2.3

CVSS4.0

CVE-2025-61906 - Opencast's editor accidentally publishes videos/overwrites publications #1626

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, in some situations, Opencast's editor may publish a video without notifying the user. This may lead to users accidentally publishing media not meant for publis…

📅 Published: Oct. 8, 2025, 6:06 p.m. 🔄 Last Modified: Oct. 8, 2025, 6:06 p.m.

5.1

CVSS4.0

CVE-2025-61788 - Opencast Paella Player 7 vulnerable to Cross-Site-Scripting

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, the paella would include and render some user inputs (metadata like title, description, etc.) unfiltered and unmodified. The vulnerability allows attackers to …

📅 Published: Oct. 8, 2025, 6:03 p.m. 🔄 Last Modified: Oct. 8, 2025, 6:03 p.m.

2

CVSS4.0

CVE-2025-11489 - wonderwhy-er DesktopCommanderMCP filesystem.ts isPathAllowed symlink

A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13. This vulnerability affects the function isPathAllowed of the file src/tools/filesystem.ts. The manipulation leads to symlink following. The attack can only be performed from a local environment. The attack'…

📅 Published: Oct. 8, 2025, 6:02 p.m. 🔄 Last Modified: Oct. 8, 2025, 6:02 p.m.

6.9

CVSS4.0

CVE-2025-11488 - D-Link DIR-852 HNAP1 command injection

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerability …

📅 Published: Oct. 8, 2025, 6:02 p.m. 🔄 Last Modified: Oct. 8, 2025, 6:02 p.m.

5.3

CVSS4.0

CVE-2025-11487 - SourceCodester Farm Management System uploadProduct.php sql injection

A security flaw has been discovered in SourceCodester Farm Management System 1.0. Affected by this issue is some unknown functionality of the file /uploadProduct.php. Performing manipulation of the argument Type results in sql injection. The attack may be initiated remotely. The exploit has been re…

📅 Published: Oct. 8, 2025, 5:32 p.m. 🔄 Last Modified: Oct. 8, 2025, 5:32 p.m.
Load More Vulnerability
avatar

Mehmet Ince

@mdisec

CVE stats coming here

avatar

Nuri Çilengir

@ncilengir

CVE stats coming here

avatar

@aydinnyunus

CVE stats coming here

avatar

Seyit Sigirci

@h3xecute

CVE stats coming here

avatar

Ali İltizar

@iltosec

CVE stats coming here

avatar

@b3rsec

CVE stats coming here

avatar

@arslan

CVE stats coming here

avatar

Mücahit İç

@mucahic

CVE stats coming here

avatar

Muhammed Emir ARSLAN

@MrM3ARS

CVE stats coming here