🟠 CVE-2025-68988 - High (7.5)

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in o2oe E-Invoice App Malaysia einvoiceapp-malaysia allows Retrieve Embedded Sensitive Data.This issue affects E-Invoice App Malaysia: from n/a through <= ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68988/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda

🔴 CVE-2025-68985 - Critical (9.8)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.15.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68985/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda

🟠 CVE-2025-59129 - High (7.6)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appointify allows Blind SQL Injection.This issue affects Appointify: from n/a through 1.0.8.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-59129/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda

🟠 CVE-2025-62753 - High (7.5)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in MadrasThemes MAS Videos allows PHP Local File Inclusion.This issue affects MAS Videos: from n/a through 1.3.2.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-62753/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda

🔴 CVE-2025-68987 - Critical (9.8)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Cinerama - A WordPress Theme for Movie Studios and Filmmakers cinerama allows PHP Local File Inclusion.This issue ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68987/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda

🟠 CVE-2025-68975 - High (8.1)

Authorization Bypass Through User-Controlled Key vulnerability in Eagle-Themes Eagle Booking eagle-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eagle Booking: from n/a through <= 1.3.4.3.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68975/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda

🟠 CVE-2025-15233 - High (8.8)

A security flaw has been discovered in Tenda M3 1.0.0.13(4903). This issue affects the function formSetAdInfoDetails of the file /goform/setAdInfoDetail. The manipulation of the argument adName/smsPassword/smsAccount/weixinAccount/weixinName/smsSi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15233/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda