CVE-2025-27212 – Ubiquiti UniFi Access Command Injection Vulnerability

CVE ID : CVE-2025-27212

Published : Aug. 4, 2025, 11:15 p.m. | 28 minutes ago

Description : An Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a malicious actor with access to UniFi Access management network.

Affected Products:
UniFi Access Reader Pro (Version 2.14.21 and earlier)
UniFi Access G2 Reader Pro (Version 1.10.32 and earlier)
UniFi Access G3 Reader Pro (Version 1.10.30 and earlier)
UniFi Access Intercom (Version 1.7.28 and earlier)
UniFi Access G3 Intercom (Version 1.7.29 and earlier)
UniFi Access Intercom Viewer (Version 1.3.20 and earlier)

Mitigation:
Update UniFi Access Reader Pro Version 2.15.9 or later
Update UniFi Access G2 Reader Pro Version 1.11.23 or later
Update UniFi Access G3 Reader Pro Version 1.11.22 or later
Update UniFi Access Intercom Version 1.8.22 or later
Update UniFi Access G3 Intercom Version 1.8.22 or later
Update UniFi Access Intercom Viewer Version 1.4.39 or later

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2025-46094 – LiquidFiles Arbitrary File Upload Vulnerability

CVE ID : CVE-2025-46094

Published : Aug. 4, 2025, 11:15 p.m. | 28 minutes ago

Description : LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.

Severity: 3.8 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2025-46093 – LiquidFiles FTP SETUID Setgid Remote Command Execution

CVE ID : CVE-2025-46093

Published : Aug. 4, 2025, 11:15 p.m. | 28 minutes ago

Description : LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as root by leveraging the Actionscript feature and the sudoers configuration.

Severity: 9.9 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2025-8529 – CloudFavorites Favorites-Web SSRF Vulnerability

CVE ID : CVE-2025-8529

Published : Aug. 4, 2025, 11:15 p.m. | 28 minutes ago

Description : A vulnerability classified as critical was found in cloudfavorites favorites-web up to 1.3.0. Affected by this vulnerability is the function getCollectLogoUrl of the file app/src/main/java/com/favorites/web/CollectController.java. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Severity: 6.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2025-8530 – Elunez Eladmin Druid Default Credentials Vulnerability

CVE ID : CVE-2025-8530

Published : Aug. 4, 2025, 11:15 p.m. | 28 minutes ago

Description : A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file eladmin-systemsrcmainresourcesconfigapplication-prod.yml of the component Druid. The manipulation of the argument login-username/login-password leads to use of default credentials. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Severity: 5.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

brokefetch – neofetch clone

brokefetch is the only system info tool that doesn’t pretend your life is okay. The post brokefetch – neofetch clone…

Linux

Come provare KDE Linux

Lo scorso novembre vi avevo parlato di KDE Linux (conosciuta internamente come Project Banana), la nuova distribuzione ufficiale di KDE,…