PT-2025-15185

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A DLL Search Order Hijacking issue potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code. Recommendations At the moment,...

PT-2025-4650 · Ukrsolution · Ukrsolution Barcode Scanner With Inventory & Order Manager

Name of the Vulnerable Software and Affected Versions: UkrSolution Barcode Scanner with Inventory & Order Manager versions 1.6.7 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can...

Cisco Catalyst Center Detection

Binary data ciscocatalystcenterversion.nbin...

Fedora 41 : stb (2025-6a64d3b2fc)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-6a64d3b2fc advisory. Add another patch for the root cause of CVE-2021-45340. We already have a patch for CVE-2021-45340, but adding this new patch may prevent a related, unproven...

Fedora 41 : redict (2025-d6c0319427)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d6c0319427 advisory. update to 7.3.2 fixes CVE-2024-46981 fixes CVE-2024-51741 fixes CVE-2024-31449 fixes CVE-2024-31227 fixes CVE-2024-31228 Tenable has extracted the...

Plugin Telemetry

Provide telemetry on plugin runs. No source data...

AWS RedShift Python Connector Detection

Binary data pythonredshiftconnectordetect.nbin...

RedShift JDBC Installed

Binary data redshiftjdbcinstalled.nbin...

SonarSource SonarQube Server Web Interface Detection

Binary data sonarsourcesonarqubeserverwebdetect.nbin...

Wordfence Intelligence Weekly WordPress Vulnerability Report (January 6, 2025 to January 12, 2025)

Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability , for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we...

CBL Mariner 2.0 Security Update: python-jinja2 (CVE-2024-22195)

The version of python-jinja2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-22195 advisory. - Jinja is an extensible templating engine. Special placeholders in the template allow writing code...

WordPress Barcode Scanner and Inventory manager plugin <= 1.6.7 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by l8BL Patchstack Alliance in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.6.7...

NorthGrid Proself Installed (Linux)

Binary data northgridproselflinuxinstalled.nbin...

NorthGrid Proself Installed (Windows)

Binary data northgridproselfwininstalled.nbin...

KB5049983: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (January 2025)

The remote Windows host is missing security update 5049983. It is, therefore, affected by multiple vulnerabilities - Windows Reliable Multicast Transport Driver RMCAST Remote Code Execution Vulnerability CVE-2025-21307 - Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-21223...

Security Updates for Microsoft Visual Studio 2022 17.6 / 17.8 / 17.10 Products (January 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - An undisclosed .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CVE-2025-21176 - An undisclosed Visual Studio Remote Code Execution...

KB5050048: Windows Server 2012 R2 Security Update (January 2025)

The remote Windows host is missing security update 5050048. It is, therefore, affected by multiple vulnerabilities - Windows Reliable Multicast Transport Driver RMCAST Remote Code Execution Vulnerability CVE-2025-21307 - Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-21223...

Security Updates for Microsoft Visual Studio 2019 16.11 / 2017 15.9 Products (January 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - An undisclosed .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CVE-2025-21176 - An undisclosed Visual Studio Remote Code Execution...

KB5050013: Windows 10 LTS 1507 Security Update (January 2025)

The remote Windows host is missing security update 5050013. It is, therefore, affected by multiple vulnerabilities - Windows Reliable Multicast Transport Driver RMCAST Remote Code Execution Vulnerability CVE-2025-21307 - Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-21223...

Oracle Linux 8 : thunderbird (ELSA-2025-0281)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-0281 advisory. 128.6.0-3.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.6.0 - Add OpenELA debranding 128.6.0-3 - Update to 128.6.0 build3...