Vasion Print Virtual Appliance Host 安全漏洞

Vasion Print Virtual Appliance Host is a print management software from Vasion USA. A security vulnerability exists in Vasion Print Virtual Appliance Host versions prior to 25.1.102 that stems from the ability to skip SSL/TLS certificate validation, which could lead to remote code execution and...

The vulnerability of monitoring software and Performance Co-Pilot (PCP) systems, which is related to improper validation of input data, allows attackers to trigger service failures.

The vulnerability of monitoring and performance visualization software, such as Performance Co-Pilot PCP, is related to improper validation of input data. Exploiting this vulnerability can allow attackers to trigger service failures...

CVE-2025-11049 Portabilis i-Educar unificacao-aluno improper authorization

A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /unificacao-aluno. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit is now public and may be used...

PT-2025-39613

Name of the Vulnerable Software and Affected Versions flytedesk Flytedesk Digital versions n/a through 20181101 Description A Cross-Site Request Forgery CSRF issue exists in flytedesk Flytedesk Digital, which also allows Stored Cross-Site Scripting XSS. Recommendations At the moment, there is no...

BELL-CVE-2025-39862

Bulletin has no description...

CVE-2025-59828 Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions

Claude Code is an agentic coding tool. Prior to Claude Code version 1.0.39, when using Claude Code with Yarn versions 2.0+, Yarn plugins are auto-executed when running yarn --version. This could lead to a bypass of the directory trust dialog in Claude Code, as plugins would be executed prior to t...

GO-2025-3971 DragonFly vulnerable to arbitrary file read and write on a peer machine in d7y.io/dragonfly

DragonFly vulnerable to arbitrary file read and write on a peer machine in d7y.io/dragonfly...

Cisco IOS and IOS XE Software TACACS+ Authentication Bypass Vulnerability

A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication. This vulnerability exists because the system does not properly check whether the required...

DEBIAN-CVE-2025-39867

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: fix null deref for empty set Blamed commit broke the check for a null scratch map: - if unlikely!m || !rawcpuptrm-scratch + if unlikely!rawcpuptrm-scratch This should have been "if !raw ...". Use the...

fio 代码问题漏洞

fio is a flexible I/O testing software by the individual developer Jens Axboe. A code issue vulnerability exists in fio 3.41 and earlier versions, which stems from a null pointer dereference in the strbufferpatterncb function in the options.c file, which could lead to a local attack...

BELL-CVE-2025-39850

Bulletin has no description...

BELL-CVE-2023-53434

Bulletin has no description...

BELL-CVE-2023-53424

Bulletin has no description...

Ashlar-Vellum Cobalt Resource Management Error Vulnerability

Ashlar-Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar-Vellum. Ashlar-Vellum Cobalt suffers from a Resource Management Error vulnerability that originates from not verifying the existence of an object before performing an operation on it. An attacker...

CVE-2025-10431

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/ajaxrepresent.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public...

BELL-CVE-2025-39812

Bulletin has no description...

BELL-CVE-2025-39826

Bulletin has no description...

BELL-CVE-2023-53289

Bulletin has no description...

BELL-CVE-2023-53292

Bulletin has no description...

Missing Authorization

Overview matrix-js-sdk is a Matrix Client-Server SDK for Javascript Affected versions of this package are vulnerable to Missing Authorization via insufficient validation of room predecessor links in the getJoinedRooms function. An attacker can cause a user to join an attacker-controlled room by...