PT-2025-26976

Name of the Vulnerable Software and Affected Versions: cpp-httplib version 0.21.0 Description: The issue arises when multiple HTTP header fields are passed to the library, causing it to fail to limit the number of headers. As a result, the memory associated with these headers is not released when...

PT-2025-26743

Name of the Vulnerable Software and Affected Versions: Quest KACE Systems Management Appliance SMA versions 13.0.x through 13.0.384 Quest KACE Systems Management Appliance SMA versions 13.1.x through 13.1.80 Quest KACE Systems Management Appliance SMA versions 13.2.x through 13.2.182 Quest KACE...

PT-2025-26740

Name of the Vulnerable Software and Affected Versions Quest KACE Systems Management Appliance SMA versions 13.0.x prior to 13.0.385 Quest KACE Systems Management Appliance SMA versions 13.1.x prior to 13.1.81 Quest KACE Systems Management Appliance SMA versions 13.2.x prior to 13.2.183 Quest KACE...

Security Bulletin: NVIDIA AIStore on Kubernetes - June 2025

NVIDIA has released a software update for NVIDIA® AIStore on Kubernetes. To protect your system, download and install this software update from the AIStore on Kubernetes Github Go to NVIDIA Product Security...

PT-2025-26779 · Hikka · Hikka

Name of the Vulnerable Software and Affected Versions: Hikka versions prior to 1.6.2 Description: A vulnerability in Hikka Telegram userbot allows an unauthenticated attacker to gain access to a victim's Telegram account and full access to the server. The issue affects all users of versions below...

PT-2025-26741

Name of the Vulnerable Software and Affected Versions: Quest KACE Systems Management Appliance SMA versions 13.0.x through 13.0.384 Quest KACE Systems Management Appliance SMA versions 13.1.x through 13.1.80 Quest KACE Systems Management Appliance SMA versions 13.2.x through 13.2.182 Quest KACE...

JVN#21624250: Inefficient regular expressions in GROWI

GROWI provided by GROWI, Inc. contains the following vulnerability. Inefficient regular expression complexity CWE-1333 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N Base Score 5.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Base Score 4.3 CVE-2025-43880 Impact A logged-in user...

Security Bulletin: NVIDIA Megatron LM - June 2025

NVIDIA has released a software update for NVIDIA® Megatron LM. To protect your system, clone or update this software to version 0.12.1 or later from Releases · NVIDIA/Megatron-LM on GitHub. Go to NVIDIA Product Security...

CVE-2025-52558 ChangeDetection.io XSS in watch overview

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors in filters from website page change detection watches were not being filtered resulting in a cross-site scripting XSS vulnerability. This...

RHSA-2025:9310 Red Hat Security Advisory: gimp:2.8 security update

Bulletin has no description...

RHSA-2025:9309 Red Hat Security Advisory: gimp:2.8 security update

Bulletin has no description...

RHSA-2025:9303 Red Hat Security Advisory: xorg-x11-server and xorg-x11-server-Xwayland security update

Bulletin has no description...

Advisory ROSA-SA-2025-2899

Software: httpd 2.4.37 OS: ROSA Virtualization 2.1 packageevrstring: httpd-2.4.37-51.rv3.5 CVE-ID: CVE-2006-20001 BDU-ID: 2023-01105 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the moddav module of the Apache HTTP Server web server is related to an operation exceeding buffer boundaries...

Advisory ROSA-SA-2025-2894

Software: grub2 2.02 OS: rosa-server79 packageevrstring: grub2-2.02-0.87.0.3.res7.14 CVE-ID: CVE-2022-2601 BDU-ID: 2022-06819 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the grubfontconstructglyph function of the Grub2 operating systems boot loader is related to an operation exceeding buffer...

PT-2025-26597 · Aviatrix · Aviatrix Controller

Name of the Vulnerable Software and Affected Versions: Aviatrix Controller versions prior to 7.1.4208 Aviatrix Controller versions prior to 7.2.5090 Aviatrix Controller versions prior to 8.0.0 Description: The issue is related to the failure of the Aviatrix Controller to sanitize user input befor...

PT-2025-26639

Name of the Vulnerable Software and Affected Versions: pbkdf2 versions =3.1.2 Description: The issue is related to an Improper Input Validation vulnerability in pbkdf2, allowing Signature Spoofing by Improper Validation. Recommendations: For versions =3.1.2, update to a version greater than 3.1.2...

PT-2025-26612 · Sensopart · Sensopart Visor Vision Sensors

Name of the Vulnerable Software and Affected Versions: Sensopart VISOR Vision Sensors versions prior to 2.10.0.2 Description: An issue was discovered that allows local users to perform unspecified actions with elevated privileges. Recommendations: For Sensopart VISOR Vision Sensors versions prior...

PT-2025-26640 · Whitebeam · Whitebeam

Name of the Vulnerable Software and Affected Versions: WhiteBeam versions 0.2.0 through 0.2.1 Description: A user with local access to a server can bypass the allow-list functionality because a file can be truncated in the OpenFileDescriptor action before the VerifyCanWrite action is performed...

PT-2025-26600

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2025.03.3 Description An issue exists in the diskUsageBuildsStats page where the application fails to properly protect the web page structure. This allows a remote attacker to perform reflected Cross-Site...

PT-2025-26621 · Unknown +1 · Visionatrix +1

Name of the Vulnerable Software and Affected Versions: Visionatrix versions 1.5.0 through 2.5.0 Description: The issue concerns a Reflected XSS Cross-Site Scripting attack via the "/docs/flows" endpoint, allowing full takeover of the application and exfiltration of secrets stored in the...