Web Security Insights By Maloy Roy Orko

Latest Vulnerabilities

CVE-2025-29270 - Deep Sea Electronics DSE855 Unauthenticated Remote Command Execution

byMaloy Roy Orko -October 31, 2025

CVE ID : CVE-2025-29270 Published : Oct. 31, 2025, 4:15 p.m. | 1 hour, 45 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-12516 - Lack of Graceful Error Handling - HTTP 5xx Error

byMaloy Roy Orko -October 30, 2025

CVE ID : CVE-2025-12516 Published : Oct. 30, 2025, 4:15 p.m. | 1 hour, 43 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-60542 - TypeORM SQL Injection

byMaloy Roy Orko -October 29, 2025

CVE ID : CVE-2025-60542 Published : Oct. 29, 2025, 4:15 p.m. | 1 hour, 40 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-34294 - Wazuh File Integrity Monitoring (FIM) & Active Response Arbitrary File Deletion as SYSTEM

byMaloy Roy Orko -October 28, 2025

CVE ID : CVE-2025-34294 Published : Oct. 28, 2025, 4:15 p.m. | 1 hour, 38 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-60425 - Nagios Fusion Session Hijacking Vulnerability

byMaloy Roy Orko -October 27, 2025

CVE ID : CVE-2025-60425 Published : Oct. 27, 2025, 4:15 p.m. | 1 hour, 6 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-60424 - Nagios Fusion Authentication Bypass

byMaloy Roy Orko -October 27, 2025

CVE ID : CVE-2025-60424 Published : Oct. 27, 2025, 4:15 p.m. | 1 hour, 6 minutes ago Descrip…

Latest Vulnerabilities

CVE-2023-49440 - AhnLab EPP SQL Injection Vulnerability

byMaloy Roy Orko -October 27, 2025

CVE ID : CVE-2023-49440 Published : Oct. 27, 2025, 4:15 p.m. | 1 hour, 6 minutes ago Descrip…

Latest Vulnerabilities

CVE-2023-37749 - HubSpot Unauthenticated Data Disclosure Vulnerability

byMaloy Roy Orko -October 27, 2025

CVE ID : CVE-2023-37749 Published : Oct. 27, 2025, 4:15 p.m. | 1 hour, 6 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-12275 - Mail Configuration File Manipulation + Command Execution

byMaloy Roy Orko -October 26, 2025

CVE ID : CVE-2025-12275 Published : Oct. 26, 2025, 5:15 p.m. | 29 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-8709 - SQL Injection in langchain-ai/langchain

byMaloy Roy Orko -October 26, 2025

CVE ID : CVE-2025-8709 Published : Oct. 26, 2025, 6:15 a.m. | 1 hour, 27 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-55757 - Extension - virtuemart.net - XSS in VirtueMart component 1.0.0 - 4.4.10 for Joomla

byMaloy Roy Orko -October 25, 2025

CVE ID : CVE-2025-55757 Published : Oct. 25, 2025, 7:15 p.m. | 26 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-60729 - PerfreeBlog Arbitrary File Read Vulnerability

byMaloy Roy Orko -October 24, 2025

CVE ID : CVE-2025-60729 Published : Oct. 24, 2025, 6:15 p.m. | 1 hour, 24 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-61413 - Piranha CMS Stored XSS

byMaloy Roy Orko -October 23, 2025

CVE ID : CVE-2025-61413 Published : Oct. 23, 2025, 6:16 p.m. | 33 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-57240 - "17gz International Student Service System XSS Injection"

byMaloy Roy Orko -October 23, 2025

CVE ID : CVE-2025-57240 Published : Oct. 23, 2025, 6:16 p.m. | 34 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-11958 - Devolutions Server Denial of Service (DoS) Vulnerability

byMaloy Roy Orko -October 22, 2025

CVE ID : CVE-2025-11958 Published : Oct. 22, 2025, 5:15 p.m. | 1 hour, 32 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-11957 - Devolutions Server Basic User Privilege Escalation Vulnerability

byMaloy Roy Orko -October 22, 2025

CVE ID : CVE-2025-11957 Published : Oct. 22, 2025, 5:15 p.m. | 1 hour, 32 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-11534 - Authentication Bypass Using an Alternate Path or Channel in Raisecomm RAX701-GC Series

byMaloy Roy Orko -October 21, 2025

CVE ID : CVE-2025-11534 Published : Oct. 21, 2025, 5:15 p.m. | 1 hour, 29 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-9574 - Missing Authentication Vulnerability

byMaloy Roy Orko -October 20, 2025

CVE ID : CVE-2025-9574 Published : Oct. 20, 2025, 5:15 p.m. | 1 hour, 27 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-11940 - LibreWolf Installer setup.nsi uncontrolled search path

byMaloy Roy Orko -October 19, 2025

CVE ID : CVE-2025-11940 Published : Oct. 19, 2025, 9:15 a.m. | 1 hour, 23 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-11939 - ChurchCRM Backup Restore RestoreJob.php path traversal

byMaloy Roy Orko -October 19, 2025

CVE ID : CVE-2025-11939 Published : Oct. 19, 2025, 8:15 a.m. | 23 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-11938 - ChurchCRM setup.php deserialization

byMaloy Roy Orko -October 19, 2025

CVE ID : CVE-2025-11938 Published : Oct. 19, 2025, 8:15 a.m. | 23 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-62672 - Rplay Denial of Service and Code Execution Vulnerability

byMaloy Roy Orko -October 18, 2025

CVE ID : CVE-2025-62672 Published : Oct. 19, 2025, 1:15 a.m. | 1 hour, 22 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-62171 - ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems

byMaloy Roy Orko -October 17, 2025

CVE ID : CVE-2025-62171 Published : Oct. 17, 2025, 5:15 p.m. | 1 hour, 19 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-58051 - Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table

byMaloy Roy Orko -October 16, 2025

CVE ID : CVE-2025-58051 Published : Oct. 16, 2025, 5:15 p.m. | 1 hour, 17 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-10576 - Sound Research SECOMNService Escalation of Privilege

byMaloy Roy Orko -October 15, 2025

CVE ID : CVE-2025-10576 Published : Oct. 15, 2025, 5:15 p.m. | 1 hour, 14 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-59277 - Windows Authentication Elevation of Privilege Vulnerability

byMaloy Roy Orko -October 14, 2025

CVE ID : CVE-2025-59277 Published : Oct. 14, 2025, 5:16 p.m. | 1 hour, 12 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-59261 - Windows Graphics Component Elevation of Privilege Vulnerability

byMaloy Roy Orko -October 14, 2025

CVE ID : CVE-2025-59261 Published : Oct. 14, 2025, 5:16 p.m. | 1 hour, 12 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-59260 - Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability

byMaloy Roy Orko -October 14, 2025

CVE ID : CVE-2025-59260 Published : Oct. 14, 2025, 5:16 p.m. | 1 hour, 12 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-11695 - Configuration may unexpectedly disable certificate validation

byMaloy Roy Orko -October 13, 2025

CVE ID : CVE-2025-11695 Published : Oct. 13, 2025, 5:15 p.m. | 1 hour, 8 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-62243 - Liferay Portal and DXP Insecure Direct Object Reference (IDOR) and Permission Bypass Vulnerability

byMaloy Roy Orko -October 13, 2025

CVE ID : CVE-2025-62243 Published : Oct. 13, 2025, 5:14 p.m. | 1 hour, 9 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-11638 - Tomofun Furbo 360/Furbo Mini Bluetooth denial of service

byMaloy Roy Orko -October 12, 2025

CVE ID : CVE-2025-11638 Published : Oct. 12, 2025, 5:15 p.m. | 1 hour, 5 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-11637 - Tomofun Furbo 360 Audio race condition

byMaloy Roy Orko -October 12, 2025

CVE ID : CVE-2025-11637 Published : Oct. 12, 2025, 5:15 p.m. | 1 hour, 5 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-11608 - code-projects E-Banking System POST Parameter register.php sql injection

byMaloy Roy Orko -October 11, 2025

CVE ID : CVE-2025-11608 Published : Oct. 11, 2025, 5:15 p.m. | 1 hour, 3 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-11607 - harry0703 MoneyPrinterTurbo API Endpoint music.py upload_music path traversal

byMaloy Roy Orko -October 11, 2025

CVE ID : CVE-2025-11607 Published : Oct. 11, 2025, 5:15 p.m. | 1 hour, 3 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-60307 - code-projects Computer Laboratory System 1.0 has a

byMaloy Roy Orko -October 10, 2025

CVE ID : CVE-2025-60307 Published : Oct. 10, 2025, 4:15 p.m. | 2 hours, 1 minute ago Descrip…

Latest Vulnerabilities

CVE-2025-60305 - SourceCodester Online Student Clearance System Privilege Escalation Vulnerability

byMaloy Roy Orko -October 10, 2025

CVE ID : CVE-2025-60305 Published : Oct. 10, 2025, 4:15 p.m. | 2 hours, 1 minute ago Descrip…

Latest Vulnerabilities

CVE-2025-59987 - Junos Space: The arbitrary device search field is vulnerable to reflected cross-site script injection

byMaloy Roy Orko -October 09, 2025

CVE ID : CVE-2025-59987 Published : Oct. 9, 2025, 5:16 p.m. | 59 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-60318 - SourceCodester Pet Grooming Management Software XSS

byMaloy Roy Orko -October 08, 2025

CVE ID : CVE-2025-60318 Published : Oct. 8, 2025, 4:15 p.m. | 1 hour, 54 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-59303 - HAProxy Kubernetes Ingress Controller Config Snippet Token Secret Exposure

byMaloy Roy Orko -October 08, 2025

CVE ID : CVE-2025-59303 Published : Oct. 8, 2025, 4:15 p.m. | 1 hour, 54 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-11401 - SourceCodester Hotel and Lodge Management System save_curr.php sql injection

byMaloy Roy Orko -October 07, 2025

CVE ID : CVE-2025-11401 Published : Oct. 7, 2025, 5:15 p.m. | 52 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-36355 - IBM Security Verify Access code execution

byMaloy Roy Orko -October 06, 2025

CVE ID : CVE-2025-36355 Published : Oct. 6, 2025, 5:16 p.m. | 1 hour, 19 minutes ago Descrip…

Cyber Security Tools

Searpy - Search Engine Toolkit

byMaloy Roy Orko -October 05, 2025

Searpy tool is an automated and open-source cyber-security tool developed in python language wh…

Latest Vulnerabilities

CVE-2025-11295 - Belkin F9K1015 formPPPoESetup buffer overflow

byMaloy Roy Orko -October 05, 2025

CVE ID : CVE-2025-11295 Published : Oct. 5, 2025, 5:15 p.m. | 1 hour, 17 minutes ago Descrip…

Latest Vulnerabilities

CVE-2023-53592 - gpio: sifive: Fix refcount leak in sifive_gpio_probe

byMaloy Roy Orko -October 04, 2025

CVE ID : CVE-2023-53592 Published : Oct. 4, 2025, 4:15 p.m. | 1 hour, 27 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-55971 - TCL Smart TV SSRF Vulnerability

byMaloy Roy Orko -October 03, 2025

CVE ID : CVE-2025-55971 Published : Oct. 3, 2025, 4:16 p.m. | 1 hour, 26 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-34226 - OpenPLC Runtime v3 Persistent DoS

byMaloy Roy Orko -October 03, 2025

CVE ID : CVE-2025-34226 Published : Oct. 3, 2025, 4:16 p.m. | 1 hour, 26 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-56161 - YOSHOP Unauthenticated Comment Information Disclosure Vulnerability

byMaloy Roy Orko -October 02, 2025

CVE ID : CVE-2025-56161 Published : Oct. 2, 2025, 4:15 p.m. | 1 hour, 25 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-56154 - "htmly XSS Reflected"

byMaloy Roy Orko -October 02, 2025

CVE ID : CVE-2025-56154 Published : Oct. 2, 2025, 4:15 p.m. | 1 hour, 25 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-56515 - Fiora Chat Application SVG File Upload Code Execution Vulnerability

byMaloy Roy Orko -October 01, 2025

CVE ID : CVE-2025-56515 Published : Oct. 1, 2025, 4:15 p.m. | 1 hour, 51 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-56514 - Fiora Chat Application SVG File XSS Vulnerability

byMaloy Roy Orko -October 01, 2025

CVE ID : CVE-2025-56514 Published : Oct. 1, 2025, 4:15 p.m. | 1 hour, 51 minutes ago Descrip…