The vulnerability of the JetBrains YouTrack project and task management software, related to deficiencies in the authentication process, allows a hacker to gain read and edit access to data.

The vulnerability of the JetBrains YouTrack project management and task management software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain read and edit access to data...

The vulnerability of the DA component in Microprogramming Software, MediaTek’s chips, allows attackers to enhance their privileges.

The vulnerability of the DA component of MediaTek’s microprogramming software lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the DA component in Microprogramming Software, MediaTek’s microchip, allows attackers to enhance their privileges and expose protected information.

The vulnerability of the DA component of MediaTek’s microprogramming software lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and expose sensitive information...

The vulnerability of the DA component in Microprogramming Software, MediaTek’s chips, allows attackers to enhance their privileges.

The vulnerability of the DA component of MediaTek’s microprogramming software lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerabilities of the NLP and LLM components of the NVIDIA NeMo comprehensive platform for training and applying neural networks in speech processing and natural language processing allow a perpetrator to execute arbitrary codes, enhance their privileges, and gain unauthorized access to protected information.

The vulnerability of the NLP and LLM components of the NVIDIA NeMo comprehensive platform for training and applying neural networks in speech processing and natural language processing is related to improper code generation management. Exploiting this vulnerability can allow attackers to execute...

CVE-2025-59454

In Apache CloudStack, a gap in access control checks affected the APIs - createNetworkACL - listNetworkACLs - listResourceDetails - listVirtualMachinesUsageHistory - listVolumesUsageHistory While these APIs were accessible only to authorized users, insufficient permission validation meant that...

The vulnerability of the Elastic Cloud Enterprise analytics platform lies in its lack of measures to neutralize special elements in the template creation mechanism. This allows attackers to access confidential information and execute arbitrary code.

The vulnerability of the Elastic Cloud Enterprise analytics platform lies in the lack of measures to neutralize special elements in the template creation mechanism. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information and execute arbitrary code...

CVE-2025-59369

A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnerability to potentially execute arbitrary SQL queries, leading to unauthorized data access. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security...

CVE-2025-31248

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...

ASUS Router SQL Injection Vulnerability

ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. ASUS Router suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally enter...

The vulnerability of the NVIDIA Project G-Assist, a AI-based optimization tool, allows a user to enhance their privileges within the system, gain access to protected data, or trigger a service failure.

The vulnerability of the NVIDIA Project G-Assist AI-based optimization tool is related to incorrect default settings. Exploiting this vulnerability can allow attackers to enhance their privileges within the system, gain access to sensitive data, or cause service interruptions...

The vulnerability of the Virtual GPU Manager driver on NVIDIA Virtual GPUs allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Virtual GPU Manager driver component of NVIDIA’s Virtual GPU technology relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...

The vulnerability of the OxygenOS operating system in OnePlus 8T and 10 Pro 5G devices, related to the failure to protect the SQL query structure, allows attackers to gain unauthorized access to confidential information.

The vulnerability of the OxygenOS operating system in OnePlus 8T and 10 Pro 5G devices lies in the lack of measures to protect the SQL query structure. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential information...

CVE-2025-65670

An Insecure Direct Object Reference IDOR in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating course IDs in URLs, resulting in unauthorized disclosure of sensitive course, admin, and student data. The leak occurs momentarily before the system reverts t...

EUVD-2025-199636

Primakon Pi Portal 1.0.18 API endpoints responsible for retrieving object-specific or filtered data e.g., user profiles, project records fail to implement sufficient server-side validation to confirm that the requesting user is authorized to access the requested object or dataset. This...

CVE-2025-64062

The Primakon Pi Portal 1.0.18 /api/V2/ppusers?email endpoint is used for user data filtering but lacks proper server-side validation against the authenticated session. By manipulating the email parameter to an arbitrary value e.g., [email protected], an attacker can assume the session and gain...

CVE-2025-59369

A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnerability to potentially execute arbitrary SQL queries, leading to unauthorized data access. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security...

CVE-2025-59369

A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnerability to potentially execute arbitrary SQL queries, leading to unauthorized data access. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security...

CVE-2025-59369

A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnerability to potentially execute arbitrary SQL queries, leading to unauthorized data access. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security...

CVE-2025-59369

CVE-2025-59369 affects ASUS Router firmware through the bwdpi component, where a SQL injection vulnerability exists. The root cause described across connected docs is improper handling/validation of SQL statements, enabling a remote, authenticated attacker to potentially execute arbitrary SQL que...