Lightgallery - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-069

This module integrates Drupal with LightGallery, enabling the use of the LightGallery library with any image field or view. The module does not adequately sanitize user input in the image field’s "alt" attribute, potentially allowing cross-site scripting XSS attacks when tags or scripts are...

CVE-2025-47853

In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible...

CVE-2025-47853

In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible...

CVE-2025-47852

In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possible...

CVE-2025-47277

vLLM, an inference and serving engine for large language models LLMs, has an issue in versions 0.6.5 through 0.8.4 that ONLY impacts environments using the PyNcclPipe KV cache transfer integration with the V0 engine. No other configurations are affected. vLLM supports the use of...

CVE-2025-47853

In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible...

CVE-2025-47853

CVE-2025-47853 affects JetBrains TeamCity prior to 2025.03.2 and involves stored XSS via the Jira integration. Affected component is TeamCity/Jira integration; root cause indicated as cross-site scripting in the Jira integration flow. Impact is limited to confidentiality and integrity (partial) w...

CVE-2025-47853

In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible...

CVE-2025-47852

In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possible...

CVE-2025-47852

In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possible...

CVE-2025-47852

CVE-2025-47852 describes a stored XSS vulnerability in JetBrains TeamCity prior to version 2025.03.2, originating from the YouTrack integration. The issue allows injection of malicious script/HTML that could affect users processing YouTrack-related data in TeamCity. The connected sources indicate...

CVE-2025-47277 vLLM Allows Remote Code Execution via PyNcclPipe Communication Service

vLLM, an inference and serving engine for large language models LLMs, has an issue in versions 0.6.5 through 0.8.4 that ONLY impacts environments using the PyNcclPipe KV cache transfer integration with the V0 engine. No other configurations are affected. vLLM supports the use of...

CVE-2025-47277 vLLM Allows Remote Code Execution via PyNcclPipe Communication Service

vLLM, an inference and serving engine for large language models LLMs, has an issue in versions 0.6.5 through 0.8.4 that ONLY impacts environments using the PyNcclPipe KV cache transfer integration with the V0 engine. No other configurations are affected. vLLM supports the use of...

CISA Releases Thirteen Industrial Control Systems Advisories

CISA released thirteen Industrial Control Systems ICS advisories on May 20, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-140-01 ABUP IoT Cloud Platform ICSA-25-140-02 National Instruments Circuit Design Sui...

PT-2025-22281 · Jetbrains · Youtrack +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2025.03.2 Description: The issue allows for stored XSS via YouTrack integration. Recommendations: For versions prior to 2025.03.2, update to version 2025.03.2 or later to resolve the issue...

JetBrains TeamCity 跨站脚本漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. JetBrains TeamCity suffers from a cross-site scripting vulnerability, which originates in the YouTrack integration, that can be exploited by an attacker to inject malicio...

PT-2025-22282 · Jetbrains +1 · Teamcity +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2025.03.2 Description: The issue allows for stored XSS via Jira integration. Recommendations: For versions prior to 2025.03.2, update to version 2025.03.2 or later to resolve the issue...

JetBrains TeamCity 跨站脚本漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. JetBrains TeamCity suffers from a cross-site scripting vulnerability that originates in the Jira integration and can be exploited by an attacker to inject malicious scrip...

Your First Spring AI 1.0 Application

Your First Spring AI 1.0 Application by Dr. Mark Pollack, Christian Tsolov, and Josh Long Hi, Spring fans! Spring AI is live on the Spring Initializr and everywhere fine bytes might be had. Ask your doctor if AI is right for you! It's an amazing time to be a Java and Spring developer. There's nev...

IBM Infosphere Information Server Information Disclosure Vulnerability (CNVD-2025-12591)

Infosphere Information Server is an enterprise-class software for data integration and data quality from IBM. A security vulnerability exists in Infosphere Information Server version 11.7. An attacker could exploit the vulnerability to obtain sensitive information...