A vulnerability, which was classified as critical, was found in IBM MQ 9.3/9.4. Affected is an unknown function of the component Queue. The manipulation leads to improper handling of missing values.
This vulnerability is traded as CVE-2025-23225. It i…
A vulnerability, which was classified as very critical, has been found in IBM MQ 9.3/9.4. This issue affects some unknown processing. The manipulation leads to improper neutralization of escape, meta, or control sequences.
The identification of this v…
A vulnerability classified as problematic was found in manoj_rana91986 MK Google Directions Plugin up to 3.1 on WordPress. This vulnerability affects the function MKGD of the component Shortcode Handler. The manipulation leads to cross site scripting.
…
A vulnerability classified as problematic has been found in pickplugins Post Grid and Gutenberg Blocks Plugin up to 2.3.6 on WordPress. This affects an unknown part of the file /wp-json/post-grid/v2/get_users of the component REST API. The manipulation…
A vulnerability was found in IBM Cognos Analytics up to 11.2.4 FP5. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument deficon leads to relative path traversal.
This vulnerability i…
A vulnerability was found in IBM Cognos Analytics up to 11.2.4 FP5/12.0.4. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component URL Handler. The manipulation leads to path traversal: ‘/../filedir’.
This vulnerability is known as CVE-2025-0823. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
I want to give good illustrations for CWEs in C/C++. I define "good" as follows:
Most of the time when we want to illustrate stack overflow (CWE-121), we will show the following code (taken from https://cwe.mitre.org/data/definit…
Malicious Google ads are redirecting PayPal users looking for assistance to fraudulent pay links embedding scammers’ phone numbers.
A vulnerability was found in XIQ-SE up to 24.2.10. It has been classified as problematic. Affected is an unknown function of the component Admin Password Handler. The manipulation leads to Privilege Escalation.
This vulnerability is traded as CVE-2024…
A vulnerability was found in Vue Vben Admin 2.10.1 and classified as critical. This issue affects some unknown processing. The manipulation leads to hard-coded credentials.
The identification of this vulnerability is CVE-2025-25570. The attack needs t…
