IT-Sentinel

> CVE-2025-7081 [MEDIUM 6.3]

[PUBLISHED: 2025-07-06] [⚡ EPSS 19.9%]

A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this vulnerability is the function formSetWanStatic of the file /goform/formSetWanStatic of the component webs. The manipulation of the argument m_wan_ipaddr/m_wan_netmask/m_wan_gateway/m_wan_staticdns1/...

AFFECTED_PRODUCTS: Belkin F9k1122 Firmware

> CVE-2025-7080 [LOW 3.7]

[PUBLISHED: 2025-07-06] [EPSS 0.42%]

A vulnerability, which was classified as problematic, was found in Done-0 Jank up to 322caebbad10568460364b9667aa62c3080bfc17. Affected is an unknown function of the file internal/utils/jwt_utils.go of the component JWT Token Handler. The manipulation of the argument accessSecret/refreshSecret with...

> CVE-2025-5333

[PUBLISHED: 2025-07-06] [EPSS 0.71%]

Remote attackers can execute arbitrary code in the context of the vulnerable service process.

> CVE-2025-7079 [LOW 3.7]

[PUBLISHED: 2025-07-06] [EPSS 0.82%]

A vulnerability, which was classified as problematic, has been found in mao888 bluebell-plus up to 2.3.0. This issue affects some unknown processing of the file bluebell_backend/pkg/jwt/jwt.go of the component JWT Token Handler. The manipulation of the argument mySecret with the input bluebell-plus...

AFFECTED_PRODUCTS: Mao888 Bluebell Plus

> CVE-2025-38235

[PUBLISHED: 2025-07-06] [EPSS 0.14%]

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix "appletb_backlight" backlight device reference counting During appletb_kbd_probe, probe attempts to get the backlight device by name. When this happens backlight_device_get_by_name looks for a device in the b...

> CVE-2025-7078 [MEDIUM 4.3]

[PUBLISHED: 2025-07-06] [EPSS 0.31%]

A vulnerability classified as problematic was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.3.9. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This...

AFFECTED_PRODUCTS: 07Fly Customer Relationship Management, 07Fly 07flycms

> CVE-2025-7077 [HIGH 8.8]

[PUBLISHED: 2025-07-06] [EPSS 1.16%]

A vulnerability classified as critical has been found in Shenzhen Libituo Technology LBT-T300-T310 up to 2.2.3.6. This affects the function config_3g_para of the file /appy.cgi. The manipulation of the argument username_3g/password_3g leads to buffer overflow. It is possible to initiate the attack r...

AFFECTED_PRODUCTS: Szlbt Lbt T300 T310 Firmware

> CVE-2025-27446 [HIGH 7.8]

[PUBLISHED: 2025-07-06] [EPSS 0.21%]

Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner). Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges. This issue affects Apache APISIX(java-plugin-runner): from 0.2.0 through 0.5.0. Users are...

AFFECTED_PRODUCTS: Apache APISIX

> CVE-2025-7076 [MEDIUM 5.4]

[PUBLISHED: 2025-07-06] [EPSS 0.88%]

A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.cgi of the component Configuration Handler. The manipulation leads to improper access controls. The attack needs to be initiated...

AFFECTED_PRODUCTS: Blackvuenorthamerica Blackvue Dr590x Firmware

> CVE-2025-7075 [MEDIUM 6.3]

[PUBLISHED: 2025-07-06] [EPSS 0.95%]

A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /upload.cgi of the component HTTP Endpoint. The manipulation leads to unrestricted upload. The attack needs to be done within th...

AFFECTED_PRODUCTS: Blackvuenorthamerica Blackvue Dr590x Firmware

> CVE-2025-6022

[PUBLISHED: 2025-07-05]