Day: April 16, 2025

ABB Cylon Aspect 3.08.03 (webServerDeviceLabelUpdate.php) – File Write DoS

ABB Cylon Aspect 4.00.00 (factorySetSerialNum.php) – Remote Code Execution

ABB Cylon Aspect 3.08.02 – Cross-Site Request Forgery (CSRF)

Zabbix 7.0.0 – SQL Injection

NagVis 1.9.33 – Arbitrary File Read

Teedy 1.11 – Account Takeover via Stored Cross-Site Scripting (XSS)

Hugging Face Transformers MobileViTV2 4.41.1 – Remote Code Execution (RCE)

phpMyFAQ 3.1.7 – Reflected Cross-Site Scripting (XSS)