CVE-2025-23458 – Reflected Cross-Site Scripting (XSS) in Rakessh Ads24 Lite plugin for WordPress Threat Advisories CyberDefenderDecember 30, 2025December 30, 20253 mins0 CVE-2025-23458 is a high-severity vulnerability involving Improper Neutralization of Input During Web Page Generation, commonly known as…continue reading..
CVE-2025-23469 – Reflected Cross-Site Scripting (XSS) in Sleekplan WordPress plugin Threat Advisories CyberDefenderDecember 30, 2025December 30, 20253 mins0 CVE-2025-23469 is a Reflected Cross-Site Scripting (XSS) security issue found in versions up to and including 0.2.0…continue reading..
CVE-2025-23550 — Reflected Cross-Site Scripting (XSS) in WordPress “Product Puller” plugin Threat Advisories CyberDefenderDecember 30, 2025December 30, 20252 mins0 CVE-2025-23550 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the WordPress “Product Puller” plugin (developed by Kemal…continue reading..
CVE-2025-23554 vulnerability in Jakub Glos Off Page SEO allows Reflected XSS Threat Advisories CyberDefenderDecember 30, 2025December 30, 20252 mins0 CVE-2025-23554 is a high-severity security vulnerability classified as Improper Neutralization of Input During Web Page Generation —…continue reading..
When Opening Code Becomes Running Code: Inside CVE-2025-68120 and the Hidden Risk in Developer Tools Threat Advisories AegironDecember 30, 2025December 30, 202511 mins0 A Deep Dive into the Visual Studio Code Go Extension Vulnerability Developer tools are often treated as…continue reading..
CVE-2025-69217: coturn TURN/STUN Server Predictable Random Number Generation Vulnerability Threat Advisories AegironDecember 30, 2025December 30, 202512 mins0 Vulnerability Overview CVE Identifier: CVE-2025-69217Affected Software: coturn (TURN / STUN Server Implementation)Vulnerable Versions: 4.6.2-r5 through 4.7.0-r4Fixed Version:…continue reading..
CVE-2025-15068 – Missing Authorization in Gmission Web Fax Threat Advisories CyberDefenderDecember 29, 2025December 29, 20258 mins0 Title: Missing Authorization in Gmission Web Fax (privilege abuse / session credential falsification)Published: 29 Dec 2025Severity: High…continue reading..
Apple Patches Two Zero-Day Vulnerabilities Actively Exploited in Targeted Attacks Threat Advisories CyberDefenderDecember 29, 2025December 29, 20254 mins0 Apple has released urgent security updates to address two zero-day vulnerabilities that were actively exploited in targeted…continue reading..
Security Advisory: Multiple High-Severity Vulnerabilities in Tenda WH450 Router Threat Advisories CyberDefenderDecember 29, 2025December 29, 20256 mins0 Multiple critical and high-severity vulnerabilities have been published affecting the Tenda WH450 router firmware (version 1.0.0.18) —…continue reading..
CVE-2025-15162: Deep Dive into a High-Risk Tenda WH450 Router Vulnerability Threat Advisories CyberDefenderDecember 29, 2025December 29, 20256 mins0 CVE-2025-15162 is a high-severity stack-based buffer overflow vulnerability affecting the Tenda WH450 router running firmware v1.0.0.18. The…continue reading..
