NVD disclosure day
CVE-2025-67510
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability exists in the Neuron PHP framework that allows arbitrary SQL commands to be executed via prompt injection. This could lead to destructive database operations like data deletion or alteration if an AI agent processes untrusted input and has broad database privileges. This issue impacts deployments that e
CVE-2025-65294
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Aqara Hub devices have an undocumented remote access mechanism that allows for unrestricted command execution, potentially enabling unauthorized control if the devices are reachable.
CVE-2025-65950
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
WBCE CMS versions prior to 1.6.5 contain a SQL injection vulnerability in the user management module. Low-privileged authenticated users can exploit this to execute arbitrary SQL queries, potentially leading to full database compromise and data exfiltration. This impacts systems that use the affected WBCE CMS versions.
CVE-2025-65823
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Meatmeet Pro devices contain hardcoded Wi-Fi credentials in their firmware, allowing an attacker who obtains them to potentially access the vendor's network or redirect the device to a malicious access point during setup.
CVE-2025-64539
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting vulnerability that could allow an attacker to execute malicious scripts in a user's browser via a crafted web page, potentially leading to session takeover and high impact on confidentiality and integrity.
CVE-2025-64538
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A DOM-based Cross-Site Scripting vulnerability in Adobe Experience Manager could allow attackers to execute arbitrary code and take over user sessions by injecting malicious scripts into a web page. Exploitation requires a user to interact with a crafted malicious page, impacting data confidentiality and integrity. The
CVE-2025-64537
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A DOM-based Cross-Site Scripting vulnerability in Adobe Experience Manager could allow an attacker to execute malicious scripts in a user's browser via a crafted webpage, potentially leading to session takeover and impacting data confidentiality and integrity.
CVE-2025-13607
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability exists that allows unauthorized access to camera configuration information, including account credentials, by reaching a specific URL without authentication. This could lead to compromised surveillance systems, making it important to identify affected devices and assess their exposure.
CVE-2025-34394
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Barracuda's RMM solution allows for remote code execution due to an unprotected .NET Remoting service that is susceptible to arbitrary type deserialization. This could enable unauthenticated attackers to compromise the affected service.
CVE-2025-34393
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Barracuda's RMM Service Center allows remote code execution by improperly verifying attacker-controlled service descriptions. This could enable arbitrary code invocation or deserialization of untrusted data, impacting systems using the affected technology.
CVE-2025-34392
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in Barracuda's RMM Service Center allows remote code execution by loading an attacker-controlled WSDL file, enabling arbitrary file writes and webshell uploads.
CVE-2025-8110
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Gogs' PutContents API allows for code execution due to improper symbolic link handling. This impacts organizations by potentially allowing attackers to compromise systems and data. The realistic business risk is significant, as exploitation can lead to unauthorized control.
CVE-2025-13184
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in a router's firmware allows unauthenticated attackers to enable Telnet and gain root access with a blank password, potentially leading to arbitrary command execution. This issue affects routers with specific firmware that enables Telnet without authentication, posing a risk of unauthorized control ove
CVE-2025-13953
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A bypass vulnerability in the GTT Tax Information System's Active Directory login method allows attackers with local machine or internal network access to impersonate any user. This is due to improper validation of data received over a local WebSocket used for authentication. Exploitation could compromise the confident
CVE-2025-41732
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability exists in Wago devices that allows unauthenticated remote attackers to gain full device control. This is achieved by exploiting unsafe sscanf calls, which can lead to arbitrary data writes and a complete system compromise. The primary concern is determining if these industrial network switches
CVE-2025-41730
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An unauthenticated remote attacker can exploit an unsafe sscanf call in a function that checks account information to write arbitrary data into memory, potentially leading to full device compromise. This vulnerability affects Wago devices and could allow attackers to gain complete control of the device if reachable.
CVE-2025-14087
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An external attacker can send malicious data to applications running the widely used GLib Linux library. This can trigger crashes that result in system outages, or allow the attacker to execute unauthorized commands and take complete control of the affected systems.
CVE-2025-13613
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The Elated Membership plugin for WordPress has an authentication bypass vulnerability. Unauthenticated attackers can bypass login by exploiting how user data is verified, potentially gaining administrative access if they can create a temporary account. This could expose sensitive administrative data and impact site ope
CVE-2025-67506
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated vulnerability in the PipesHub workplace AI platform allows attackers to write arbitrary files to the system by exploiting a file upload endpoint. This could lead to unauthorized code execution or system compromise if the affected endpoint is reachable.
CVE-2025-67501
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An SQL injection vulnerability exists in the WeGIA web manager, potentially allowing attackers to execute malicious SQL commands. If reachable, this could lead to unauthorized access or modification of institutional data. Its relevance depends on deployment and administrative access.
CVE-2025-61811
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An Improper Access Control vulnerability in Adobe ColdFusion could allow a high-privileged attacker to execute arbitrary code, bypassing security measures. If reachable, this could result in unauthorized code execution within the context of the current user. This issue is relevant to organizations using Adobe ColdFusio
CVE-2025-61809
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Adobe ColdFusion contains an improper input validation vulnerability that enables a security feature bypass. Attackers can exploit this to gain unauthorized read and write access without user interaction, potentially compromising data confidentiality and integrity. Confirming usage of this technology is crucial for ass
CVE-2025-61808
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Adobe ColdFusion is affected by an unrestricted file upload vulnerability. A privileged attacker could exploit this by uploading a dangerous file type, which may lead to arbitrary code execution. This could impact system confidentiality, integrity, and availability. Users should update to the latest versions.