Aggregator

Submit #591364 / VDB-311580

Submit #591366 / VDB-212438

Submit #591363 / VDB-311579

A vulnerability was found in State Restorationinfo Profiler Plugin up to 1.0.0 on WordPress. It has been declared as critical. This vulnerability affects the function wpsd_plugin_control. The manipulation leads to missing authentication. This vulnerability was named CVE-2025-5814. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in QNAP License Center up to 1.9.48. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-50406. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in QNAP File Station 5.5.6.4741/5.5.6.4791 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2025-29871. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in QNAP QuRouter 2.4.3.103/2.4.4.106/2.4.5.032/2.4.6.028 and classified as critical. Affected by this vulnerability is an unknown functionality of the component QHora. The manipulation leads to improper authentication. This vulnerability is known as CVE-2024-13088. It is possible to launch the attack on the physical device. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in QNAP QuRouter 2.4.3.103/2.4.4.106/2.4.5.032. Affected is an unknown function of the component QHora. The manipulation leads to os command injection. This vulnerability is traded as CVE-2024-13087. It is possible to launch the attack on the physical device. There is no exploit available. It is recommended to upgrade the affected component.

Several widespread ClickFix campaigns are underway, bent on delivering malware to business targets, and they represent a new level of phishing sophistication that defenders need to be prepared for, researchers warn.

Cybersecurity 2025: The Trends Defining Risk and How to Stay Ahead Cybersecurity 2025: The Trends Defining Risk and How to Stay Ahead The rules of cybersecurity are shifting—again. As 2025 unfolds, companies face a paradox: digital acceleration is non-negotiable, but it’s also becoming their biggest liability. From API sprawl to AI-driven phishing, today’s threats evolve […]

The post Cybersecurity 2025: The Trends Defining Risk and How to Stay Ahead appeared first on Cyber security services provider, data privacy consultant | Secureflo.

The post Cybersecurity 2025: The Trends Defining Risk and How to Stay Ahead appeared first on Security Boulevard.

A vulnerability, which was classified as critical, has been found in WOLFBOX Level 2 EV Charger. This issue affects some unknown processing. The manipulation leads to hard-coded credentials. The identification of this vulnerability is CVE-2025-5751. It is possible to launch the attack on the physical device. There is no exploit available.

A vulnerability classified as critical was found in WOLFBOX Level 2 EV Charger. This vulnerability affects the function tuya_svc_devos_activate_result_parse. The manipulation of the argument secKey/localKey/stdTimeZone/devId leads to heap-based buffer overflow. This vulnerability was named CVE-2025-5750. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Huawei EG8141A5, EG8145V5 and EG8145V5-V2. This affects an unknown part. The manipulation leads to incorrect authorization. This vulnerability is uniquely identified as CVE-2025-49599. The attack can only be done within the local network. There is no exploit available.

A vulnerability was found in WOLFBOX Level 2 EV Charger. It has been rated as critical. Affected by this issue is some unknown functionality of the component BLE Encryption. The manipulation leads to use of uninitialized variable. This vulnerability is handled as CVE-2025-5749. The attack needs to be approached within the local network. There is no exploit available.

A vulnerability was found in CoreDNS up to 1.12.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to allocation of resources. This vulnerability is known as CVE-2025-47950. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in authzed spicedb up to 1.44.1. It has been classified as problematic. Affected is an unknown function. The manipulation leads to security check for standard. This vulnerability is traded as CVE-2025-49011. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in QNAP File Station 5.5.6.4847 and classified as critical. This issue affects some unknown processing. The manipulation leads to path traversal. The identification of this vulnerability is CVE-2025-33035. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in QNAP File Station 5.5.6.4741/5.5.6.4791 and classified as critical. This vulnerability affects unknown code. The manipulation leads to improper certificate validation. This vulnerability was named CVE-2025-33031. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in QNAP File Station 5.5.6.4847. This affects an unknown part. The manipulation leads to improper certificate validation. This vulnerability is uniquely identified as CVE-2025-30279. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in QNAP File Station 5.5.6.4741/5.5.6.4791. Affected by this issue is some unknown functionality. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2025-29877. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.