CVE-2025-52544 – E3 Site Supervisor File System Access Vulnerability (File Upload)

September 2, 2025

CVE ID : CVE-2025-52544

Published : Sept. 2, 2025, 12:15 p.m. | 14 hours, 29 minutes ago

Description : E3 Site Supervisor Control (firmware version
Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-52547 – E3 Site Supervisor Control MGW Denial of Service

Next Article CVE-2025-46810 – Traefik2 openSUSE Tumbleweed Symlink Following Root Escalation

Highlights

CVE-2025-52357 – FiberHome FD602GW-DX-R410 Router Ping Diagnostic XSS

July 10, 2025

CVE ID : CVE-2025-52357

Published : July 9, 2025, 8:15 p.m. | 7 hours, 49 minutes ago

Description : Cross-Site Scripting (XSS) vulnerability exists in the ping diagnostic feature of FiberHome FD602GW-DX-R410 router (firmware V2.2.14), allowing an authenticated attacker to execute arbitrary JavaScript code in the context of the router s web interface. The vulnerability is triggered via user-supplied input in the ping form field, which fails to sanitize special characters. This can be exploited to hijack sessions or escalate privileges through social engineering or browser-based attacks.

Severity: 4.1 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Top 10 Use Cases of Vibe Coding in Large-Scale Node.js Applications

Cloudsmith launches ML Model Registry to provide a single source of truth for AI models and datasets

Kong Acquires OpenMeter to Unlock AI and API Monetization for the Agentic Era

Microsoft Graph CLI to be retired

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

ASUS built a desktop gaming PC around a mobile CPU — it’s an interesting, if flawed, idea

Hollow Knight: Silksong arrives on Xbox Game Pass this week — and Xbox’s September 1–7 lineup also packs in the horror. Here’s every new game.

The Xbox remaster that brought Gears to PlayStation just passed a huge milestone — “ending the console war” and proving the series still has serious pulling power

Magento (Adobe Commerce) or Optimizely Configured Commerce: Which One to Choose

Magento (Adobe Commerce) or Optimizely Configured Commerce: Which One to Choose

Updates from N|Solid Runtime: The Best Open-Source Node.js RT Just Got Better

Scale Your Business with AI-Powered Solutions Built for Singapore’s Digital Economy

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

ASUS built a desktop gaming PC around a mobile CPU — it’s an interesting, if flawed, idea

Hollow Knight: Silksong arrives on Xbox Game Pass this week — and Xbox’s September 1–7 lineup also packs in the horror. Here’s every new game.

CVE-2025-52544 – E3 Site Supervisor File System Access Vulnerability (File Upload)

CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation

Pennsylvania Attorney General’s Office Recovers from Ransomware Attack

whalespotter finds big files and directories

Xbox’s canceled Perfect Dark reboot was reportedly almost revived by Take-Two — but the deal fell through, and developer Crystal Dynamics was hit with layoffs

2K26 Friends List not Working: 7 Working Fixes

Replace String Prefixes Precisely with Laravel’s replaceStart Method

CVE-2025-52357 – FiberHome FD602GW-DX-R410 Router Ping Diagnostic XSS

CVE-2025-49507 – LoftOcean CozyStay Deserialization of Untrusted Data Object Injection Vulnerability

Mark Zuckerberg’s AI ambitions: can Meta retain talent? Insights from recent departures

CVE-2012-10025 – “WordPress Advanced Custom Fields RFI Remote Code Execution”

CVE-2025-52544 – E3 Site Supervisor File System Access Vulnerability (File Upload)

Related Posts