Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.8 THN:1782A0E4188...

GeoServer Exploits, PolarEdge, and Gayfemboy Push Cybercrime Beyond Traditional Botnets_THN:1782A0E418850AD4C81A38553E4FBC87

![](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=) Cybersecurity researchers ...

N/A N/A THN
CRITICAL 9.8 CVE-2025-5821

Case Theme User <= 1.0.3 - Authentication Bypass via Social Login_CVE-2025-5821

The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.3. This is due to the plu...

Case-Themes Case Theme User * CVE
CRITICAL 9.8 CVE-2025-7642

Simpler Checkout 0.7.0 – 1.1.9 – Authentication Bypass_CVE-2025-7642

The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7.0 to 1.1.9. This is due to the plugin not properly...

simplercheckout Simpler Checkout 0.7.0 CVE
CRITICAL 9.8 CVE-2025-29365

CVE-2025-29365_CVE-2025-29365

spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.

n/a n/a n/a CVE
CRITICAL 9.6 CVE-2025-26496

CVE-2025-26496_CVE-2025-26496

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux (File U...

Salesforce Tableau Server, Tableau Desktop CVE
CRITICAL 9.8 THN:B27D2D10416...

Chinese Hackers Murky, Genesis, and Glacial Panda Escalate Cloud and Telecom Espionage_THN:B27D2D104167D0E00390AC4DB05ECDCD

![](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=) Cybersecurity researchers ...

N/A N/A THN
CRITICAL 9.8 CVE-2025-55613

CVE-2025-55613_CVE-2025-55613

Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter.

n/a n/a n/a CVE
CRITICAL 9.8 WALLARMLAB:5238...

Exploiting API4 — 8 Real-World Unrestricted Resource Consumption Attack Scenarios (and How to Stop Them)_WALLARMLAB:52382F1A16D445EE208C3A203404B3B5

**Unrestricted Resource Consumption****(API4:2023)** is the only threat category in the OWASP API Security Top 10 explicitly dedicated to Denial of...

N/A N/A WALLARMLAB
CRITICAL 9.3 CVE-2025-9254

Uniong｜WebITR – Missing Authentication_CVE-2025-9254

WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to log into the system as arbitrar...

Uniong WebITR CVE
CRITICAL 10 78E24C22-D356-

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile_78E24C22-D356-5FFD-B0CD-2C2A1A08175D

CVE-2023-35078 Exploit Tool ```bash ██████╗ ███╗ ██╗███████╗███████╗ ██████╗ ██╔═████╗████╗ ██║██╔════╝██╔════╝██╔════╝ ██║██╔██║██╔██╗ ██║█████...

N/A N/A GITHUBEXPLOIT