Web Security Insights By Maloy Roy Orko

Latest Vulnerabilities

CVE-2025-35028 - HexStrike AI MCP Server Command Injection

byMaloy Roy Orko -November 30, 2025

CVE ID : CVE-2025-35028 Published : Nov. 30, 2025, 10:15 p.m. | 1 hour, 18 minutes ago Descr…

Latest Vulnerabilities

CVE-2025-13791 - Scada-LTS Project Import ZIPProjectManager.java Common.getHomeDir path traversal

byMaloy Roy Orko -November 30, 2025

CVE ID : CVE-2025-13791 Published : Nov. 30, 2025, 4:15 p.m. | 1 hour, 17 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-13782 - taosir WTCMS SlideController SlideController.class.php delete sql injection

byMaloy Roy Orko -November 29, 2025

CVE ID : CVE-2025-13782 Published : Nov. 30, 2025, 3:02 a.m. | 29 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-66036 - Retro is vulnerable to XSS vulnerability in input handling component

byMaloy Roy Orko -November 28, 2025

CVE ID : CVE-2025-66036 Published : Nov. 29, 2025, 1:14 a.m. | 1 hour, 5 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-13683 - Devolutions Server and Remote Desktop Manager Credential Exposure

byMaloy Roy Orko -November 28, 2025

CVE ID : CVE-2025-13683 Published : Nov. 28, 2025, 5:16 p.m. | 1 hour, 3 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-13338 - Apache HTTP Server Cross-Site Scripting

byMaloy Roy Orko -November 27, 2025

CVE ID : CVE-2025-13338 Published : Nov. 27, 2025, 11:15 p.m. | 1 hour, 3 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-12559 - Information Disclosure in Common Teams API

byMaloy Roy Orko -November 27, 2025

CVE ID : CVE-2025-12559 Published : Nov. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-3747 - Apache Struts Remote Code Execution

byMaloy Roy Orko -November 26, 2025

CVE ID : CVE-2025-3747 Published : Nov. 26, 2025, 4:15 p.m. | 2 hours, 3 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-60739 - Ilevia EVE X1 Server Firmware CSRF

byMaloy Roy Orko -November 25, 2025

CVE ID : CVE-2025-60739 Published : Nov. 25, 2025, 4:16 p.m. | 2 hours, 2 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-56401 - ZIRA Group WBRM SQL Injection

byMaloy Roy Orko -November 24, 2025

CVE ID : CVE-2025-56401 Published : Nov. 24, 2025, 4:15 p.m. | 2 hours, 2 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-54515 - Arm Versal Adaptive SoC PSCI Secure State Spoofing

byMaloy Roy Orko -November 23, 2025

CVE ID : CVE-2025-54515 Published : Nov. 23, 2025, 5:15 p.m. | 1 hour, 2 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-13544 - ashraf-kabir travel-agency customer_register.php unrestricted upload

byMaloy Roy Orko -November 23, 2025

CVE ID : CVE-2025-13544 Published : Nov. 23, 2025, 9:15 a.m. | 1 hour, 2 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-12541 - "Apache Struts Remote Code Execution Vulnerability"

byMaloy Roy Orko -November 22, 2025

CVE ID : CVE-2025-12541 Published : Nov. 22, 2025, 11:15 p.m. | 1 hour, 2 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-13470 - RNP 0.18.0 Vulnerable PKESK session keys

byMaloy Roy Orko -November 21, 2025

CVE ID : CVE-2025-13470 Published : Nov. 21, 2025, 5:15 p.m. | 1 hour, 38 minutes ago Descri…

Latest Vulnerabilities

CVE-2024-31405 - Apache HTTP Server Unauthenticated Remote Code Execution

byMaloy Roy Orko -November 20, 2025

CVE ID : CVE-2024-31405 Published : Nov. 20, 2025, 4:15 p.m. | 1 hour, 58 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-64521 - authentik deactivated service accounts can authenticate to OAuth

byMaloy Roy Orko -November 19, 2025

CVE ID : CVE-2025-64521 Published : Nov. 19, 2025, 5:15 p.m. | 57 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-34324 - GoSign Desktop < 2.4.1 Insecure Update Mechanism RCE

byMaloy Roy Orko -November 18, 2025

CVE ID : CVE-2025-34324 Published : Nov. 18, 2025, 5:16 p.m. | 51 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-65083 - GoSign Desktop Proxy Server TLS Certificate Validation Bypass

byMaloy Roy Orko -November 17, 2025

CVE ID : CVE-2025-65083 Published : Nov. 17, 2025, 4:15 p.m. | 1 hour, 43 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-13254 - projectworlds Advanced Library Management System add_member.php sql injection

byMaloy Roy Orko -November 16, 2025

CVE ID : CVE-2025-13254 Published : Nov. 17, 2025, 1:15 a.m. | 43 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-13252 - shsuishang ShopSuite ModulithShop RSA/OAuth2/Database hard-coded credentials

byMaloy Roy Orko -November 16, 2025

CVE ID : CVE-2025-13252 Published : Nov. 16, 2025, 11:15 p.m. | 43 minutes ago Description :…

Latest Vulnerabilities

CVE-2025-13208 - FantasticLBP Hotels Server hotelList.php sql injection

byMaloy Roy Orko -November 15, 2025

CVE ID : CVE-2025-13208 Published : Nov. 15, 2025, 6:15 p.m. | 1 hour, 43 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-13201 - code-projects Simple Cafe Ordering System login.php sql injection

byMaloy Roy Orko -November 15, 2025

CVE ID : CVE-2025-13201 Published : Nov. 15, 2025, 4:15 p.m. | 1 hour, 43 minutes ago Descri…

Latest Vulnerabilities

CVE-2024-42749 - Alto CMS Cross Site Scripting Vulnerability

byMaloy Roy Orko -November 14, 2025

CVE ID : CVE-2024-42749 Published : Nov. 14, 2025, 4:15 p.m. | 1 hour, 42 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-60689 - Linksys E1200 HTTPd Command Injection Vulnerability

byMaloy Roy Orko -November 13, 2025

CVE ID : CVE-2025-60689 Published : Nov. 13, 2025, 4:15 p.m. | 1 hour, 42 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-11366 - N-central Authentication bypass via path traversal

byMaloy Roy Orko -November 12, 2025

CVE ID : CVE-2025-11366 Published : Nov. 12, 2025, 4:15 p.m. | 1 hour, 38 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-30509 - Intel QuickAssist Technology Ring 3 Escalation of Privilege Vulnerability

byMaloy Roy Orko -November 11, 2025

CVE ID : CVE-2025-30509 Published : Nov. 11, 2025, 4:50 p.m. | 20 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-30506 - Intel Driver and Support Assistant Uncontrolled Search Path Privilege Escalation Vulnerability

byMaloy Roy Orko -November 11, 2025

CVE ID : CVE-2025-30506 Published : Nov. 11, 2025, 4:50 p.m. | 20 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-12924 - rymcu forest BankController.java GlobalResult authorization

byMaloy Roy Orko -November 09, 2025

CVE ID : CVE-2025-12924 Published : Nov. 10, 2025, 1:02 a.m. | 44 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-12920 - qianfox FoxCMS Product.php edit cross site scripting

byMaloy Roy Orko -November 09, 2025

CVE ID : CVE-2025-12920 Published : Nov. 9, 2025, 11:15 p.m. | 30 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-12919 - EverShop Order Order.resolvers.js resource injection

byMaloy Roy Orko -November 09, 2025

CVE ID : CVE-2025-12919 Published : Nov. 9, 2025, 8:15 p.m. | 1 hour, 30 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-12916 - Sangfor Operation and Maintenance Security Management System Frontend portal_login command injection

byMaloy Roy Orko -November 08, 2025

CVE ID : CVE-2025-12916 Published : Nov. 9, 2025, 12:15 a.m. | 1 hour, 29 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-12914 - aaPanel BaoTa Backend database sql injection

byMaloy Roy Orko -November 08, 2025

CVE ID : CVE-2025-12914 Published : Nov. 8, 2025, 10:15 p.m. | 1 hour, 29 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-12913 - code-projects Responsive Hotel Site roomdel.php sql injection

byMaloy Roy Orko -November 08, 2025

CVE ID : CVE-2025-12913 Published : Nov. 8, 2025, 8:15 p.m. | 1 hour, 28 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-63686 - GuoMinJim PersonManage Arbitrary File Download Vulnerability

byMaloy Roy Orko -November 07, 2025

CVE ID : CVE-2025-63686 Published : Nov. 7, 2025, 4:15 p.m. | 1 hour, 25 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-62066 - WordPress Revolution theme < 2.5.8 - Local File Inclusion vulnerability

byMaloy Roy Orko -November 06, 2025

CVE ID : CVE-2025-62066 Published : Nov. 6, 2025, 4:16 p.m. | 1 hour, 21 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-61304 - "Dynatrace ActiveGate Ping Extension OS Command Injection"

byMaloy Roy Orko -November 05, 2025

CVE ID : CVE-2025-61304 Published : Nov. 5, 2025, 4:15 p.m. | 1 hour, 18 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-61945 - Missing Authentication for Critical Function in Radiometrics VizAir

byMaloy Roy Orko -November 04, 2025

CVE ID : CVE-2025-61945 Published : Nov. 4, 2025, 4:10 p.m. | 25 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-12607 - itsourcecode Online Loan Management System manage_payment.php sql injection

byMaloy Roy Orko -November 02, 2025

CVE ID : CVE-2025-12607 Published : Nov. 3, 2025, 12:02 a.m. | 1 hour, 26 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-12605 - itsourcecode Online Loan Management System manage_loan.php sql injection

byMaloy Roy Orko -November 02, 2025

CVE ID : CVE-2025-12605 Published : Nov. 2, 2025, 11:02 p.m. | 25 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-12604 - itsourcecode Online Loan Management System load_fields.php sql injection

byMaloy Roy Orko -November 02, 2025

CVE ID : CVE-2025-12604 Published : Nov. 2, 2025, 10:15 p.m. | 1 hour, 12 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-12599 - Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)

byMaloy Roy Orko -November 01, 2025

CVE ID : CVE-2025-12599 Published : Nov. 1, 2025, 6:39 p.m. | 44 minutes ago Description : …