A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability is the function apcli_cancel_wps of the file /usr/lib/lua/luci/controller/mtkwifi.lua. The manipulation leads to command injection.
This vulnerability is known as CVE-2025-3249. The attack can be launched remotely. Furthermore, there is an exploit available.
A vulnerability classified as problematic has been found in M-Files Admin on Windows. Affected is an unknown function of the component Desktop UI. The manipulation leads to cross site scripting.
This vulnerability is traded as CVE-2025-2159. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
A vulnerability was found in M-Files Web 25.1.14445.5/25.2.14524.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting.
The identification of this vulnerability is CVE-2025-3087. The attack may be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.