CVE-2025-22693

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows SQL Injection.This issue affects Contest Gallery: from n/a through = 25.1.0...

DSA-5857-1 openjdk-17 - security update

Bulletin has no description...

CGA-98G3-7XQQ-W3F7

Bulletin has no description...

SUSE-SU-2025:0301-1 Security update for buildah

This update for buildah fixes the following issues: - Update to version 1.35.5 - CVE-2024-11218: Fix TOCTOU error when bind and cache mounts use 'src' values. bsc1236272...

OpenPanel 0.3.4 Directory Traversal Vulnerability

Exploit Title: OpenPanel 0.3.4 - Directory Traversal in Copy Function of File Manager Exploit Author: Korn Chaisuwan, Punthat Siriwan, Pongtorn Angsuchotmetee Vendor Homepage: https://openpanel.com/ Software Link: https://openpanel.com/ Version: 0.3.4 Tested on: macOS CVE : CVE-2024-53582 POST...

Security Bulletin: Vulnerability in pypa/setuptools affects IBM watsonx Assistant for IBM Cloud Pak for Data

Summary A potential vulnerability in pypa/setuptools has been identified that affects IBM watsonx Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-6345 DESCRIPTION: pypa/setuptools could...

PT-2025-4054 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version V5 Description: A problem was found in some unknown functionality of the file "/todoDetail.jsp". The manipulation of the argument curpage leads to cross site scripting. The attack may be launched remotely. The issue has...

SUSE-SU-2025:0277-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: Update to version 3.3.1611.0: - CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5 bsc1235575 Full changelog: https://github.com/aws/amazon-ssm-agent/compare/3.1.1260.0...3.3.1611.0...

Advisory ROSA-SA-2025-2667

software: sqlite 3.41.2 OS: ROSA-CHROME packageevrstring: sqlite-3.41.2-2 CVE-ID: CVE-2023-7104 BDU-ID: 2024-00480 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the sessionReadRecord function of the ext/session/sqlite3session.c file of the SQLite database management system is related to a buffer...

Advisory ROSA-SA-2025-2648

software: ghostscript 9.54.0 OS: ROSA-CHROME packageevrstring: ghostscript-9.54.0 CVE-ID: CVE-2023-43115 BDU-ID: 2023-06329 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the gdevijs.c component of the Ghostscript document processing software suite is related to incorrect code generation...

PT-2025-1362 · Emote Interactive · Remote Mouse Server

Name of the Vulnerable Software and Affected Versions: Remote Mouse Server by Emote Interactive version 4.110 Description: The issue arises due to the product's reliance on a trivial substitution cipher sent in cleartext and its use of a default password when no password is set by the user. This...

CVE-2025-24538

Cross-Site Request Forgery CSRF vulnerability in Slava Abakumov BuddyPress Groups Extras buddypress-groups-extras allows Cross Site Request Forgery.This issue affects BuddyPress Groups Extras: from n/a through = 3.6.10...

CVE-2025-24664

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows SQL Injection.This issue affects LTL Freight Quotes – Worldwide Express Edition:...

Advisory ROSA-SA-2025-2577

Software: wpasupplicant 2.11 WASP: ROSA-CHROME packageevrstring: wpasupplicant-2.11-3 CVE-ID: CVE-2023-52160 BDU-ID: 2024-01426 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Protected Extensible Authentication Protocol PEAP implementation of the Wi-Fi WPA Supplicant secure access client is...

PT-2025-3353 · Guangzhou Polar Future Culture Technology Co. · University Search

Name of the Vulnerable Software and Affected Versions: Guangzhou Polar Future Culture Technology Co., Ltd University Search iOS version 2.27.0 Description: The issue allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For Guangzhou Polar Future...

CVE-2025-24659

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Blind SQL Injection.This issue affects WPDM – Premium Packages: from n/a through = 5.9.6...

CVE-2025-24561

Cross-Site Request Forgery CSRF vulnerability in awcode ReviewsTap reviewstap allows Stored XSS.This issue affects ReviewsTap: from n/a through = 1.1.2...

Dell Display Manager Competitive Conditions Vulnerability

Dell Display Manager is a software for managing and adjusting Dell monitor settings. A competitive condition vulnerability exists in versions of Dell Display Manager prior to 2.3.2.20, which arises because shared resources are not properly synchronized during installation. An attacker could use...

PT-2025-5135 · Unknown · Notfound Bauernregeln

Name of the Vulnerable Software and Affected Versions: NotFound Bauernregeln versions 1.0.1 and below Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means that an attacker can...

CVE-2025-23733

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sayoko SC Simple Zazzle sc-simple-zazzle allows Reflected XSS.This issue affects SC Simple Zazzle: from n/a through = 1.1.6...