CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-48328 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in Daman Jeet Real Time Validation for Gravity Forms allows Cross Site Request Forgery.This issue affects Real Time Validation for Gravity Forms: from n/a through 1.7.0.
CVSS: MEDIUM (4.3) EPSS Score: 0.02%
June 6th, 2025 (25 days ago)
|
|
CVE-2025-47586 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Motors - Events allows PHP Local File Inclusion.This issue affects Motors - Events: from n/a through 1.4.7.
CVSS: CRITICAL (9.0) EPSS Score: 0.15%
June 6th, 2025 (25 days ago)
|
|
CVE-2025-47584 |
Description: Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: from n/a through 7.5.2.
CVSS: HIGH (8.5) EPSS Score: 0.05%
June 6th, 2025 (25 days ago)
|
|
CVE-2025-41367 |
Description: Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious JavaScript payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that can only be executed with permissions higher than the view permission.
CVSS: MEDIUM (4.8) EPSS Score: 0.05%
June 6th, 2025 (25 days ago)
|
|
CVE-2025-41366 |
Description: In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS). Exploiting this vulnerability requires authenticating to the device and executing certain commands that can only be executed with permissions higher than the view permission.
CVSS: MEDIUM (5.1) EPSS Score: 0.04%
June 6th, 2025 (25 days ago)
|
|
CVE-2025-41365 |
Description: Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be executed only with permissions higher than the view permission.
CVSS: MEDIUM (5.1) EPSS Score: 0.05%
June 6th, 2025 (25 days ago)
|
|
CVE-2025-41364 |
Description: Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious JavaScript payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be executed with view permission.
CVSS: MEDIUM (5.1) EPSS Score: 0.05%
June 6th, 2025 (25 days ago)
|
|
CVE-2025-41363 |
Description: In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS). Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be executed with view permission.
CVSS: MEDIUM (5.3) EPSS Score: 0.04%
June 6th, 2025 (25 days ago)
|
|
CVE-2025-41362 |
Description: Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be executed with view permission.
CVSS: MEDIUM (5.3) EPSS Score: 0.05%
June 6th, 2025 (25 days ago)
|
|
CVE-2025-41361 |
Description: Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The devices improperly handle TLS requests associated with PROCOME sockets, so TLS requests sent to those PROCOME ports could cause the device to reboot and result in a denial of service. To exploit this vulnerability, PROCOME ports must be configured and active, with communications encryption active.
CVSS: HIGH (8.3) EPSS Score: 0.04%
June 6th, 2025 (25 days ago)
|