Recent Advisories

Severity ID Title Vendor Product Date Type
Unknown ADV-4383

CVE-2025-42999 Insecure Deserialization in SAP NetWeaver (Visual Composer development server)

Security Update News Update Information Title CVE-2025-42999 Insecure Deserialization in SAP NetWeaver (Visual Composer development server) Update ...

N/A N/A NEWS
Unknown ADV-3007

CVE-2025-4279 External image replace <= 1.0.8 - Authenticated (Contributor+) Arbitrary File Upload

Vulnerability Details Basic Information Title CVE-2025-4279 External image replace

N/A N/A NEWS
Unknown ADV-3006

CVE-2025-4283 SourceCodester/oretnom23 Stock Management System Login.php sql injection

Vulnerability Details Basic Information Title CVE-2025-4283 SourceCodester/oretnom23 Stock Management System Login.php sql injection Type cvelist P...

N/A N/A NEWS
Unknown ADV-3005

CVE-2025-46340 Misskey CSS Style Injection Vulnerability In `MkUrlPreview`

Vulnerability Details Basic Information Title CVE-2025-46340 Misskey CSS Style Injection Vulnerability In `MkUrlPreview` Type cvelist Published 202...

N/A N/A NEWS
Unknown ADV-2953

CVE-2025-24977 OpenCTI has remote code execution and sensitive secrets exposed through web hook

Vulnerability Details Basic Information Title CVE-2025-24977 OpenCTI has remote code execution and sensitive secrets exposed through web hook Type ...

N/A N/A NEWS
Unknown ADV-2908

CVE-2025-4272 Mechrevo Control Console GCUService csCAPI.dll uncontrolled search path

Vulnerability Details Basic Information Title CVE-2025-4272 Mechrevo Control Console GCUService csCAPI.dll uncontrolled search path Type cvelist Pu...

N/A N/A NEWS
Unknown ADV-2905

CVE-2025-2905 Unauthenticated XML External Entity (XXE) Vulnerability in WSO2 API Manager Gateway Component

Vulnerability Details Basic Information Title CVE-2025-2905 Unauthenticated XML External Entity (XXE) Vulnerability in WSO2 API Manager Gateway Com...

N/A N/A NEWS
Unknown ADV-2897

CVE-2025-4269 TOTOLINK A720R Log cstecgi.cgi access control

Vulnerability Details Basic Information Title CVE-2025-4269 TOTOLINK A720R Log cstecgi.cgi access control Type cvelist Published 2025-05-05T07:00:0...

N/A N/A NEWS
Unknown ADV-2892

CVE-2025-4266 PHPGurukul Notice Board System bwdates-reports-details.php sql injection

Vulnerability Details Basic Information Title CVE-2025-4266 PHPGurukul Notice Board System bwdates-reports-details.php sql injection Type cvelist P...

N/A N/A NEWS
Unknown ADV-2891

CVE-2025-39363 WordPress Custom Login and Registration <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

Vulnerability Details Basic Information Title CVE-2025-39363 WordPress Custom Login and Registration

N/A N/A NEWS