CVE-2025-13129 Business Logic Error in Seneka Software's Onaylarım

Improper Enforcement of Behavioral Workflow vulnerability in Seneka Software Hardware Information Technology Trade Contracting and Industry Ltd. Co. Onaylarım allows Functionality Misuse. This issue affects Onaylarım: from 25.09.26.01 through 18112025...

Malicious code in revit-to-ifc-scheduler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27f38ca3d7137e9a86fceda4b0315a4cd618118bcbcbc1b17aec59d089d66e7 The package revit-to-ifc-scheduler was found to contain malicious code...

Arbitrary Code Execution

melisplatform/melis-cms-slider is vulnerable to Arbitrary Code Execution. The vulnerability is due to insufficient validation of uploaded files, where the mcsdetailimg parameter in the saveDetailsForm endpoint accepts malicious file uploads, and attackers can exploit this to upload executable...

Malicious code in ing-ideal-acquiring-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b98d8794a24b74ed659c1fcc64a270aa27181bb12f41b5b50e714177d46e8cf The package ing-ideal-acquiring-shared was found to contain malicious code...

Malicious code in nbitcoin.unified (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bybitapi.net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-13819

Open redirect in the web server component of MiR Robot and Fleet software allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, facilitating phishing or social engineering attacks...

CVE-2025-13819 Open redirect in web server of MiR robots and MiR fleet

Open redirect in the web server component of MiR Robot and Fleet software allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, facilitating phishing or social engineering attacks...

CVE-2025-13819 Open redirect in web server of MiR robots and MiR fleet

Open redirect in the web server component of MiR Robot and Fleet software allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, facilitating phishing or social engineering attacks...

CVE-2025-13819

MiR Robot and Fleet software’s web server component is affected by an open redirect vulnerability (CVE-2025-13819). The issue allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, enabling phishing or social-engineering attacks. The available documents...

BackportBench: A Multilingual Benchmark for Automated Backporting of Patches

Many modern software projects evolve rapidly to incorporate new features and security patches. It is important for users to update their dependencies to safer versions, but many still use older, vulnerable package versions because upgrading can be difficult and may break their existing codebase...

ASB-A-388034510

Bulletin has no description...

PT-2025-48447

Name of the Vulnerable Software and Affected Versions Onaylarım versions 25.09.26.01 through 18112025 Description An improper enforcement of behavioral workflow issue exists in Onaylarım. This allows for functionality misuse. Recommendations Update Onaylarım to a version later than 18112025...

Shirt Pocket SuperDuper! 安全漏洞

Shirt Pocket SuperDuper! is a data backup, disk cloning and recovery tool for macOS from Shirt Pocket. A security vulnerability exists in Shirt Pocket SuperDuper! V.3.10 and earlier versions that originates from a local attacker who can execute arbitrary code via the software update mechanism...

PT-2025-48484

Name of the Vulnerable Software and Affected Versions Shirt Pocket SuperDuper! versions 3.10 and earlier Description An issue exists that allows a local attacker to execute arbitrary code via the software update mechanism. Recommendations Update to a version later than 3.10...

CVE-2024-56089

An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake responses by reviving the birthday attack...

Mobile Industrial Robots Robots和Mobile Industrial Robots Fleet 安全漏洞

Mobile Industrial Robots Robots and Mobile Industrial Robots Fleet are both products of the Danish company Mobile Industrial Robots.Mobile Industrial Robots Robots is an autonomous mobile robot. Mobile Industrial Robots Robots is an autonomous mobile robot and Mobile Industrial Robots Fleet is a...

CVE-2024-56089

An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake responses by reviving the birthday attack...

ASB-A-289809991

In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege and background activity launch with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-48431

Open redirect in the web server component of MiR Robot and Fleet software allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, facilitating phishing or social engineering attacks...