CVE-2024-55656 RedisBloom Integer Overflow Remote Code Execution Vulnerability

RedisBloom adds a set of probabilistic data structures to Redis. There is an integer overflow vulnerability in RedisBloom, which is a module used in Redis. The integer overflow vulnerability allows an attacker a redis client which knows the password to allocate memory in the heap lesser than the...

CVE-2024-55656 RedisBloom Integer Overflow Remote Code Execution Vulnerability

RedisBloom adds a set of probabilistic data structures to Redis. There is an integer overflow vulnerability in RedisBloom, which is a module used in Redis. The integer overflow vulnerability allows an attacker a redis client which knows the password to allocate memory in the heap lesser than the...

PT-2025-5654 · Git +1 · Opencv

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported, classified as an UNKNOWN READ. The crash state involves several functions: png free data, png destroy info struct, and png...

CVE-2024-12535

The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to read configuration settings and predefin...

CVE-2024-12535 Host PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure

The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to read configuration settings and predefin...

SUSE CVE-2024-56646

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid possible NULL deref in modifyprefixroute syzbot found a NULL deref 1 in modifyprefixroute, caused by one fib6info without a fib6table pointer set. This can happen for net-ipv6.fib6nullentry 1 Oops: general protection...

PT-2025-1888 · WordPress · Host Php Info

Name of the Vulnerable Software and Affected Versions: Host PHP Info plugin for WordPress versions up to, and including, 1.0.4 Description: The issue allows unauthorized access to data due to a missing capability check when including the phpinfo function. This makes it possible for unauthenticate...

PT-2025-4454 · Unknown · Athemeart Store Commerce

Name of the Vulnerable Software and Affected Versions: aThemeArt Store Commerce versions 1.2.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, allowing DOM-Based XSS. This is a Cross-site Scripting vulnerability. Recommendations: For...

PT-2025-2645 · Unknown · Themeglow Jobboard

Name of the Vulnerable Software and Affected Versions: ThemeGlow JobBoard Job listing versions 1.2.6 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can be exploited by uploading a...

PT-2025-4534 · Unknown · St Gallery Wp

Name of the Vulnerable Software and Affected Versions: ST Gallery WP versions 1.0.8 and earlier Description: The issue is related to a missing authorization vulnerability in Beautiful Templates ST Gallery WP, which allows exploiting incorrectly configured access control security levels...

WordPress Host PHP Info plugin <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability

Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Host PHP Info versions = 1.0.4...

PT-2025-1030 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: The issue is related to a component of the Android operating system, specifically a buffer copy without size check in the Media Framework. It allows an attacker to escalate...

Malicious code in payouts-banking-info (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d795b5a9cc9952f39cd020e529f31f96f837544ae12bdb31f13d66970d9824d4 Any computer that has this package install...

MAL-2025-2 Malicious code in payouts-banking-info (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d795b5a9cc9952f39cd020e529f31f96f837544ae12bdb31f13d66970d9824d4 Any computer that has this package install...

PT-2025-2505 · Creativethemes · Creativthemes Point

Name of the Vulnerable Software and Affected Versions: Creativthemes Point versions n/a through 1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF problem, which allows Cross Site Request Forgery. This problem affects Creativthemes Point, enabling unauthorized actions on t...

PT-2025-3180 · Foliovision · Fv Descriptions

Name of the Vulnerable Software and Affected Versions: Foliovision FV Descriptions versions n/a through 1.4 Description: The issue affects Foliovision FV Descriptions, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-site Scripting...

PT-2025-1517 · Unknown · Quill Forms

Name of the Vulnerable Software and Affected Versions: Quill Forms versions 3.3.0 and earlier Description: The issue is related to missing authorization in Quill Forms, allowing exploitation of incorrectly configured access control security levels. Recommendations: For Quill Forms versions 3.3.0...

PT-2025-2484 · Desertthemes · Newsmash

Name of the Vulnerable Software and Affected Versions: DesertThemes NewsMash versions 1.0.0 through 1.0.34 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 1.0.0...

PT-2025-30763

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential null pointer dereference issue was identified in the tegra crtc reset function within the DRM/tegra subsystem of the Linux kernel. Specifically, memory is allocated using...

PT-2025-2353 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A CVE record was rejected due to non-usage, following CNA rules. No information is provided about the issue itself, including general details or potential impacts...