CVE-2025-50107

...

PT-2025-29600 · Oracle · Peoplesoft 8.60 +2

Name of the Vulnerable Software and Affected Versions: Oracle PeopleSoft versions 8.60 Oracle PeopleSoft versions 8.61 Oracle PeopleSoft versions 8.62 Description: A vulnerability exists within the PeopleSoft Enterprise PeopleTools component PIA Core Technology that allows an unauthenticated...

The vulnerability of the Netlogon service in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Netlogon service in Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2025-29311 · 1000 Projects · Abc Courier Management

Name of the Vulnerable Software and Affected Versions: 1000projects ABC Courier Management version 1.0 Description: A critical issue exists in 1000projects ABC Courier Management version 1.0. The vulnerability is due to a SQL injection flaw within an unknown functionality of the /add...

GHSA-R7FM-3PQM-WW5W Chall-Manager's scenario decoding process does not check for zip bombs

Impact When decoding a scenario i.e. a zip archive, the size of the decoded content is not checked, potentially leading to zip bombs decompression. Exploitation does not require authentication nor authorization, so anyone can exploit it. It should nonetheless not be exploitable as it is highly...

GHSA-3GV2-V3JX-R9FH Chall-Manager is vulnerable to Path Traversal when extracting/decoding a zip archive

Impact When decoding a scenario i.e. a zip archive, the path of the file to write is not checked, potentially leading to zip slips. Exploitation does not require authentication nor authorization, so anyone can exploit it. It should nonetheless not be exploitable as it is highly recommended to bur...

Matrix Rust SDK vulnerable to SQL Injection through its EventCache implementation

An SQL injection vulnerability in the EventCache::findeventwithrelations method of matrix-sdk 0.11 and 0.12 allows malicious room members to execute arbitrary SQL commands in Matrix clients that directly pass relation types provided by those room members into this method, when used with the defau...

CVE-2025-53176

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

PT-2025-28961 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena® affected versions not specified Description: A security issue allows for remote code execution in Rockwell Automation Arena®. A specially crafted DOE file can cause Arena Simulation to write beyond allocated object...

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A security vulnerability exists in Microsoft Windows. The vulnerability is exploited by attackers to perform spoofing attacks...

PT-2025-28496 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Substance3D - Designer versions 14.1 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

CVE-2025-53176

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

PT-2025-28237 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue has been discovered, affecting the file /panel/admin-profile.php. The manipulation of the adminname argument leads to SQL injection. This issue can be...

PT-2025-28471 · Ibm · Ibm Sterling File Gateway

Name of the Vulnerable Software and Affected Versions: IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4 Description: The issue could disclose sensitive installation directory information to an authenticated user, which could be...

PT-2025-28139 · Utt · Utt Hiper 840G

Name of the Vulnerable Software and Affected Versions: UTT HiPER 840G versions up to 3.1.1-190328 Description: A critical issue has been found in the processing of the file /goform/formPictureUrl. The manipulation of the importpictureurl argument leads to buffer overflow. This issue can be...

PT-2025-28099 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A stack overflow risk exists when vector images are parsed during file preview. Successful exploitation of this issue may affect the file preview function. Recommendations: At the moment,...

The vulnerability of the lpfc_sli_flush_io_rings() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the lpfcsliflushiorings function in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-27883 · Unknown · Lmsace Connect

Name of the Vulnerable Software and Affected Versions: LMSACE Connect versions n/d through 3.4 Description: The issue is related to a lack of authorization in LMSACE Connect, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For versions n/d...

PT-2025-29174 · Tenda · Tenda O3V2

Name of the Vulnerable Software and Affected Versions: Tenda O3V2 version 1.0.0.123880 Description: A critical issue exists in Tenda O3V2 due to a stack-based buffer overflow. The vulnerability is located in the fromPingResultGet function within the /goform/setPing file of the httpd component...

PT-2025-27971 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0-rc7-syzkaller-gd7fa1af5b33e Description: A vulnerability in the Linux kernel has been resolved, related to the io uring/rsrc module. The issue occurs when the buffer count with offset for cloning exceeds...