What needs attention now.

WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability

• ThemeREX Ozisti
• Insecure deserialization

WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability

• ThemeREX Preservation
• Insecure deserialization

WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability

• ThemeREX Printy
• Insecure deserialization

WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability

• ThemeREX Quirky
• Insecure deserialization

WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability

• ThemeREX RexCoin
• Insecure deserialization

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Authentication bypass

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Broken access control

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Code injection

Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection

• agno
• Code injection

OS command injection in Yamaha Corporation NWR100

• Yamaha Corporation NWR100
• Command injection

WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability

• StylemixThemes Motors
• SQL injection

Apache Qpid Proton C: Potential authentication bypass: regular AMQP frames can be sent as SASL frames

• Apache Software Foundation Apache Qpid Proton C
• CWE-305

Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash

• Apache Software Foundation Apache Qpid Proton C
• Denial of service

Apache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trusted system trust anchors.

• Apache Software Foundation Apache Qpid Proton C
• Weak cryptography or TLS

SQL Injection Vulnerability in Radius Xenia M2M Platform

• Radius Synergies Radius Xenia M2M Platform
• SQL injection

Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File Upload

• Chat AI with Dispatcher
• Unrestricted file upload

Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal

• Automated Import Products to Cart
• Path traversal

LogixFast Auth < 1.0.4 - Unauthenticated Account Takeover via Password Reset

• LogixFast Auth
• Privilege escalation

Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection

• Frontend Dashboard
• ProfileGrid
• Insecure deserialization

Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token

• guruteam Bot for Telegram on WooCommerce
• Authentication bypass

Improper authorization in Frangoteam

• Frangoteam
• Broken access control

Unrestricted Command Execution via system.execute

• Apereo Foundation openEQUELLA
• Command injection
• CWE-749

The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell.

• Authentication bypass

OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46).

• Path traversal

DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129).

• Path traversal

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.

• Broken access control

An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service API and preference state.

• Authentication bypass

An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.

• CWE-926

Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database…

• Broken access control

Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of the sandbox.

• Path traversal

An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to arbitrary code execution.

• Code injection

An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request.

• CWE-926

Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to arbitrarily read another's Nostr event database.

• Broken access control

Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture mechanism.

• CWE-926

Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.

• CWE-926

Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data.

• CWE-926

Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data.

• Broken access control

Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.

• CWE-926

Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

• Broken access control

Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data.

• Broken access control

Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

• CWE-926

Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attackers to arbitrarily read flashcards across the user's entire m…

• CWE-926

Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily trigger another user's configured automated actions.

• Broken access control

Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.

• Broken access control

Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read notes in another user's' note database.

• CWE-926

D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor

• D-Link DIR-505
• CWE-912

AVideo-Encoder: unauthenticated command execution through streamer login trust

• WWBN AVideo-Encoder
• Command injection

AVideo-Encoder: unauthenticated installer PHP code injection

• WWBN AVideo-Encoder
• Code injection

Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it

• Weak cryptography or TLS

<4.8.3 · fixed in 4.8.3

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

• CWE-691

<36.0.19 || >=37.0.0, <48.0.7 || >=49.0.0, <49.0.4 · fixed in 36.0.19, 48.0.7, 49.0.4

Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs

• signalk-server
• Authentication bypass

zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE

• CWE-20
• CWE-436

<9.0.5 · fixed in 9.0.5

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

• Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
• Cisco Secure Firewall Threat Defense (FTD) Software
• CWE-690

Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization

• Red Hat OpenShift AI (RHOAI)
• Broken access control

FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS

• fearlessgeekmedia FearlessCMS
• Path traversal
• Cross-site scripting (XSS)

Path traversal in Sophos SG UTM

• Sophos SG UTM
• Path traversal

HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk

• CWE-130