PT-2025-29219 · WordPress · Broken Link Notifier

Name of the Vulnerable Software and Affected Versions: Broken Link Notifier plugin for WordPress versions prior to 1.3.1 Description: The plugin is susceptible to Server-Side Request Forgery SSRF. This allows unauthenticated attackers to make web requests to arbitrary locations originating from t...

PT-2025-29862 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.5 Description: WeGIA is an open source web manager. A Stored Cross-Site Scripting XSS vulnerability exists in the adicionar enfermidade.php endpoint. This allows attackers to inject malicious scripts into the nome...

PT-2025-29269 · Postiz · Postiz

Name of the Vulnerable Software and Affected Versions: Postiz versions 1.45.1 through 1.62.3 Description: The Postiz frontend application allows an attacker to inject arbitrary HTTP headers into the middleware pipeline. This enables a server-side request forgery SSRF condition, allowing...

Fedora 42 : thunderbird (2025-c0d9be4e68)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c0d9be4e68 advisory. Update to 128.12.0 https://www.thunderbird.net/en-US/thunderbird/128.12.0esr/releasenotes/...

CVE-2025-2521

The Honeywell Experion PKS and OneWireless WDM contains a Memory Buffer vulnerability in the component Control Data Access CDA. An attacker could potentially exploit this vulnerability, leading to an Overread Buffers, which could result in improper index validation against buffer borders leading ...

CVE-2025-2520 Dereferencing of an uninitialized pointer leads to denial of service.

The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer EPA communications. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which results in a dereferencing of an uninitialized pointer leading to...

BIT-TOMCAT-2025-46701 Apache Tomcat: Security constraint bypass for CGI scripts

Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet. This issue affects Apache Tomcat: from 11.0.0 through 11.0.6, from 10.1.0 through...

RHSA-2025:10742 Red Hat Security Advisory: gnome-remote-desktop security update

Bulletin has no description...

RHSA-2025:10271 Red Hat Security Advisory: OpenShift Container Platform 4.12.78 packages and security update

Bulletin has no description...

PT-2025-29194 · Tenda · Tenda Fh451

Name of the Vulnerable Software and Affected Versions: Tenda FH451 versions up to 1.0.0.9 Description: A critical vulnerability exists in Tenda FH451. The issue affects the fromAddressNat function within the /goform/addressNat file of the POST Request Handler component. Manipulation of the page...

PT-2025-29103 · Ecovacs · Ecovacs Deebot T10

Name of the Vulnerable Software and Affected Versions: Ecovacs Deebot T10 version 1.7.2 Description: The Ecovacs Deebot T10 transmits Wi-Fi credentials in cleartext during the pairing process. Recommendations: Update to a newer version that addresses this issue. At the moment, there is no...

PT-2025-29130 · Alteryx · Alteryx Server

Name of the Vulnerable Software and Affected Versions: Alteryx Server version 2023.1.1.460 Description: A cross-site scripting XSS issue exists in Alteryx Server. This allows remote attackers to inject arbitrary web script or HTML through the notification body. Recommendations: Update Alteryx...

PT-2025-28973 · Gallagher · Gallagher T-Series Reader

Name of the Vulnerable Software and Affected Versions: Gallagher T-Series Reader versions prior to 9.20.250213a Gallagher T-Series Reader versions prior to 9.10.250213a Gallagher T-Series Reader versions prior to 9.00.250619a Gallagher T-Series Reader versions 8.90 and earlier Description: A...

PT-2025-29152

Name of the Vulnerable Software and Affected Versions: llama.cpp affected versions not specified Description: An integer overflow in the gguf init from file impl function within ggml/src/gguf.cpp can lead to a Heap Out-of-Bounds Read/Write. Recommendations: Update to a version containing commit...

CVE-2025-53620

@builder.io/qwik-city is the meta-framework for Qwik. When a Qwik Server Action QRL is executed it dynamically load the file containing the symbol. When an invalid qfunc is sent, the server does not handle the thrown error. The error then causes Node JS to exit. This vulnerability is fixed in...

RHSA-2025:10676 Red Hat Security Advisory: golang security update

Bulletin has no description...

RHSA-2025:10635 Red Hat Security Advisory: gnome-remote-desktop security update

Bulletin has no description...

RHSA-2025:10630 Red Hat Security Advisory: libxml2 security update

Bulletin has no description...

RHSA-2025:10585 Red Hat Security Advisory: jq security update

Bulletin has no description...

PT-2025-29254

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 21.2R3-S9 Juniper Networks Junos OS versions 21.4 prior to 21.4R3-S10 Juniper Networks Junos OS versions 22.2 prior to 22.2R3-S6 Juniper Networks Junos OS versions 22.4 prior to 22.4R3-S6 Juniper...