PT-2025-26187 · Cryptpad · Cryptpad

Name of the Vulnerable Software and Affected Versions: CryptPad versions prior to 2025.3.0 Description: The issue concerns the "Link Bouncer" functionality in CryptPad, a collaboration suite, which attempts to filter javascript URIs to prevent Cross-Site Scripting XSS. However, this filtering can...

PT-2025-25865 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0-rc8 Description: A use-after-free bug has been identified in the Linux kernel, specifically in the binder component. This issue arises due to a race condition where a transaction of type BINDER TYPE WEAK...

PT-2025-26071 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.0-rc5 Description: A data race issue in the Linux kernel's dmaengine sf-pdma component allows multiple threads to access and modify a DMA channel's descriptor simultaneously, leading to a NULL pointer...

CVE-2025-49824 conda-smithy Insecure Encryption Vulnerable to Oracle Padding Attack

conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.47.1, the travisencryptbinstartoken implementation in the conda-smithy package has been identified as vulnerable to an Oracle Padding Attac...

CGA-C3FJ-QR55-VH7P

Bulletin has no description...

RHSA-2025:9166 Red Hat Security Advisory: apache-commons-beanutils security update

Bulletin has no description...

RHSA-2025:9155 Red Hat Security Advisory: firefox security update

Bulletin has no description...

RHSA-2025:9151 Red Hat Security Advisory: gvisor-tap-vsock security update

Bulletin has no description...

RHSA-2025:9150 Red Hat Security Advisory: gvisor-tap-vsock security update

Bulletin has no description...

RHSA-2025:9146 Red Hat Security Advisory: podman security update

Bulletin has no description...

RHSA-2025:9122 Red Hat Security Advisory: libvpx security update

Bulletin has no description...

RHSA-2025:9114 Red Hat Security Advisory: apache-commons-beanutils security update

Bulletin has no description...

PT-2025-25676 · Unknown · Smart Notification

Name of the Vulnerable Software and Affected Versions: Smart Notification versions n/a through 10.3 Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in an SQL command. This allows a...

PT-2025-25715 · Unknown · Anh Tran Slim Seo

Name of the Vulnerable Software and Affected Versions: Anh Tran Slim SEO versions n/a through 4.5.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations...

PT-2025-25718 · Mycred · Mycred

Name of the Vulnerable Software and Affected Versions: myCred versions 2.9.4.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For myCred versions 2.9.4.2 a...

PT-2025-25665 · Unknown · Snstheme Dsk

Name of the Vulnerable Software and Affected Versions: snstheme DSK versions n/a through 2.2 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, allowing PHP Local File Inclusio...

PT-2025-25673 · Unknown · Themeton Spare

Name of the Vulnerable Software and Affected Versions: themeton Spare versions n/a through 1.7 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For themeton Spare versions n/a through 1.7, update to a version that fixes the...

PT-2025-25672 · Unknown · Elite Video Player

Name of the Vulnerable Software and Affected Versions: Elite Video Player versions through 10.0.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables attackers to inject malicio...

PT-2025-25699 · Thembay · Thembay Zota

Name of the Vulnerable Software and Affected Versions: thembay Zota versions 1.3.8 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local File...

PT-2025-25712 · Unknown · Aeroscroll Gallery

Name of the Vulnerable Software and Affected Versions: Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery versions 1.0.12 and earlier Description: The issue is a Path Traversal vulnerability that affects Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid...