Web Security Insights By Maloy Roy Orko

Latest Vulnerabilities

CVE-2025-68618 - Magick's failure to limit the depth of SVG file reads caused a DoS attack.

byMaloy Roy Orko -December 30, 2025

CVE ID : CVE-2025-68618 Published : Dec. 30, 2025, 4:14 p.m. | 1 hour, 5 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-57462 - Machsol Machpanel Reflected XSS

byMaloy Roy Orko -December 29, 2025

CVE ID : CVE-2025-57462 Published : Dec. 29, 2025, 3:16 p.m. | 2 hours ago Description : Re…

Latest Vulnerabilities

CVE-2025-15145 - SohuTV CacheCloud TotalManageController.java doTotalList cross site scripting

byMaloy Roy Orko -December 28, 2025

CVE ID : CVE-2025-15145 Published : Dec. 28, 2025, 5:16 p.m. | 1 hour, 57 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-14177 - Information Leak of Memory in getimagesize

byMaloy Roy Orko -December 27, 2025

CVE ID : CVE-2025-14177 Published : Dec. 27, 2025, 8:15 p.m. | 55 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-15109 - jackq XCMS upload.php unrestricted upload

byMaloy Roy Orko -December 27, 2025

CVE ID : CVE-2025-15109 Published : Dec. 27, 2025, 6:32 p.m. | 39 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-61914 - n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox

byMaloy Roy Orko -December 26, 2025

CVE ID : CVE-2025-61914 Published : Dec. 26, 2025, 10:15 p.m. | 52 minutes ago Description :…

Latest Vulnerabilities

CVE-2024-42718 - Croogo CMS Path Traversal Vulnerability

byMaloy Roy Orko -December 26, 2025

CVE ID : CVE-2024-42718 Published : Dec. 26, 2025, 5:15 p.m. | 1 hour, 52 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-15084 - youlaitech youlai-mall Order Payment OrderController.java orderService.payOrder access control

byMaloy Roy Orko -December 25, 2025

CVE ID : CVE-2025-15084 Published : Dec. 25, 2025, 7:15 p.m. | 44 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-15082 - TOZED ZLT M30s Web Management proc_post information disclosure

byMaloy Roy Orko -December 25, 2025

CVE ID : CVE-2025-15082 Published : Dec. 25, 2025, 5:15 p.m. | 44 minutes ago Description : …

Latest Vulnerabilities

CVE-2024-35322 - MyNET Reflected Cross-Site Scripting (XSS) Vulnerability

byMaloy Roy Orko -December 24, 2025

CVE ID : CVE-2024-35322 Published : Dec. 24, 2025, 4:15 p.m. | 1 hour, 41 minutes ago Descri…

Latest Vulnerabilities

CVE-2024-10398 - Apache Struts Deserialization RCE

byMaloy Roy Orko -December 23, 2025

CVE ID : CVE-2024-10398 Published : Dec. 23, 2025, 4:16 p.m. | 1 hour, 40 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-10021 - Open Design Alliance Drawings SDK Uninitialized Variable Use leading to Denial of Service and Potential Arbitrary Code Execution

byMaloy Roy Orko -December 22, 2025

CVE ID : CVE-2025-10021 Published : Dec. 22, 2025, 4:15 p.m. | 1 hour, 40 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-15002 - SeaCMS mysqli.class.php sql injection

byMaloy Roy Orko -December 21, 2025

CVE ID : CVE-2025-15002 Published : Dec. 21, 2025, 11:15 p.m. | 40 minutes ago Description :…

Latest Vulnerabilities

CVE-2025-12700 - Apache Struts Remote Code Execution

byMaloy Roy Orko -December 20, 2025

CVE ID : CVE-2025-12700 Published : Dec. 20, 2025, 11:15 p.m. | 40 minutes ago Description :…

Latest Vulnerabilities

CVE-2025-34290 - Versa SASE Client for Windows < 7.9.5 Arbitrary Folder Deletion Leading to Local Privilege Escalation

byMaloy Roy Orko -December 20, 2025

CVE ID : CVE-2025-34290 Published : Dec. 20, 2025, 8:15 p.m. | 1 hour, 40 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-66906 - Turms Admin API CSRF Privilege Escalation

byMaloy Roy Orko -December 19, 2025

CVE ID : CVE-2025-66906 Published : Dec. 19, 2025, 4:15 p.m. | 1 hour, 39 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-14823 - Certificate Signing Extension Returns Encrypted Values

byMaloy Roy Orko -December 18, 2025

CVE ID : CVE-2025-14823 Published : Dec. 18, 2025, 4:15 p.m. | 1 hour, 39 minutes ago Descri…

Latest Vulnerabilities

CVE-2024-29370 - "Python-Jose: JSON Web Encryption Denial-of-Service Vulnerability"

byMaloy Roy Orko -December 17, 2025

CVE ID : CVE-2024-29370 Published : Dec. 17, 2025, 4:16 p.m. | 1 hour, 38 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-68322 - parisc: Avoid crash due to unaligned access in unwinder

byMaloy Roy Orko -December 16, 2025

CVE ID : CVE-2025-68322 Published : Dec. 16, 2025, 4:16 p.m. | 1 hour, 38 minutes ago Descri…

Latest Vulnerabilities

CVE-2024-44598 - FNT Command Code Execution Vulnerability

byMaloy Roy Orko -December 15, 2025

CVE ID : CVE-2024-44598 Published : Dec. 15, 2025, 4:15 p.m. | 1 hour, 38 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-14667 - itsourcecode COVID Tracking System page sql injection

byMaloy Roy Orko -December 14, 2025

CVE ID : CVE-2025-14667 Published : Dec. 14, 2025, 4:15 p.m. | 1 hour, 38 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-67863 - Apache HTTP Server Unvalidated User-Input

byMaloy Roy Orko -December 13, 2025

CVE ID : CVE-2025-67863 Published : Dec. 13, 2025, 4:16 p.m. | 1 hour, 36 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-13733 - BuhoNTFS 1.3.2 - Local Privilege Escalation

byMaloy Roy Orko -December 12, 2025

CVE ID : CVE-2025-13733 Published : Dec. 12, 2025, 4:15 p.m. | 1 hour, 37 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-55313 - Foxit PDF and Editor Arbitrary Code Execution Vulnerability

byMaloy Roy Orko -December 11, 2025

CVE ID : CVE-2025-55313 Published : Dec. 11, 2025, 4:16 p.m. | 1 hour, 36 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-34416 - MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPO.DLL

byMaloy Roy Orko -December 10, 2025

CVE ID : CVE-2025-34416 Published : Dec. 10, 2025, 4:16 p.m. | 1 hour, 36 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-63739 - Xinhu Rainrock RockOA PHP Configuration File Modification

byMaloy Roy Orko -December 09, 2025

CVE ID : CVE-2025-63739 Published : Dec. 9, 2025, 5:15 p.m. | 36 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-48621 - Android DefaultTransitionHandler Tapjacking Vulnerability

byMaloy Roy Orko -December 08, 2025

CVE ID : CVE-2025-48621 Published : Dec. 8, 2025, 5:16 p.m. | 36 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-14197 - Verysync 微力同步 Web Administration f96956469e7be39d information disclosure

byMaloy Roy Orko -December 07, 2025

CVE ID : CVE-2025-14197 Published : Dec. 7, 2025, 4:15 p.m. | 1 hour, 36 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-40267 - io_uring/rw: ensure allocated iovec gets cleared for early failure

byMaloy Roy Orko -December 06, 2025

CVE ID : CVE-2025-40267 Published : Dec. 6, 2025, 10:15 p.m. | 1 hour, 35 minutes ago Descri…

Latest Vulnerabilities

CVE-2025-14141 - UTT 进取 520W formArpBindConfig strcpy buffer overflow

byMaloy Roy Orko -December 06, 2025

CVE ID : CVE-2025-14141 Published : Dec. 6, 2025, 4:15 p.m. | 1 hour, 35 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-66511 - Nextcloud Calendar app used predictable proposal participant tokens

byMaloy Roy Orko -December 05, 2025

CVE ID : CVE-2025-66511 Published : Dec. 5, 2025, 5:16 p.m. | 32 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-40259 - scsi: sg: Do not sleep in atomic context

byMaloy Roy Orko -December 04, 2025

CVE ID : CVE-2025-40259 Published : Dec. 4, 2025, 4:16 p.m. | 1 hour, 29 minutes ago Descrip…

Latest Vulnerabilities

CVE-2025-7044 - Privilege Escalation in MAAS via Websocket Request Manipulation

byMaloy Roy Orko -December 03, 2025

CVE ID : CVE-2025-7044 Published : Dec. 3, 2025, 4:16 p.m. | 1 hour, 26 minutes ago Descript…

Latest Vulnerabilities

CVE-2025-13631 - Google Chrome Mac Privilege Escalation Vulnerability

byMaloy Roy Orko -December 02, 2025

CVE ID : CVE-2025-13631 Published : Dec. 2, 2025, 7:15 p.m. | 23 minutes ago Description : …

Latest Vulnerabilities

CVE-2025-3500 - Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation

byMaloy Roy Orko -December 01, 2025

CVE ID : CVE-2025-3500 Published : Dec. 1, 2025, 4:15 p.m. | 1 hour, 19 minutes ago Descript…