CVE-2025-21042 is a high-severity out-of-bounds write vulnerability in the libimagecodec.quram.so component of Samsung Mobile Devices prior to the SMR April 2025 Release 1. This vulnerability allows remote attackers to execute arbitrary code with high impact on confidentiality, integrity, and availability. Exploits are known to be in the wild. No specific affected versions or patch links are provided in the available data.
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.
CWP Control Web Panel has a critical OS command injection vulnerability allowing unauthenticated remote code execution via shell metacharacters in the t_total parameter of a filemanager changePerm request. Exploitation requires knowledge of a valid non-root username. The vulnerability is actively exploited in the wild and has a CVSS score of 9.0.
CVE-2025-11371 is an unauthenticated Local File Inclusion vulnerability in Gladinet CentreStack and TrioFox. It affects all versions up to and including 16.7.10368.56560. This flaw allows attackers to disclose system files without authentication. Exploitation has been observed in the wild. The vulnerability has a high severity rating with a CVSS score of 7.5.
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to `SolrSearch`. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduce on an instance, without being logged in, go to `<host>/xwiki/bin/get/Main/SolrSearch?media=rss&text=%7D%7D%7D%7B%7Basync%20async%3Dfalse%7D%7D%7B%7Bgroovy%7D%7Dprintln%28"Hello%20from"%20%2B%20"%20search%20text%3A"%20%2B%20%2823%20%2B%2019%29%29%7B%7B%2Fgroovy%7D%7D%7B%7B%2Fasync%7D%7D%20`. If there is an output, and the title of the RSS feed contains `Hello from search text:42`, then the instance is vulnerable. This vulnerability has been patched in XWiki 15.10.11, 16.4.1 and 16.5.0RC1. Users are advised to upgrade. Users unable to upgrade may edit `Main.SolrSearchMacros` in `SolrSearchMacros.xml` on line 955 to match the `rawResponse` macro in `macros.vm#L2824` with a content type of `application/xml`, instead of simply outputting the content of the feed.
A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.
An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.
Adobe Commerce versions up to 2.4.4-p15 are affected by an improper input validation vulnerability (CWE-20) that allows an attacker to perform session takeover without user interaction. This vulnerability has a critical severity with a CVSS score of 9.1, impacting confidentiality and integrity. Exploitation is known in the wild. No patch or remediation details are provided in the available data.
Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.
An unspecified vulnerability in the JavaScriptCore component affects multiple Apple products including macOS, iOS, tvOS, Safari, and watchOS. This flaw may allow arbitrary code execution when processing web content. The affected products could include versions that are end-of-life or end-of-service, and users are advised to discontinue use of impacted products. Exploitation of this vulnerability has been observed in the wild.
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Configurator accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
CVE-2025-33073 is a high-severity vulnerability in Microsoft Windows 10 Version 1507 involving improper access control in the SMB protocol. It allows an authorized attacker to elevate privileges over a network without requiring user interaction. The vulnerability has a CVSS score of 8.8, indicating a significant impact on confidentiality, integrity, and availability. No patch or remediation information is currently provided by the vendor. There are no known exploits in the wild at this time.
An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.178.
An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.172.