Author: Angelo Barbosa

CVE-2024-5174 | Gliffy Online up to 4.14.0-6 reset improper authentication

A vulnerability was found in Gliffy Online up to 4.14.0-6. It has been declared as critical. Affected by this vulnerability is the function reset. The manipulation leads to improper authentication. This vulnerability is known as CVE-2024-5174. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2025-0545 | Tekrom T-Soft E-Commerce up to 4 cross site scripting

A vulnerability was found in Tekrom T-Soft E-Commerce up to 4. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-0545. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2025-1488 | wpo365 WPO365 Plugin up to 3.2 on WordPress redirect_to

A vulnerability has been found in wpo365 WPO365 Plugin up to 3.2 on WordPress and classified as problematic. This vulnerability affects unknown code. The manipulation of the argument redirect_to leads to open redirect. This vulnerability was named CVE-2025-1488. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-52926 | Linux Kernel up to 6.1.121/6.6.67 io_rw_done use after free

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.121/6.6.67. This affects the function io_rw_done. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2023-52926. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected...

Read More