Published threat advisories for October 24, 2025

Azure Access BLU-IC2 and BLU-IC4 devices are susceptible to an issue where undocumented administrative accounts may be created, potentially enabling unauthorized application access. This vulnerability is critical, as reachable accounts could lead to complete system compromise, risking data and operational disruption. R

NVD modified: NVD date unavailable

A SQL injection vulnerability exists in DobryCMS, potentially allowing attackers to manipulate its database through crafted input. This could lead to unauthorized access or modification of sensitive data, impacting system integrity and service behavior if the software is reachable. The relevance of this issue depends o

NVD modified: NVD date unavailable

An improper authentication vulnerability in Dell Storage Manager allows unauthenticated remote attackers to bypass protection mechanisms by accessing specific APIs. This could potentially lead to unauthorized access to sensitive data or systems. Organizations should verify the presence and exposure of Dell Storage Mana

NVD modified: NVD date unavailable

A critical SQL injection vulnerability exists in Netty ERP, allowing unauthenticated attackers to execute malicious commands via network requests. This could lead to unauthorized access, modification, or deletion of sensitive business data, impacting system integrity and availability. It is uncertain if Personally Iden

NVD modified: NVD date unavailable

A critical vulnerability exists in a WordPress plugin that allows arbitrary file uploads, potentially enabling remote code execution. This issue affects unauthenticated users and could compromise the server.

NVD modified: NVD date unavailable