnerability enabling privilege escalation. Several itsourcecode products, including Gym, Placement, and Restaurant Management Systems, are vulnerable to SQL injection. SOLIDWORKS eDrawings contains Out-Of-Bounds Write and Use-After-Free vulnerabilities that could allow arbitrary code execution. Dell PowerProtect Data Manager suffers from incorrect use of privileged APIs, potentially leading to privilege escalation. Delta Electronics ISPSoft is vulnerable to stack-based buffer overflows and out-of-bounds write vulnerabilities. Finally, Agentflow has an account lockout bypass vulnerability, and Honeywell MB-Secure is affected by an OS Command Injection vulnerability.

https://www.cisa.gov/news-events/bulletins/sb25-125 cisa.gov

RSS Hunter • May 5, 2025

Vulnerability Summary for the Week of April 21, 2025

AdeptLanguage's Adept programming language had a vulnerability in its remoteBuild.yml workflow file that allowed attackers to extract a GitHub token and push malicious code or rewrite release commits. The issue has been patched in commit a1a41b7. Aeropage Sync for Airtable had a vulnerability that allowed authenticated attackers to upload arbitrary files, potentially leading to remote code execution. ALBEDO Telecom's Net.Time - PTP/NTP clock software had an insufficient session expiration vulnerability that could permit attackers to transmit passwords over unencrypted connections.Amazon's IonDotnet had a denial of service vulnerability due to an infinite loop condition when reading binary Ion data. The issue has been patched in version 1.3.1. Aonetheme's Service Finder Bookings plugin for WordPress had a privilege escalation vulnerability that allowed unauthenticated attackers to register an account with an arbitrary role, including Administrator. Arkenon's Frontend Login and Registration Blocks plugin for WordPress had a privilege escalation vulnerability that allowed authenticated attackers to change arbitrary user passwords.Artbees' Jupiter X Core plugin for WordPress had a PHP Object Injection vulnerability that allowed attackers to inject a PHP Object through a PHAR file. Ashraful Sarkar Naiem's License For Envato had a PHP Remote File Inclusion vulnerability that allowed PHP Local File Inclusion. Cajka's Verification SMS with TargetSMS plugin for WordPress had a limited Remote Code Execution vulnerability that allowed unauthenticated attackers to execute any callable function on the site.

https://www.cisa.gov/news-events/bulletins/sb25-118 cisa.gov

RSS Hunter • Apr 28, 2025

Vulnerability Summary for the Week of April 14, 2025

Multiple vulnerabilities were reported in April 2025 affecting various vendors and products. Apple macOS had a memory corruption issue, potentially leading to code execution via malicious audio files. The WordPress Smart Product Review plugin was vulnerable to arbitrary file uploads, enabling remote code execution. Several Linux kernel vulnerabilities related to use-after-free bugs were addressed. EPC AI Hub, JoomSky JS Job Manager, and several other products had unrestricted file upload vulnerabilities, often enabling web shell uploads and remote code execution. Erlang/OTP had an SSH server flaw allowing unauthenticated remote code execution. Seclore had an authentication bypass vulnerability, while Wallos had file upload issues in backup/restore functionalities. Hitachi Vantara Pentaho Data Integration & Analytics had a JNDI injection vulnerability. Several vulnerabilities related to SQL injection, buffer overflows, and insecure default settings were also reported across various products, impacting areas like authentication, data manipulation, and remote code execution.

https://www.cisa.gov/news-events/bulletins/sb25-111 cisa.gov

RSS Hunter • Apr 21, 2025

Vulnerability Summary for the Week of April 7, 2025

The listed vulnerabilities affect various software and hardware, ranging from industrial devices to web applications and plugins. Several vulnerabilities in the SENTRON 7KT PAC1260 Data Manager allow remote code execution. A Fortinet FortiSwitch GUI vulnerability allows unauthenticated password changes. Industrial Edge Device Kit versions have an authentication bypass vulnerability. A TOTVS Framework vulnerability allows multi-factor authentication bypass. Yii 2 versions before 2.0.52 have a mishandling of behavior attachment. The Simple WP Events plugin is vulnerable to arbitrary file deletion. A Mediatek software development kit has an out-of-bounds write vulnerability. Numerous vulnerabilities in RUoYi v.4.8.0 allow privilege escalation. Many other vulnerabilities were identified, including SQL injections, improper access controls, and default password issues across different products.

https://www.cisa.gov/news-events/bulletins/sb25-104 cisa.gov

RSS Hunter • Apr 14, 2025

Vulnerability Summary for the Week of March 31, 2025

This text summarizes several high-severity vulnerabilities found in various software products. These vulnerabilities range from Cross-Site Request Forgery (CSRF) and SQL Injection to Remote Code Inclusion and privilege escalation. Aboobacker's AB Google Map Travel and AdminGeekZ's Varnish WordPress are affected by CSRF. adamskaat's Countdown & Clock has a Path Traversal vulnerability, and its WordPress plugin has a Local File Inclusion issue. Ads by WPQuads is vulnerable to SQL Injection and missing authorization checks. ageerle's ruoyi-ai has improper authorization issues that can be exploited remotely. aitool's content writing assistant is susceptible to Blind SQL Injection. Aiven-extras has a privilege escalation vulnerability that allows becoming a superuser. Apple's macOS and iPadOS have multiple vulnerabilities, including sandbox escapes, memory corruption, and privilege escalation, addressed in recent updates. AMD Ryzen AI Software has integer overflow issues and incorrect default permissions. Alex Prokopenko's Just Post Preview Widget has a PHP Local File Inclusion vulnerability, and Angelo Mandato's Blubrry PowerPress plugin has a Cross-site Scripting issue.

https://www.cisa.gov/news-events/bulletins/sb25-097 cisa.gov

RSS Hunter • Apr 7, 2025

Vulnerability Summary for the Week of March 24, 2025

Multiple high-severity vulnerabilities have been discovered in various products, including Firefox, Fortinet FortiOS, Convivance StandVoice, Red Hat Pagure, and others. These vulnerabilities can lead to arbitrary code execution, sandbox escape, remote command execution, and privilege escalation. The affected products include Firefox versions prior to 136.0.4, FortiOS versions 7.2.0 through 7.2.3, and Pagure. The vulnerabilities were discovered in March 2025 and have been assigned CVE IDs. The CVSS scores for these vulnerabilities range from 9.0 to 10.0, indicating high severity. The vulnerabilities can be exploited by remote attackers, and some require no authentication or privileges. The affected products are widely used in various industries, including technology, finance, and healthcare. Users are advised to upgrade to the latest versions of the affected products to patch these vulnerabilities. Failure to do so can result in complete system compromise, data breaches, and other severe consequences.

https://www.cisa.gov/news-events/bulletins/sb25-090 cisa.gov

RSS Hunter • Mar 31, 2025

Vulnerability Summary for the Week of March 17, 2025

The text details a compilation of high-severity vulnerabilities across various software products from different vendors. These vulnerabilities include code execution flaws, SQL injection, privilege escalation, and authentication bypass. Several Synology products, including Unified Controller, DiskStation Manager, and Camera Firmware, are affected by vulnerabilities allowing remote code execution. IBM AIX systems have vulnerabilities related to command execution and SSL/TLS. Multiple WordPress plugins and themes, like Altair, CozyStay, Service Finder Bookings, and MinimogWP, are susceptible to various attacks. D-Link DAP-1620 routers suffer from critical buffer overflow vulnerabilities. Other affected products include Fortinet FortiMail, CM News, and MB connect line mbCONNECT24. Additionally, vulnerabilities exist in Esri ArcGIS, Microsoft Partner Center, and several other software packages. The reported vulnerabilities have high CVSS scores, indicating significant risks. The disclosed information is based on published CVE entries.

https://www.cisa.gov/news-events/bulletins/sb25-083 cisa.gov

RSS Hunter • Mar 24, 2025

Vulnerability Summary for the Week of March 10, 2025

Multiple vulnerabilities have been discovered in various products, including 1E Client, springboot-openai-chatgpt, a2rocklobster FTP Sync, Adobe Acrobat Reader, Adobe Illustrator, Adobe InDesign Desktop, Adobe Substance3D - Designer, Adobe Substance3D - Modeler, Adobe Substance3D - Painter, and Adobe Substance3D - Sampler. These vulnerabilities include improper link resolution, improper authorization, hard-coded credentials, cross-site request forgery, access of uninitialized pointer, use after free, out-of-bounds read and write, stack-based buffer overflow, heap-based buffer overflow, and untrusted search path. The CVSS scores for these vulnerabilities range from 7.1 to 7.8, indicating high severity. Exploitation of these issues often requires user interaction, such as opening a malicious file. The affected products and versions are listed, along with the corresponding CVE numbers. The vendors were contacted about these disclosures, but some did not respond. The products use rolling releases or do not use versioning, making it difficult to determine affected and unaffected releases. The vulnerabilities were published on various dates in March 2025. Users are advised to take necessary precautions to prevent exploitation of these vulnerabilities.

https://www.cisa.gov/news-events/bulletins/sb25-076 cisa.gov

RSS Hunter • Mar 17, 2025

Vulnerability Summary for the Week of March 3, 2025

Multiple high-severity vulnerabilities have been discovered in various products, including Uniguest Tripleplay, Lucee, NotFound Ark Theme Core, and others. These vulnerabilities include remote code execution, privilege escalation, SQL injection, and PHP object injection, among others. Many of these vulnerabilities have a CVSS score of 9.8 or higher, indicating a high level of severity. The affected products include WordPress themes and plugins, Java-based web applications, and network devices. In some cases, the vulnerabilities can be exploited by unauthenticated attackers, while in others, authentication is required. The vulnerabilities can lead to arbitrary code execution, privilege escalation, and data tampering. Patches and updates have been released to address these vulnerabilities, and users are advised to apply them as soon as possible. Failure to do so can result in serious security consequences. The affected vendors include Uniguest, Lucee, NotFound, Fave Themes, Boceksoft Informatics, and many others. The vulnerabilities were discovered in March 2025, and users are urged to take immediate action to protect their systems.

https://www.cisa.gov/news-events/bulletins/sb25-069 cisa.gov

RSS Hunter • Mar 10, 2025

Vulnerability Summary for the Week of February 24, 2025

Multiple vulnerabilities have been discovered in various products, including jupyterhub-ltiauthenticator, MITRE Caldera, scriptsbundle Nokri Job Board WordPress Theme, Yukseloglu Filter B2B Login Platform, Infoblox NIOS, XIQ-SE, Draytek devices, Mautic, Vigor devices, NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus, XOne Web Monitor, Public Knowledge Project, yi_car_dashcam_firmware, DHVC Form, WooCommerce Ultimate Gift Card, WHMpress - WHMCS WordPress Integration Plugin, IBM Storage Virtualize, everest_forms, SetSail Membership, Alloggio Membership, Academist Membership, CIGES, and Mattermost.These vulnerabilities include high-severity issues such as remote code execution, SQL injection, privilege escalation, authentication bypass, and arbitrary file upload, read, and deletion.The affected products and versions are listed, along with the corresponding CVE numbers and CVSS scores.The vulnerabilities were discovered and reported between February 24, 2025, and March 1, 2025.Users of these products are advised to update to the latest versions or apply patches to mitigate the risks.In some cases, no workarounds are available, and users must upgrade to a fixed version to prevent exploitation.The vulnerabilities can be exploited by remote attackers, and some require authentication or specific conditions to be met.The impact of these vulnerabilities can be severe, including remote code execution, data breaches, and site takeovers.Users are urged to take immediate action to address these vulnerabilities and protect their systems and data.The full list of affected products and details can be found in the original text.

https://www.cisa.gov/news-events/bulletins/sb25-062 cisa.gov

RSS Hunter • Mar 3, 2025

Vulnerability Summary for the Week of February 17, 2025

Multiple vulnerabilities have been discovered in various products, including WordPress plugins, firmware, and software. The a1post A1POST.BG Shipping for Woo plugin has a Cross-Site Request Forgery vulnerability that allows privilege escalation. The WPMobile.App plugin has an Open Redirect vulnerability that can redirect users to malicious sites. The Option Editor plugin has a Cross-Site Request Forgery vulnerability that allows updating arbitrary options on a WordPress site. Baiyi Cloud Asset Management System has multiple SQL injection vulnerabilities that can be exploited remotely. BDCOM Behavior Management and Auditing System has an OS command injection vulnerability that can be launched remotely. The CarSpot - Dealership WordPress Classified Theme has a privilege escalation vulnerability that allows account takeover. binance-trading-bot has a command injection vulnerability that allows remote code execution. ChurchCRM has a time-based blind SQL Injection vulnerability that allows arbitrary SQL queries. Multiple other products, including Dell Client Platform BIOS, Dell NetWorker Management Console, and denx U-Boot, have vulnerabilities that can be exploited to gain elevated privileges or execute arbitrary code.

https://www.cisa.gov/news-events/bulletins/sb25-055 cisa.gov

RSS Hunter • Feb 24, 2025