PyTorch LU Function DoS

The vulnerability of the torch.linalg.lu function in the PyTorch machine learning framework is related to unlimited resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Fortinet FortiAnalyzer competitive conditions vulnerability

FortiAnalyzer is Fortinet's centralized security log management and analysis platform. FortiAnalyzer suffers from a competitive condition vulnerability that stems from an improper synchronization mechanism for shared resources. An attacker can exploit this vulnerability to bypass the FortiCloud...

Mozilla -- XSS in sites without content-type header

[email protected] reports: A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a...

Linux kernel IOMMU DoS

The vulnerability of the putpasidstate function in the drivers/iommu/amd/iommuv2.c file of the Linux kernel’s IOMMU driver is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-31969

HCL Unica Platform is impacted by misconfigured Content Security Policy CSP. These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking...

CVE-2025-31969

HCL Unica Platform is impacted by misconfigured Content Security Policy CSP. These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking...

PT-2025-41712

Name of the Vulnerable Software and Affected Versions HCL Unica Platform affected versions not specified Description The HCL Unica Platform is susceptible to issues stemming from a misconfigured Content Security Policy CSP. This misconfiguration can allow malicious resources to load, potentially...

bluetooth/l2cap: sync sock recv cb and release

...

PT-2025-41684

Name of the Vulnerable Software and Affected Versions WP Scraper plugin for WordPress versions prior to 5.8.2 Description The WP Scraper plugin for WordPress is susceptible to Server-Side Request Forgery SSRF in versions up to and including 5.8.1. This flaw resides within the wp scraper extract...

Websoft HCM Automation Software Unauthorized Access

The vulnerability of Websoft HCM’s automation software for HR processes is related to incorrect restrictions on the path to the restricted-access catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Websoft HCM Automation Software XSS

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks remotely...

Websoft HCM Automation Software XSS

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks remotely...

Websoft HCM Automation Software XSS

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks remotely...

Websoft HCM Automation Software Local File Access

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability can allow an attacker operating remotely to gain access to local files...

Websoft HCM Automation Software CSRF

The vulnerability of Websoft HCM’s automation software for HR processes is related to the of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack remotely...

Websoft HCM Automation Software XSS

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks remotely...

Websoft HCM Automation Software Code Execution

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Websoft HCM Automation Software File Disclosure

The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to read arbitrary files remotely...

Websoft HCM Automation Software XSS

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks remotely...

Websoft HCM Automation Software Unauthorized Access

The vulnerability of Websoft HCM’s automation software for HR processes is related to the disclosure of information in debugging messages. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...