PT-2025-29999 · WordPress · Woocommerce Refund/Exchange With Rma - Warranty Management

Name of the Vulnerable Software and Affected Versions: WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet versions up to and including 3.2.6 Description: The WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User...

PT-2025-30011 · Joomla · Articles Calendar

Name of the Vulnerable Software and Affected Versions: Articles Calendar versions 1.0.0 through 1.0.1.0007 Description: A SQL injection issue exists in the Articles Calendar extension for Joomla. This allows attackers to execute arbitrary SQL commands. Recommendations: Update Articles Calendar to...

openSUSE Security Advisory (SUSE-SU-2025:02336-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-30026 · Unknown · Rsdirectory!

Name of the Vulnerable Software and Affected Versions: RSDirectory! component versions 1.0.0 through 2.2.8 Description: A stored cross-site scripting XSS issue exists in the RSDirectory! component. This allows remote authenticated attackers to inject arbitrary web script or HTML via the review...

PT-2025-30084 · Agorum Software Gmbh · Agorum Core

Name of the Vulnerable Software and Affected Versions: agorum Software GmbH Agorum core open versions 11.9.2 and 11.10.1 Description: A Server-Side Request Forgery SSRF exists in the TunnelServlet component. This allows attackers to initiate connections to arbitrary internal and external resource...

CVE-2025-54064

CVE-2025-54064 affects Rucio helm charts for rucio-server, rucio-ui, and rucio-webui. The Apache access-log format includes the X-Rucio-Auth-Token header (which may contain Internal Rucio tokens or JWTs), potentially exposing credentials in log lines. Affected versions and patches: rucio-server 3...

CVE-2025-53928

MaxKB is an open-source AI assistant for enterprise. Prior to versions 1.10.9-lts and 2.0.0, a Remote Command Execution vulnerability exists in the MCP call. Versions 1.10.9-lts and 2.0.0 fix the issue...

RUSTSEC-2025-0045 ConstStaticCell could have been used to pass non-Send values to another thread

ConstStaticCell could have been used to pass non-Send values to another thread, because T was not required to be Send while ConstStaticCell is Send. This was corrected by introducing a T: Send bound...

RHSA-2025:11320 Red Hat Security Advisory: iputils security update

Bulletin has no description...

PT-2025-29959 · Lenovo · Lenovo Browser +3

Name of the Vulnerable Software and Affected Versions: Lenovo Protection Driver versions prior to 5.1.1110.4231 Description: A buffer overflow issue exists in the Lenovo Protection Driver, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store. A local attacker with elevated privileges c...

PT-2025-29905 · Blubird · Bluebird Devices

Name of the Vulnerable Software and Affected Versions: Bluebird devices versions prior to 1.1.2 Description: Bluebird devices contain a pre-loaded kiosk application that exposes an unsecured service provider, com.bluebird.kiosk.launcher.IpartnerKioskRemoteService. A local attacker can bind to the...

SUSE: Security Advisory (SUSE-SU-2025:02316-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-29976

Name of the Vulnerable Software and Affected Versions Brocade ASCG versions prior to 3.3.0 Description Brocade ASCG versions prior to 3.3.0 log JSON Web Tokens JWT in log files. An attacker with access to these log files can extract the unencrypted tokens, potentially leading to unauthorized...

PT-2025-29951 · Unknown +1 · Robot Operating System +1

Name of the Vulnerable Software and Affected Versions: Robot Operating System ROS versions prior to Noetic Ninjemys Description: A code injection issue exists in the 'roslaunch' command-line tool due to the use of the eval method to process unsanitized parameter values within the substitution arg...

PT-2025-29906 · Unknown · Bluebird Devices

Name of the Vulnerable Software and Affected Versions: Bluebird devices version 1.4.4 Bluebird devices version 1.3.6 Description: Bluebird devices contain a pre-loaded file manager application that exposes an unsecured service provider com.bluebird.system.koreanpost.IsdcardRemoteService. A local...

PT-2025-30057 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.6 Description: WeGIA is an open source web manager designed for the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability exists in the personalizacao.php endpoint...

PT-2025-29930 · Apple +1 · Safari +1

Name of the Vulnerable Software and Affected Versions: AdGuard versions prior to 1.11.22 Description: The AdGuard plugin for Safari on MacOS excessively logged URLs accessed by Safari when the plugin was active. These logs were written to the MacOS general logs, accessible to any unsandboxed...

CVE-2025-53821

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Open Redirect vulnerability exists in the web application prior to version 3.4.5. The control.php endpoint allows to specify an arbitrary URL via the nextPage parameter, leading to an...

MINI-HPG6-9R24-VMFH

Bulletin has no description...

SUSE-SU-2025:02329-1 Security update for rmt-server

This update for rmt-server fixes the following issues: - Update to version 2.23 - CVE-2025-46727: Fixed Unbounded-Parameter DoS in Rack:QueryParser. bsc1242893 - CVE-2025-32441: Fixed a bug where simultaneous rack requests can restore a deleted rack session. bsc1242898...