PT-2025-14891 · Edimax · Edimax Ac1200 Wave 2 Dual-Band Gigabit Router Br-6478Ac V3

Name of the Vulnerable Software and Affected Versions: Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 version 1.0.15 Description: A command injection issue was discovered via the fota url in the "/boafrm/formLtefotaUpgradeQuectel" API endpoint. This allows for potential exploitation. ...

PT-2025-14921 · Data443 Risk Mitigation · Posts Footer Manager

Name of the Vulnerable Software and Affected Versions: Data443 Risk Migitation, Inc. Posts Footer Manager versions n/a through 2.2.0 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. Specifically, it is a Stor...

PT-2025-14988 · Unknown · Dimitri Grassi Salon Booking System

Name of the Vulnerable Software and Affected Versions: Dimitri Grassi Salon booking system versions n/a through 10.10.7 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured access control security levels...

PT-2025-14832 · Unknown · Codeastro Student Grading System

Name of the Vulnerable Software and Affected Versions: CodeAstro Student Grading System version 1.0 Description: A critical issue was found in the CodeAstro Student Grading System, affecting an unknown part of the file studentsubject.php. The manipulation of the studentId argument leads to SQL...

PT-2025-15046

Name of the Vulnerable Software and Affected Versions Apache Airflow Common SQL Provider versions prior to 1.24.1 Description The issue is related to an SQL Injection vulnerability in the Apache Airflow Common SQL Provider. This vulnerability allows an authenticated UI user to inject arbitrary SQ...

PT-2025-14920 · Data443 Risk Mitigation · Welcome Bar

Name of the Vulnerable Software and Affected Versions: Data443 Risk Migitation, Inc. Welcome Bar versions through 2.0.4 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. Specifically, it is a Stored XSS...

WordPress RegistrationMagic plugin <= 6.0.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin RegistrationMagic versions = 6.0.4.3...

CVE-2025-31483

Miniflux is a feed reader. Due to a weak Content Security Policy on the /proxy/ route, an attacker can bypass the CSP of the media proxy and execute cross-site scripting when opening external images in a new tab/window. To mitigate the vulnerability, the CSP for the media proxy has been changed...

CVE-2025-31483 Stored XSS in Miniflux Media Proxy due to improper Content-Security-Policy configuration

Miniflux is a feed reader. Due to a weak Content Security Policy on the /proxy/ route, an attacker can bypass the CSP of the media proxy and execute cross-site scripting when opening external images in a new tab/window. To mitigate the vulnerability, the CSP for the media proxy has been changed...

CVE-2024-53868

A flaw was found in Apache Traffic Server. This vulnerability allows request smuggling via chunked messages, potentially leading to security bypass. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

CVE-2025-3121

A vulnerability was found in PyTorch 2.6.0 that affects the torch.jit.jitmodulefromflatbuffer function, where manipulation leads to memory corruption. Local access is required for this attack. Mitigation Mitigation for this issue is either not available or the currently available options do not...

CVE-2025-3136

A vulnerability was found in PyTorch that affects the torch.cuda.memory.cachingallocatordelete function in the c10/cuda/CUDACachingAllocator.cpp file. An attack must be conducted locally. The manipulation leads to memory corruption. Mitigation Mitigation for this issue is either not available or...

CVE-2025-30218

A flaw was found in the Next.js package. To mitigate CVE-2025-29927, Next.js validated the x-middleware-subrequest-id, which persisted across multiple incoming requests. However, this subrequest ID is sent to all requests, even if the destination is not the same host as the Next.js application...

CVE-2025-3122

A NULL pointer write vulnerability was found in the wabt::interp::anonymous namespace::BinaryReaderInterp::BeginFunctionBody function within glslang. This issue occurs when processing certain files, leading to a potential application crash. Mitigation Mitigation for this issue is either not...

CVE-2025-32053

A flaw was found in libsoup. A vulnerability in snifffeedorhtml and skipinsignificantspace functions may lead to a heap buffer over-read. Mitigation No mitigation is currently available for this vulnerability...

CVE-2025-32052

A flaw was found in libsoup. A vulnerability in the sniffunknown function may lead to heap buffer over-read. Mitigation No mitigation is currently available for this vulnerability...

CVE-2025-32051

A flaw was found in libsoup. The libsoup soupuridecodedatauri function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service DoS. Mitigation No mitigation is currently available for this vulnerability...

CVE-2025-32050

A flaw was found in libsoup. The libsoup appendparamquoted function may contain an overflow bug resulting in a buffer under-read. Mitigation No mitigation is currently available for this vulnerability...

CVE-2025-32049

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service DoS. Mitigation No mitigation is currently available for this vulnerability...

CVE-2025-3155

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment. Mitigation Currently, no mitigation is available for this...