A vulnerability was found in Protected Total WebShield Extension up to 3.2.0 on Chrome. It has been classified as problematic. This affects an unknown part of the component Block Page. The manipulation of the argument Category leads to cross site scripting. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-8751 is a cross-site scripting (XSS) vulnerability identified in the Protected Total WebShield Extension for Chrome, affecting versions up to 3.2.0. The vulnerability resides in an unspecified part of the Block Page component, specifically involving the manipulation of the 'Category' argument. An attacker can exploit this flaw by injecting malicious scripts through the Category parameter, which the extension fails to properly sanitize or encode before rendering. This leads to the execution of arbitrary JavaScript in the context of the extension's web page. The vulnerability is remotely exploitable without requiring authentication, but the attack complexity is rated as high, indicating that exploitation requires significant effort or specific conditions. User interaction is necessary for the attack to succeed, such as visiting a crafted URL or interacting with the extension's interface. The CVSS 4.0 base score is 2.3, reflecting a low severity primarily due to the high attack complexity and the need for user interaction, as well as limited impact on confidentiality and availability. The vendor was notified early but has not responded or issued a patch, and no known exploits are currently observed in the wild. This vulnerability could be leveraged to execute scripts that might steal user data, manipulate extension behavior, or perform phishing attacks within the browser context, but the scope is limited to the extension's environment rather than the broader system or network.

CVE Database V5

Detailed information about CVE-2025-8751: Cross Site Scripting in Protected Total WebShield Extension affecting Protected Total WebShield Extension. Get real-ti

CVE-2025-8751: Cross Site Scripting in Protected Total WebShield Extension - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8751: Cross Site Scripting in Protected Total WebShield Extension

A vulnerability has been found in macrozheng mall up to 1.0.3 and classified as problematic. Affected by this vulnerability is the function Upload of the file /minio/upload of the component Add Product Page. The manipulation of the argument File leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-8750 is a cross-site scripting (XSS) vulnerability identified in the macrozheng mall application, specifically affecting versions 1.0.0 through 1.0.3. The vulnerability resides in the Upload function of the /minio/upload endpoint within the Add Product Page component. The issue arises from improper sanitization or validation of the 'File' argument, which an attacker can manipulate to inject malicious scripts. This vulnerability can be exploited remotely without requiring authentication, although user interaction is necessary to trigger the malicious payload. The disclosed exploit allows attackers to execute arbitrary JavaScript in the context of the victim's browser, potentially leading to session hijacking, credential theft, or unauthorized actions on behalf of the user. The vendor has not responded to the disclosure, and no official patches are currently available. The CVSS 4.0 base score is 4.8, indicating a medium severity level, reflecting the moderate impact and ease of exploitation with some limitations such as required user interaction and limited integrity impact.

Detailed information about CVE-2025-8750: Cross Site Scripting in macrozheng mall affecting macrozheng mall. Get real-time updates, technical details, and mitig

CVE-2025-8750: Cross Site Scripting in macrozheng mall - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8750: Cross Site Scripting in macrozheng mall

A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function __strstr_sse2. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. This issue was initially reported to the tcpreplay project, but the code maintainer explains, that this "bug appears to be in libopts which is an external library." This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2025-8746 is a memory corruption vulnerability identified in the GNU libopts library, specifically affecting versions up to 27.6. The flaw resides in the __strstr_sse2 function, which is responsible for optimized string searching operations. The vulnerability allows an attacker with local access and low privileges to manipulate memory in a way that could lead to corruption. This could potentially cause unexpected behavior, crashes, or other undefined outcomes in applications relying on this library. The vulnerability does not require user interaction or elevated privileges beyond local access, and no network vector is involved, limiting the attack surface. The issue was initially reported in the context of the tcpreplay project, but the root cause lies within the external libopts library. Importantly, the affected versions of libopts are no longer supported by the maintainer, and no official patches have been released. The CVSS 4.0 base score is 4.8, indicating a medium severity level, reflecting the limited attack vector and the requirement for local access. There are no known exploits in the wild at this time. Given the nature of the vulnerability, exploitation could lead to denial of service or potentially enable further local privilege escalation if combined with other vulnerabilities, but remote exploitation is not feasible. The lack of vendor support and patches means that affected systems must consider alternative mitigation strategies or upgrade paths if possible.

Detailed information about CVE-2025-8746: Memory Corruption in GNU libopts affecting GNU libopts. Get real-time updates, technical details, and mitigation strat

CVE-2025-8746: Memory Corruption in GNU libopts - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8746: Memory Corruption in GNU libopts

A vulnerability, which was classified as problematic, has been found in Weee RICEPO App 6.17.77 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.ricepo.app. The manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-8745 is a medium-severity vulnerability identified in version 6.17.77 of the Weee RICEPO Android application. The root cause lies in improper exportation of Android application components due to incorrect processing of the AndroidManifest.xml file, specifically related to the component com.ricepo.app. In Android, components such as activities, services, broadcast receivers, and content providers can be exported to allow interaction with other apps or system components. Improper exportation means that components intended to be private or restricted are inadvertently made accessible to other apps or users, potentially allowing unauthorized access or manipulation. This vulnerability requires local access to the device, meaning an attacker must have the ability to execute code or interact with the device locally, such as through a malicious app installed on the device or physical access. The CVSS 4.0 vector indicates low attack complexity and low privileges required, with no user interaction needed, but the attack surface is limited to local access. The vulnerability impacts confidentiality, integrity, and availability to a limited extent, as the improperly exported components could be leveraged to access sensitive data or perform unauthorized actions within the app context. The vendor was notified but did not respond, and no patches or fixes have been published yet. Although the exploit has been publicly disclosed, there are no known exploits actively used in the wild at this time. This vulnerability highlights the importance of correctly configuring component export settings in AndroidManifest.xml to prevent unauthorized access to app internals.

Detailed information about CVE-2025-8745: Improper Export of Android Application Components in Weee RICEPO App affecting Weee RICEPO App. Get real-time updates,

CVE-2025-8745: Improper Export of Android Application Components in Weee RICEPO App - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8745: Improper Export of Android Application Components in Weee RICEPO App

CVE-2025-8771 is a vulnerability identifier that has been reserved but subsequently marked as REJECTED in the CVE database. The available information lacks any technical details, affected versions, or descriptions of the vulnerability itself. There are no known exploits in the wild, no patch information, and no Common Weakness Enumeration (CWE) references. The absence of these details indicates that this CVE entry does not correspond to a confirmed or valid security vulnerability. The 'REJECTED' state typically means that the CVE was either a duplicate, invalid, or otherwise not accepted as a legitimate vulnerability record. Therefore, there is no substantive threat information to analyze or assess.

Detailed information about CVE-2025-8771. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-8771 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8771

This content has been identified as promotional or non-threat material.

Reddit NetSec

Detailed information about SquareX launches open-source toolkits to defend browsers. Get real-time updates, technical details, and mitigation strategies.

SquareX launches open-source toolkits to defend browsers

AI Analysis

Technical Summary

Potential Impact

Mitigation Recommendations

SquareX launches open-source toolkits to defend browsers

Description

AI-Powered Analysis

Technical Analysis

Potential Impact

Mitigation Recommendations

Technical Details

Related Threats

FTC: older adults lost record $700 million to scammers in 2024

WinRAR zero-day exploited to plant malware on archive extraction

Theori AIxCC writeup , 0day in sqlite + more

Unclaimed Google Play Store package

RubyGems, PyPI Hit by Malicious Packages Stealing Credentials, Crypto, Forcing Security Changes

Actions

External Links

Need enhanced features?

Latest Threats

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility