PT-2025-28738 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Substance3D - Stager versions 3.1.2 and earlier Description: Substance3D - Stager is affected by an out-of-bounds read issue that may result in the disclosure of sensitive memory. Successful exploitation requires a user to open a specially...

ABIS Adjutant Core Accounting ERP 安全漏洞

ABIS Adjutant Core Accounting ERP is an enterprise resource planning software system from ABIS Corporation. A security vulnerability exists in ABIS Adjutant Core Accounting ERP build v.PreBeta250F, which stems from the cid parameter in a GET request that is vulnerable to SQL injection attacks,...

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the ability to read data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries during file processing for PRC formats. Exploiting this vulnerability can allow attackers to disclose protected...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from an incorrect boundary check resulting in out-of-bounds reads, which could lead to the disclosure of local information...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from an incorrect boundary check resulting in out-of-bounds reads, which could lead to the disclosure of local information...

The vulnerability of the EMC Platform component of the Oracle Hospitality Simphony sales management system allows a hacker to gain access to modify, add, or delete data, or to cause service interruptions.

The vulnerability of the EMC Platform for Point of Sale Management system, Oracle Hospitality Simphony, involves the disclosure of system data by unauthorized individuals. Exploiting this vulnerability can allow a malicious actor to gain access to the ability to modify, add, or delete data, or...

The vulnerability of the Segnetics SMConfig system configuration tool lies in the insufficient security of the database where user credentials are stored, allowing attackers to access and disclose sensitive information.

The vulnerability of the Segnetics SMConfig system configuration tool is related to the insufficient security of the database where user credentials are stored. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by sending a specially crafted GET request from...

Marvell QConvergeConsole 路径遍历漏洞

Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in the QLogicDownloadImpl class. An attacker could exploit the vulnerability to delete files and disclose...

CVE-2025-46733 REE userspace code can panic TAs, leading to fTPM PCR reset and data disclosure

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. In version 4.5.0, using a specially crafted tee-supplicant binary running in REE userspace, an attacker can trigger a panic in a TA that...

CVE-2024-9453 Jenkins-image: sensitive data disclosure when using openshift jenkins image

A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially carries a high risk if those logs are centralized when collected. The token is typically valid for one year. This flaw allows a malicious user to jeopardize the environment if th...

The vulnerability of the FreeScout support service management system lies in the lack of measures to protect the website structure. This allows attackers to disclose confidential information and gain control over user sessions.

The vulnerability of the FreeScout support service management system lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to disclose confidential information and gain control over user sessions...

The vulnerability of the FreeScout support service management system lies in the lack of measures to protect the website structure. This allows attackers to disclose confidential information and gain control over user sessions.

The vulnerability of the FreeScout support service management system lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to disclose confidential information and gain control over user sessions...

The vulnerability of the FreeScout support service management system lies in the lack of measures to protect the website structure. This allows attackers to disclose confidential information and gain control over user sessions.

The vulnerability of the FreeScout support service management system lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to disclose confidential information and gain control over user sessions...

The vulnerability of the FreeScout support service management system lies in the lack of measures to protect the website structure. This allows attackers to disclose confidential information and gain control over user sessions.

The vulnerability of the FreeScout support service management system lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to disclose confidential information and gain control over user sessions...

The vulnerability of the FreeScout support service management system lies in the lack of measures to protect the website structure. This allows attackers to disclose confidential information and gain control over user sessions.

The vulnerability of the FreeScout support service management system lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to disclose confidential information and gain control over user sessions...

PT-2025-27951

Name of the Vulnerable Software and Affected Versions: OP-TEE version 4.5.0 Description: OP-TEE is a Trusted Execution Environment TEE designed as a companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. An attacker can trigger a panic in a TA that...

The vulnerability of the FreeScout support service management system lies in the lack of measures to protect the website structure. This allows attackers to disclose confidential information and carry out CSRF attacks.

The vulnerability of the FreeScout support service management system lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to disclose confidential information and carry out a CSRF attack using a specially created website...

U.S. Dept Of Defense: SQL Injection in URI Path Leading to Full Database Disclosure on ████████

A time-based blind SQL injection vulnerability was discovered in the URI path of the /home/server-ocsp/ endpoint on a U.S. Government Public Key Infrastructure website. The vulnerability allowed an unauthenticated attacker to interact with the backend MySQL database and extract sensitive...

The vulnerability of the SetDefaultConnectionService() function in microprogrammed routing software such as Linksys WRT1900ACS, EA7200, EA7450, and EA7500 allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SetDefaultConnectionService function in microprogrammed routing software such as Linksys WRT1900ACS, EA7200, EA7450, and EA7500 is related to the operation of writing data outside of the buffer in memory when processing the NewDefaultConnectionService parameter...

Cinnamon kotaemon 路径遍历漏洞

Cinnamon kotaemon is a RAG-based open source tool from Cinnamon Open Source. A path traversal vulnerability exists in Cinnamon kotaemon version 0.10.6 and earlier, which stems from unvalidated URLs and local file paths, and could lead to directory traversal and data disclosure...