Week 49, 2025

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following…

Meta · react-server-dom-webpack

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via…

Product not named

In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. This could lead to local escalation of…

Google · Android

In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code.…

Google · Android

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following…

Meta · react-server-dom-webpack

WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover

listingthemes · WP Directory Kit

Advantech WISE-DeviceOn Server < 5.4 Hard-coded JWT Key Authentication Bypass

Advantech Co., Ltd. · WISE-DeviceOn Server

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application fails to properly sanitize…

Product not named

Stack-based buffer overflow vulnreability in Circutor SGE-PLC1000/SGE-PLC50

SGE-PLC1000 SGE-PLC50 · Circutor

cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)

yhirose · cpp-httplib

Cal.com Authentication Bypass via bad TOTP + password checks

calcom · cal.com

Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - Unauthenticated Remote Code Execution in prepare_form

hwk-fr · Advanced Custom Fields: Extended

Masa CMS Vulnerable to Pre-Auth RCE via JSON API

MasaCMS · MasaCMS

ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.

Product not named