PT-2025-36340

Name of the Vulnerable Software and Affected Versions: Roo Code versions 3.25.23 and below Description: Roo Code, an AI-powered autonomous coding agent, is susceptible to a flaw where VS Code workspace configuration files .code-workspace lack the same protection as files within the .vscode folder...

Linux Distros Unpatched Vulnerability : CVE-2022-22935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to forc...

MongoDB Server 安全漏洞

MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server versions prior to v6.0.25, prior to v7.0.22, an...

WordPress plugin Stagtools 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.

...

CVE-2024-13066

Improper Restriction of Rendered UI Layers or Frames vulnerability in Akinsoft LimonDesk allows iFrame Overlay, CAPEC - 103 - Clickjacking. This issue affects LimonDesk: from s1.02.14 before v1.02.17...

CVE-2025-1740

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass, Password Recovery Exploitation, Brute Force. This issue affects MyRezzta: from s2.03.01 before v2.05.01...

CVE-2025-58272

CVE-2025-58272 affects Web Caster V130 firmware versions 1.08 and earlier. The issue is a CSRF (CWE-352) that can cause a logged-in user, who visits a malicious page, to have product settings unintentionally changed. Documentation from multiple sources confirms the affected product and impact. Th...

LimonDesk 安全漏洞

LimonDesk is a real-time chat, work order ticketing, and other features from LimonDesk Turkey. A security vulnerability exists in LimonDesk s1.02.14 through versions prior to v1.ylabel17, which stems from an improperly restricted rendering UI layer or frame, which could lead to iframe overrides a...

Akinsoft MyRezzta 跨站脚本漏洞

Akinsoft MyRezzta is an online food ordering system from the Turkish company Akinsoft. A cross-site scripting vulnerability exists in Akinsoft MyRezzta versions prior to s2.02.02 to v2.05.01, which stems from improper input neutralization during web page generation and can lead to cross-site...

Linux Distros Unpatched Vulnerability : CVE-2012-5153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers to cause a denial of service or possibly have unspecified other...

Linux Distros Unpatched Vulnerability : CVE-2019-3993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by...

Linux Distros Unpatched Vulnerability : CVE-2025-25304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to version 5.26.0 of vega and...

PT-2025-35700

Name of the Vulnerable Software and Affected Versions: Akinsoft MyRezzta versions s2.02.02 through v2.05.00 Description: An authorization bypass exists in Akinsoft MyRezzta due to a user-controlled key, allowing for forceful browsing. Recommendations: Update Akinsoft MyRezzta to version 2.05.01 o...

Drupal Acquia DAM module < 1.1.5 - Unauthenticated Multiple Vulnerabilities vulnerability

Unauthenticated Multiple Vulnerabilities vulnerability discovered by Brandon Goodwin bgoodie in WordPress Module Acquia DAM versions 1.1.5...

Linux Distros Unpatched Vulnerability : CVE-2016-3176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication servic...

SAMSUNG S Assistant 安全漏洞

SAMSUNG S Assistant is a cell phone application from the South Korean company Samsung SAMSUNG. It provides a cell phone management function. A security vulnerability exists in SAMSUNG S Assistant prior to version 9.3.2, which stems from insufficient validation of intent by...

PT-2025-35694

Name of the Vulnerable Software and Affected Versions S Assistant versions prior to 9.3.2 Description Improper verification of intent by ExternalBroadcastReceiver in S Assistant allows local attackers to modify itinerary information. Recommendations Update S Assistant to version 9.3.2 or later...

CVE-2024-12972 XSS in Akinsoft's OctoCloud

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

Linux Distros Unpatched Vulnerability : CVE-2020-35496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There's a flaw in bfdpefscanstartaddress of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump ...