CVE-2025-45475 – Maccms SSRF Vulnerability in Friend Link Management

May 27, 2025

CVE ID : CVE-2025-45475

Published : May 27, 2025, 6:15 p.m. | 3 hours, 7 minutes ago

Description : maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link Management.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-5252 – PHPGurukul News Portal Project SQL Injection Vulnerability

Next Article CVE-2024-49197 – Samsung Exynos Wi-Fi Out-of-Bounds Access Vulnerability

Highlights

CVE-2025-46191 – SourceCodester Client Database Management System Remote Code Execution Vulnerability

May 9, 2025

CVE ID : CVE-2025-46191

Published : May 9, 2025, 5:15 p.m. | 2 hours, 23 minutes ago

Description : Arbitrary File Upload in user_payment_update.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploaded_file_cancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attackers can upload executable PHP files to a web-accessible directory (/files/). This allows them to execute arbitrary commands remotely by accessing the uploaded script, resulting in full Remote Code Execution (RCE) without authentication.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Microsoft Graph CLI to be retired

The state of DevOps and AI: Not just hype

A Breeze Of Inspiration In September (2025 Wallpapers Edition)

10 Top Generative AI Development Companies for Enterprise Node.js Projects

I asked AI to modify mission-critical code, and what happened next haunts me

Why you should delete your browser extensions right now – or do this to stay safe

Dolby Vision 2 comes with big upgrades – here’s which TVs get them first

This one small feature makes this travel charger my favorite for business trips

Laracon AU 2025 Talk Titles Revealed

Laracon AU 2025 Talk Titles Revealed

Stop Writing Bad Controllers: Laravel Custom Collections Transform Your Code

Handle ownership relationships between Eloquent models with Laravel Ownable

Lenovo Legion Go 2 confirmed with Ryzen Z2 Extreme, 1200p OLED 144Hz display & 74Wh battery

Lenovo Legion Go 2 confirmed with Ryzen Z2 Extreme, 1200p OLED 144Hz display & 74Wh battery

How to Open Ports in Firewall on Windows Server

Google TV Remote Not Working? 5 Quick Fixes

CVE-2025-45475 – Maccms SSRF Vulnerability in Friend Link Management

Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets

Silver Fox Exploits Microsoft-Signed WatchDog Driver to Deploy ValleyRAT Malware

Copilot Discover Could Soon Redesign News Feed in Windows 11 Widgets

Can LLMs Debug Like Humans? Microsoft Introduces Debug-Gym for AI Coding Agents

Test Your Gears of War Knowledge Ahead of Reloaded Launch on August 26

Zero-Day CLFS Vulnerability (CVE-2025-29824) Exploited in Ransomware Attacks

CVE-2025-46191 – SourceCodester Client Database Management System Remote Code Execution Vulnerability

Microsoft Extends Windows 10 Security Updates for One Year with New Enrollment Options

DAT Linux is a distribution targeted at data science

CodeSOD: The HTML Print Value

CVE-2025-45475 – Maccms SSRF Vulnerability in Friend Link Management

Related Posts