NVD disclosure day
CVE-2012-10027
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A WordPress plugin, WP-Property, has a serious flaw allowing attackers to upload malicious files and take over your website without needing a password. This could let them run any code they want on your server.
CVE-2025-54253
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Adobe Experience Manager Forms is affected by a misconfiguration vulnerability that could allow an attacker to execute arbitrary code. This impacts systems and data, presenting a business risk due to potential unauthorized code execution and security bypass.
CVE-2025-54948
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Trend Micro Apex One's management console allows remote attackers to upload malicious code and execute commands, impacting affected installations and posing a business risk.