CVE-2025-30169 – Aspect File Upload and Execute PHP Script Injection Vulnerability

May 22, 2025

CVE ID : CVE-2025-30169

Published : May 22, 2025, 6:15 p.m. | 36 minutes ago

Description : File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become compromised.
This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

Severity: 6.7 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-30170 – ASPECT File Path Disclosure Vulnerability

Next Article CVE-2025-30171 – ASPECT System File Deletion Vulnerability

Highlights

CVE-2025-4017 – Novel-Plus LogController Java Unauthenticated Remote Authorization Bypass

April 28, 2025

CVE ID : CVE-2025-4017

Published : April 28, 2025, 11:15 a.m. | 1 hour, 14 minutes ago

Description : A vulnerability classified as problematic was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This vulnerability affects the function list of the file nnovel-admin/src/main/java/com/java2nb/common/controller/LogController.java. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

A Week In The Life Of An AI-Augmented Designer

This week in AI updates: Gemini Code Assist Agent Mode, GitHub’s Agents panel, and more (August 22, 2025)

Microsoft adds Copilot-powered debugging features for .NET in Visual Studio

Blackstone portfolio company R Systems Acquires Novigo Solutions, Strengthening its Product Engineering and Full-Stack Agentic-AI Capabilities

The best AirTag alternative for Samsung users is currently 30% off

One of the biggest new features on the Google Pixel 10 is also one of the most overlooked

I tested these viral ‘crush-proof’ Bluetooth speakers, and they’re not your average portables

I compared the best smartwatches from Google and Apple – and there’s a clear winner

MongoDB Data Types

MongoDB Data Types

Building Cross-Platform Alerts with Laravel’s Notification Framework

Add Notes Functionality to Eloquent Models With the Notable Package

Microsoft Teams updated with a feature you probably thought already existed — “Can you hear me?” is now a thing of the past

Microsoft Teams updated with a feature you probably thought already existed — “Can you hear me?” is now a thing of the past

Xbox Game Pass gets Gears of War: Reloaded, Dragon Age: The Veilguard, and more — here’s what is coming through the rest of August

Resident Evil ‘9’ Requiem has some of the most incredible lighting I’ve seen in a game — and Capcom uses it as a weapon

CVE-2025-30169 – Aspect File Upload and Execute PHP Script Injection Vulnerability

Blue Locker ransomware hits critical infrastructure – is your organisation ready?

GeoServer Exploits, PolarEdge, and Gayfemboy Push Cybercrime Beyond Traditional Botnets

CVE-2025-30165 – vLLM ZeroMQ Remote Code Execution Vulnerability

I’m playing Age of Empires 4 again, thanks to the Knights of Cross and Rose DLC’s excellent new faction mechanic

CVE-2025-1752 – Llama Index Denial of Service Vulnerability

Min Woo Lee Lululemon Let Him Cook Shirt

CVE-2025-4017 – Novel-Plus LogController Java Unauthenticated Remote Authorization Bypass

CVE-2025-49825 – Teleport Remote Authentication Bypass Vulnerability

CVE-2025-48067 – OctoPrint File Exfiltration Information Disclosure

CVE-2025-41404 – Iroha Board Information Disclosure

CVE-2025-30169 – Aspect File Upload and Execute PHP Script Injection Vulnerability

Related Posts