Web Security Insights By Maloy Roy Orko

Latest Vulnerabilities

CVE-2025-54477 - Joomla! Core - [20250902] User-Enumeration in passkey authentication method

byMaloy Roy Orko -September 30, 2025

CVE ID : CVE-2025-54477 Published : Sept. 30, 2025, 4:15 p.m. | 1 hour, 51 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-54476 - Joomla! Core - [20250901] Inadequate content filtering within the checkAttribute filter code

byMaloy Roy Orko -September 30, 2025

CVE ID : CVE-2025-54476 Published : Sept. 30, 2025, 4:15 p.m. | 1 hour, 51 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-41244 - VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

byMaloy Roy Orko -September 29, 2025

CVE ID : CVE-2025-41244 Published : Sept. 29, 2025, 5:15 p.m. | 51 minutes ago Description :…

Latest Vulnerabilities

CVE-2024-57412 - Omnios TCP Denial of Service Vulnerability

byMaloy Roy Orko -September 29, 2025

CVE ID : CVE-2024-57412 Published : Sept. 29, 2025, 5:15 p.m. | 51 minutes ago Description :…

Latest Vulnerabilities

CVE-2025-11110 - Campcodes Online Learning Management System school_year.php sql injection

byMaloy Roy Orko -September 28, 2025

CVE ID : CVE-2025-11110 Published : Sept. 28, 2025, 4:15 p.m. | 1 hour, 50 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-11068 - westboy CicadasCMS save cross site scripting

byMaloy Roy Orko -September 27, 2025

CVE ID : CVE-2025-11068 Published : Sept. 27, 2025, 4:15 p.m. | 1 hour, 50 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-11027 - givanz Vvveb SVG File cross site scripting

byMaloy Roy Orko -September 26, 2025

CVE ID : CVE-2025-11027 Published : Sept. 26, 2025, 4:15 p.m. | 1 hour, 49 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-20333 - "Cisco Secure Firewall Arbitrary Code Execution Vulnerability"

byMaloy Roy Orko -September 25, 2025

CVE ID : CVE-2025-20333 Published : Sept. 25, 2025, 4:15 p.m. | 1 hour, 49 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-10953 - UTT 1200GW/1250GW formApMail buffer overflow

byMaloy Roy Orko -September 25, 2025

CVE ID : CVE-2025-10953 Published : Sept. 25, 2025, 4:15 p.m. | 1 hour, 49 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-20149 - Cisco IOS Software and Cisco IOS XE Software CLI Buffer Overflow Denial of Service

byMaloy Roy Orko -September 24, 2025

CVE ID : CVE-2025-20149 Published : Sept. 24, 2025, 5:14 p.m. | 50 minutes ago Description :…

Latest Vulnerabilities

CVE-2025-20313 - "Cisco IOS XE Software Persistent Code Execution and Chain of Trust Bypass"

byMaloy Roy Orko -September 24, 2025

CVE ID : CVE-2025-20313 Published : Sept. 24, 2025, 5:12 p.m. | 51 minutes ago Description :…

Latest Vulnerabilities

CVE-2025-57407 - S-Cart Admin Log Viewer Stored Cross-Site Scripting Vulnerability

byMaloy Roy Orko -September 23, 2025

CVE ID : CVE-2025-57407 Published : Sept. 23, 2025, 4:15 p.m. | 1 hour, 48 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-9038 - S1 Agile Privilege Escalation

byMaloy Roy Orko -September 22, 2025

CVE ID : CVE-2025-9038 Published : Sept. 22, 2025, 3:15 p.m. | 2 hours, 47 minutes ago Descr…

Cyber Security Tools

Lockdoor Framework - A Penetration Testing Framework

byMaloy Roy Orko -September 21, 2025

Lookdoor Framework tool is developed in the Bash Script and available on the GitHub platform fo…

Latest Vulnerabilities

CVE-2025-10767 - CosmodiumCS OnlyRAT Os Command Injection Vulnerability

byMaloy Roy Orko -September 21, 2025

CVE ID : CVE-2025-10767 Published : Sept. 22, 2025, 1:08 a.m. | 54 minutes ago Description :…

Latest Vulnerabilities

CVE-2025-10771 - "Jeecgboot JimuReport DB2 JDBC Handler Remote Deserialization Vulnerability"

byMaloy Roy Orko -September 21, 2025

CVE ID : CVE-2025-10771 Published : Sept. 22, 2025, 1:08 a.m. | 54 minutes ago Description :…

Latest Vulnerabilities

CVE-2025-10772 - Huggingface LeRobot ZeroMQ Socket Handler Authentication Bypass

byMaloy Roy Orko -September 21, 2025

CVE ID : CVE-2025-10772 Published : Sept. 22, 2025, 1:08 a.m. | 54 minutes ago Description :…

Latest Vulnerabilities

CVE-2025-53692 - Sitecore Sitecore Experience Manager/Xperience Platform XSS

byMaloy Roy Orko -September 21, 2025

CVE ID : CVE-2025-53692 Published : Sept. 21, 2025, 9:10 p.m. | 52 minutes ago Description :…

Latest Vulnerabilities

CVE-2025-10757 - UTT 1200GW Buffer Overflow Vulnerability

byMaloy Roy Orko -September 20, 2025

CVE ID : CVE-2025-10757 Published : Sept. 21, 2025, 1:08 a.m. | 51 minutes ago Description :…

Latest Vulnerabilities

CVE-2025-10756 - UTT HiPER 840G Remote Buffer Overflow Vulnerability

byMaloy Roy Orko -September 20, 2025

CVE ID : CVE-2025-10756 Published : Sept. 21, 2025, 1:08 a.m. | 51 minutes ago Description :…

Latest Vulnerabilities

CVE-2025-40925 - Apache Starch Insecure Session ID Generation

byMaloy Roy Orko -September 20, 2025

CVE ID : CVE-2025-40925 Published : Sept. 20, 2025, 3:09 p.m. | 2 hours, 50 minutes ago Desc…

Latest Vulnerabilities

CVE-2025-10741 - Selleo Mentingo Unrestricted Upload Vulnerability

byMaloy Roy Orko -September 20, 2025

CVE ID : CVE-2025-10741 Published : Sept. 20, 2025, 3:09 p.m. | 2 hours, 50 minutes ago Desc…

Latest Vulnerabilities

CVE-2025-55910 - CMSEasy Arbitrary File Deletion Vulnerability

byMaloy Roy Orko -September 19, 2025

CVE ID : CVE-2025-55910 Published : Sept. 19, 2025, 4:15 p.m. | 1 hour, 39 minutes ago Descr…

Latest Vulnerabilities

CVE-2023-53432 - firewire: net: fix use after free in fwnet_finish_incoming_packet()

byMaloy Roy Orko -September 18, 2025

CVE ID : CVE-2023-53432 Published : Sept. 18, 2025, 4:15 p.m. | 1 hour, 36 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-10599 - itsourcecode Web-Based Internet Laboratory Management System login.php AuthenticateUser sql injection

byMaloy Roy Orko -September 17, 2025

CVE ID : CVE-2025-10599 Published : Sept. 17, 2025, 4:15 p.m. | 1 hour, 33 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-10598 - SourceCodester Pet Grooming Management Software search_product.php sql injection

byMaloy Roy Orko -September 17, 2025

CVE ID : CVE-2025-10598 Published : Sept. 17, 2025, 4:15 p.m. | 1 hour, 33 minutes ago Descr…

Latest Vulnerabilities

CVE-2023-53321 - wifi: mac80211_hwsim: drop short frames

byMaloy Roy Orko -September 16, 2025

CVE ID : CVE-2023-53321 Published : Sept. 16, 2025, 5:15 p.m. | 32 minutes ago Description :…

Latest Vulnerabilities

CVE-2023-53320 - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info()

byMaloy Roy Orko -September 16, 2025

CVE ID : CVE-2023-53320 Published : Sept. 16, 2025, 5:15 p.m. | 32 minutes ago Description :…

Latest Vulnerabilities

CVE-2025-52344 - Explorance Blue Cross Site Scripting (XSS)

byMaloy Roy Orko -September 15, 2025

CVE ID : CVE-2025-52344 Published : Sept. 15, 2025, 6:15 p.m. | 1 hour, 29 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-43791 - Liferay Portal Cross-Site Scripting (XSS) Vulnerability

byMaloy Roy Orko -September 15, 2025

CVE ID : CVE-2025-43791 Published : Sept. 15, 2025, 6:15 p.m. | 1 hour, 29 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-10403 - PHPGurukul Beauty Parlour Management System view-enquiry.php sql injection

byMaloy Roy Orko -September 14, 2025

CVE ID : CVE-2025-10403 Published : Sept. 14, 2025, 6:15 p.m. | 1 hour, 27 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-10401 - D-Link DIR-823x diag_ping command injection

byMaloy Roy Orko -September 14, 2025

CVE ID : CVE-2025-10401 Published : Sept. 14, 2025, 4:15 p.m. | 1 hour, 26 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-10371 - eCharge Hardy Barth Salia PLCC api.php unrestricted upload

byMaloy Roy Orko -September 13, 2025

CVE ID : CVE-2025-10371 Published : Sept. 13, 2025, 6:15 p.m. | 1 hour, 23 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-39793 - io_uring/memmap: cast nr_pages to size_t before shifting

byMaloy Roy Orko -September 12, 2025

CVE ID : CVE-2025-39793 Published : Sept. 12, 2025, 4:15 p.m. | 1 hour, 20 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-10320 - iteachyou Dreamer CMS updatePwd weak password

byMaloy Roy Orko -September 12, 2025

CVE ID : CVE-2025-10320 Published : Sept. 12, 2025, 4:15 p.m. | 1 hour, 20 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-39767 - LoongArch: Optimize module load time by optimizing PLT/GOT counting

byMaloy Roy Orko -September 11, 2025

CVE ID : CVE-2025-39767 Published : Sept. 11, 2025, 5:15 p.m. | 17 minutes ago Description :…

Latest Vulnerabilities

CVE-2025-20340 - Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability

byMaloy Roy Orko -September 10, 2025

CVE ID : CVE-2025-20340 Published : Sept. 10, 2025, 4:15 p.m. | 1 hour, 15 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-20159 - Cisco IOS XR Software Management Interface ACL Bypass Vulnerability

byMaloy Roy Orko -September 10, 2025

CVE ID : CVE-2025-20159 Published : Sept. 10, 2025, 4:15 p.m. | 1 hour, 15 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-59005 - WordPress Categorify plugin <= 1.0.7.5 - Broken Access Control vulnerability

byMaloy Roy Orko -September 09, 2025

CVE ID : CVE-2025-59005 Published : Sept. 9, 2025, 5:16 p.m. | 1 hour, 41 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-51586 - PrestaShop Information Disclosure Vulnerability

byMaloy Roy Orko -September 08, 2025

CVE ID : CVE-2025-51586 Published : Sept. 8, 2025, 5:15 p.m. | 1 hour, 39 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-10098 - PHPGurukul User Management System edit-user-profile.php sql injection

byMaloy Roy Orko -September 08, 2025

CVE ID : CVE-2025-10098 Published : Sept. 8, 2025, 5:15 p.m. | 1 hour, 39 minutes ago Descri…

Cyber Security Tools

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

byMaloy Roy Orko -September 08, 2025

Smuggler is a free software tool to detect and exploit -HTTP Smuggling- vulnerabilities. HTTP r…

Cyber Security Tools

IP OSINT Toolkit - an open-source IP Address Osint Tool

byMaloy Roy Orko -September 07, 2025

IP OSINT Toolkit is an open-source project made by Maloy Roy Orko to help in our cyber securit…

Cyber Security Tools

Metasploit-Installer-1.0

byMaloy Roy Orko -September 07, 2025

Metasploit-Installer-1.0 Is A Bash Script which is used for installing Metasploit in termux typ…

Latest Vulnerabilities

CVE-2025-10071 - Portabilis i-Educar cancelar-enturmacao-em-lote access control

byMaloy Roy Orko -September 07, 2025

CVE ID : CVE-2025-10071 Published : Sept. 7, 2025, 11:15 p.m. | 1 hour, 24 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-10070 - Portabilis i-Educar enturmacao-em-lote access control

byMaloy Roy Orko -September 07, 2025

CVE ID : CVE-2025-10070 Published : Sept. 7, 2025, 10:15 p.m. | 24 minutes ago Description :…

Latest Vulnerabilities

CVE-2023-31325 - Xilinx Zynq-7000 SOC Data Confidentiality and Integrity Vulnerability

byMaloy Roy Orko -September 06, 2025

CVE ID : CVE-2023-31325 Published : Sept. 6, 2025, 5:15 p.m. | 1 hour, 20 minutes ago Descri…

Latest Vulnerabilities

CVE-2023-31322 - Apache ASP Type Confusion Memory Corruption Vulnerability

byMaloy Roy Orko -September 06, 2025

CVE ID : CVE-2023-31322 Published : Sept. 6, 2025, 5:15 p.m. | 1 hour, 20 minutes ago Descri…

Latest Vulnerabilities

CVE-2024-0028 - Qualcomm Audio Service Bluetooth MAC Address Disclosure

byMaloy Roy Orko -September 05, 2025

CVE ID : CVE-2024-0028 Published : Sept. 5, 2025, 5:15 p.m. | 27 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-10013 - Portabilis i-Educar exportacao-para-o-seb access control

byMaloy Roy Orko -September 05, 2025

CVE ID : CVE-2025-10013 Published : Sept. 5, 2025, 4:15 p.m. | 1 hour, 27 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-26429 - Apache AppOps Permanent Denial of Service

byMaloy Roy Orko -September 04, 2025

CVE ID : CVE-2025-26429 Published : Sept. 4, 2025, 5:11 p.m. | 24 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-26428 - Samsung Android Lock Screen Bypass Vulnerability

byMaloy Roy Orko -September 04, 2025

CVE ID : CVE-2025-26428 Published : Sept. 4, 2025, 5:11 p.m. | 24 minutes ago Description : …

Cyber Security Tools

Sublist3r - Subdomain Enumeration Tool

byMaloy Roy Orko -September 04, 2025

Sublist3r is a tool designed in python and uses OSINT in order to enumerate subdomains of websi…

Latest Vulnerabilities

CVE-2025-9919 - "1000projects Beauty Parlour Management System SQL Injection"

byMaloy Roy Orko -September 03, 2025

CVE ID : CVE-2025-9919 Published : Sept. 3, 2025, 4:15 p.m. | 2 hours, 34 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-55373 - Beakon Application Privilege Escalation Vulnerability

byMaloy Roy Orko -September 02, 2025

CVE ID : CVE-2025-55373 Published : Sept. 2, 2025, 5:15 p.m. | 1 hour, 33 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-9788 - SourceCodester/Campcodes School Log Management System SQL Injection

byMaloy Roy Orko -September 01, 2025

CVE ID : CVE-2025-9788 Published : Sept. 1, 2025, 6:15 p.m. | 2 hours, 30 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-3586 - Liferay Portal Object Action Groovy Scripting Remote Code Execution

byMaloy Roy Orko -September 01, 2025

CVE ID : CVE-2025-3586 Published : Sept. 1, 2025, 6:15 p.m. | 2 hours, 30 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-9375 - Apache xmltodict XML Injection Vulnerability

byMaloy Roy Orko -September 01, 2025

CVE ID : CVE-2025-9375 Published : Sept. 1, 2025, 5:15 p.m. | 1 hour, 30 minutes ago Descrip…