PT-2025-9099 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A crash occurs due to an unknown read issue. The crash state involves functions such as insert free, chunk obj alloc, and pdfi object alloc. Recommendations: At the moment, there is no...

PT-2025-9118 · Dario Health · Dario Application Database/Internet-Based Server Infrastructure

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue allows observation of the cookie policy via built-in browser tools. In the presence of cross-site scripting XSS, this could potentially lead to full session compromise...

PT-2025-8935 · Trivision · Camera Nc227Wf

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A security issue exists in the transmission of passwords through query strings, potentially exposing confidential information to third parties. Recommendations: At the moment, there is no...

PT-2025-8818

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the mi enum attr function in the fs/ntfs3 component. The function interface has been extended with an...

PT-2025-8756 · Autodzee · Autodzee

Name of the Vulnerable Software and Affected Versions: autodzee affected versions not specified Description: The autodzee package, a Python library that bypasses Deezer API restrictions to download music, was found to exfiltrate user data to a hardcoded server. This could potentially be used for...

CVE-2025-27110 Libmodsecurity3 has possible bypass of encoded HTML entities

Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. A bug that exists only in Libmodsecurity3 version 3.0.13 means that, in 3.0.13, Libmodsecurit...

PT-2025-7817 · Zephyrproject Rtos +1 · Zephyr

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A lack of input validation allows for out of bounds reads caused by malicious or malformed packets. Recommendations: At the moment, there is no information about a newer version that contain...

PT-2025-34421

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The parse longname function in the Ceph subsystem does not guarantee a NUL-terminated string when using strrchr, leading to a potential issue. The function utilizes kmemdup nul to crea...

PT-2025-7785 · Red Os · Red Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a reflected XSS risk due to insufficient sanitizing in the question bank filter. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-6685 · Unknown · Oshine Modules

Name of the Vulnerable Software and Affected Versions: Oshine Modules affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This can lead to the execution of malicious...

CVE-2025-25289

@octokit/request-error is an error class for Octokit request errors. Starting in version 1.0.0 and prior to version 6.1.7, a Regular Expression Denial of Service ReDoS vulnerability exists in the processing of HTTP request headers. By sending an authorization header containing an excessively long...

CVE-2025-25289

CVE-2025-25289 describes a ReDoS vulnerability in the octokit request-error handling. Prior to v6.1.7, an authorization header containing a long sequence of spaces followed by a newline and “@” could cause exponential regular-expression processing, leading to high resource consumption and potenti...

PT-2025-7259 · Net Snmp · Net-Snmp

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: snmp config when, netsnmp config process memory list,...

PT-2025-7053 · Zulip · Zulip

Name of the Vulnerable Software and Affected Versions: Zulip affected versions not specified Description: A weekly cron job in Zulip demotes channels to being "inactive" after they have not received traffic for 180 days. However, upon doing so, an event was sent to all users in the organization,...

PT-2025-6814 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a vulnerability notification. No further details are provided about the nature of the issue, potentially affected device...

CVE-2025-24896 Misskey allows token to remain valid in cookie after signing out

Misskey is an open source, federated social media platform. Starting in version 12.109.0 and prior to version 2025.2.0-alpha.0, a login token named token is stored in a cookie for authentication purposes in Bull Dashboard, but this remains undeleted even after logout is performed. The primary...

PT-2025-6127 · Sap · Sap Businessobjects Bi Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Platform BI Launchpad affected versions not specified Description: The issue arises from insufficient handling of user input, resulting in a Cross-Site Scripting XSS vulnerability. This allows an unauthenticated attacker t...

PT-2025-6235 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected reason, but specific details about the problem are not provided. There is a mention of not waiting for...

PT-2025-6185 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The reason for the rejection of the issue is mentioned, but no further details are provided about the issue itself. No information is available...

PT-2025-6233 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The reason for the rejection of the issue is mentioned, but no further details are provided about the issue itself. No information is available...