CVE-2025-46000 – Apache Filemanager SVG File Upload RCE

July 18, 2025

CVE ID : CVE-2025-46000

Published : July 18, 2025, 3:15 p.m. | 2 hours, 3 minutes ago

Description : An arbitrary file upload vulnerability in the component /rsc/filemanager.rsc.class.php of Filemanager commit c75b914 v.2.5.0 allows attackers to execute arbitrary code via uploading a crafted SVG file.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-7788 – Xuxueli xxl-job OS Command Injection

Next Article CVE-2025-46732 – OpenCTI IDOR Notification Manipulation

Highlights

CVE-2025-32875 – COROS Bluetooth Pairing and Bonding Unencrypted Data Exfiltration

June 20, 2025

CVE ID : CVE-2025-32875

Published : June 20, 2025, 2:15 p.m. | 28 minutes ago

Description : An issue was discovered in the COROS application through 3.8.12 for Android. Bluetooth pairing and bonding is neither initiated nor enforced by the application itself. Also, the watch does not enforce pairing and bonding. As a result, any data transmitted via BLE remains unencrypted, allowing attackers within Bluetooth range to eavesdrop on the communication. Furthermore, even if a user manually initiates pairing and bonding in the Android settings, the application continues to transmit data without requiring the watch to be bonded. This fallback behavior enables attackers to exploit the communication, for example, by conducting an active machine-in-the-middle attack.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

CVE-2025-46000 – Apache Filemanager SVG File Upload RCE

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

Designing for the Eye

Free LinkedIn Text Formatter

I’ve tested dozens of robot vacuums. These are the three I recommend most to family and friends

Sam Altman’s future ChatGPT sounds like Microsoft’s Windows Recall but with Copilot’s companionship traits — “running all the time, looking at all your stuff”

CVE-2025-32875 – COROS Bluetooth Pairing and Bonding Unencrypted Data Exfiltration

CVE-2025-3773 – Cisco SIR Information Disclosure

I just found the cheapest laptop worth actually buying in this anti-Prime day deal — under $300 and not absolute garbage

Can you install SteamOS on a laptop or desktop PC?

CVE-2025-46000 – Apache Filemanager SVG File Upload RCE

Related Posts