CVE-2025-45986 – Blink Command Injection Vulnerability in Router SetMacBlack Function

June 13, 2025

CVE ID : CVE-2025-45986

Published : June 13, 2025, 12:15 p.m. | 1 hour, 26 minutes ago

Description : Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 werediscovered to contain a command injection vulnerability via the mac parameter in the bs_SetMacBlack function.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-45987 – Blink Router Command Injection Vulnerability

Next Article CVE-2025-45985 – Blink Router Command Injection Vulnerability

Highlights

CVE-2024-9994 – Elementor Addons for WordPress – Stored Cross-Site Scripting Vulnerability

June 7, 2025

CVE ID : CVE-2024-9994

Published : June 7, 2025, 12:15 p.m. | 3 hours, 15 minutes ago

Description : The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the eael_pricing_item_tooltip_content parameter of the Pricing Table Widget in all versions up to, and including, 6.1.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Severity: 6.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

The Ultimate Guide to Node.js Development Pricing for Enterprises

Stack Overflow: Developers’ trust in AI outputs is worsening year over year

Web Components: Working With Shadow DOM

Google’s new Opal tool allows users to create mini AI apps with no coding required

5 preinstalled apps you should delete from your Samsung phone immediately

Ubuntu Linux lagging? Try my 10 go-to tricks to speed it up

How I survived a week with this $130 smartwatch instead of my Garmin and Galaxy Ultra

YouTube is using AI to verify your age now – and if it’s wrong, that’s on you to fix

Time-Controlled Data Processing with Laravel LazyCollection Methods

Time-Controlled Data Processing with Laravel LazyCollection Methods

Create Apple Wallet Passes in Laravel

The Laravel Idea Plugin is Now FREE for PhpStorm Users

New data shows Xbox is utterly dominating PlayStation’s storefront — accounting for 60% of the Q2 top 10 game sales spots

New data shows Xbox is utterly dominating PlayStation’s storefront — accounting for 60% of the Q2 top 10 game sales spots

Opera throws Microsoft to Brazil’s watchdogs for promoting Edge as your default browser — “Microsoft thwarts‬‭ browser‬‭ competition‬‭‬‭ at‬‭ every‬‭ turn”

Activision once again draws the ire of players for new Diablo Immortal marketing that appears to have been made with generative AI

CVE-2025-45986 – Blink Command Injection Vulnerability in Router SetMacBlack Function

CVE-2025-43234 – Apple WatchOS/IOS/iPadOS/tvOS/macOS VisionOS Texture Corruption Vulnerability

CVE-2025-43237 – Apple macOS Sequoia Write Access Vulnerability

Capgemini & MongoDB: Smarter AI and Data for Business

IBM’s MCP Gateway: A Unified FastAPI-Based Model Context Protocol Gateway for Next-Gen AI Toolchains

CVE-2025-20676 – Aruba WLAN STA Driver Denial of Service Vulnerability

Mailmodo Free Email Signature Generator

CVE-2024-9994 – Elementor Addons for WordPress – Stored Cross-Site Scripting Vulnerability

“A system that looks like the one you had as a kid.” — This PC fuses 90s throwback vibes with absolute spec overkill

How to Build a Conversational AI Chatbot with Stream Chat and React

CVE-2025-39380 – Mojoomla Hospital Management System File Upload Vulnerability

CVE-2025-45986 – Blink Command Injection Vulnerability in Router SetMacBlack Function

Related Posts