RHSA-2025:10348 Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Bulletin has no description...

RHSA-2025:10346 Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Bulletin has no description...

RHSA-2025:10347 Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Bulletin has no description...

RHSA-2025:10344 Red Hat Security Advisory: tigervnc security update

Bulletin has no description...

RHSA-2025:10343 Red Hat Security Advisory: xorg-x11-server security update

Bulletin has no description...

RHSA-2025:10342 Red Hat Security Advisory: xorg-x11-server security update

Bulletin has no description...

PT-2025-28205 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.3 Description: A Reflected Cross-Site Scripting XSS issue was identified in the "cadastro dependente pessoa nova.php" endpoint of the WeGIA application. This issue allows attackers to inject malicious scripts in th...

PT-2025-28211

Name of the Vulnerable Software and Affected Versions LuaJIT versions through 2.1 Description LuaJIT is susceptible to a denial-of-service DoS condition due to an unsinking of IR FSTORE for a NULL metatable. Recommendations Update LuaJIT to a version later than 2.1...

PT-2025-28226 · Gnuboard5 · Gnuboard5

Name of the Vulnerable Software and Affected Versions: gnuboard5 version 5.5.16 Description: An open redirect issue allows a remote attacker to obtain sensitive information via the "bbs/login.php" component. Recommendations: For gnuboard5 version 5.5.16, update to a version that fixes this issue ...

PT-2025-28216 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.3 Description: A Cross-Site Scripting XSS Injection issue was found in WeGIA, a web manager for charitable institutions. The vulnerability is located in the novo memorando.php file. When a memo is submitted, the...

PT-2025-30226 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.06.50 Description: A critical vulnerability exists in Tenda AC6 due to a buffer overflow in the setparentcontrolinfo function of the httpd component. The issue is exploitable remotely. Recommendations: Update Tenda AC6...

PT-2025-28223 · Unknown · Better Auth

Name of the Vulnerable Software and Affected Versions: Better Auth versions prior to 1.2.10 Description: An open redirect issue has been found in the originCheck middleware function of Better Auth, an authentication and authorization library for TypeScript. The affected routes include...

PT-2025-28245 · Mediawiki · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: Mediawiki - AbuseFilter Extension versions 1.39.0 through 1.39.12 Mediawiki - AbuseFilter Extension versions 1.42.0 through 1.42.6 Mediawiki - AbuseFilter Extension versions 1.43.0 through 1.43.1 Description: The issue is related to a Missing...

PT-2025-28230 · Splunk · Splunk Enterprise

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 9.4.3 Splunk Enterprise versions prior to 9.3.5 Splunk Enterprise versions prior to 9.2.7 Splunk Enterprise versions prior to 9.1.10 Description: A user with a role containing the high-privilege capabilitie...

PT-2025-28168 · Unknown +1 · Urlshortener Extension +1

Name of the Vulnerable Software and Affected Versions: Mediawiki - UrlShortener Extension versions 1.42.X through 1.42.6 Mediawiki - UrlShortener Extension versions 1.43.X through 1.43.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known a...

PT-2025-28149

Name of the Vulnerable Software and Affected Versions: llama index versions v0.12.21 through v0.12.28 Description: An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llama index repository. This issue allows an attacker to...

PT-2025-28229 · Splunk · Splunk Enterprise +1

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 9.4.2 Splunk Enterprise versions prior to 9.3.5 Splunk Enterprise versions prior to 9.2.6 Splunk Enterprise versions prior to 9.1.9 Splunk Cloud Platform versions prior to 9.3.2411.103 Splunk Cloud Platform...

PT-2025-28037 · Vercel · Vercel Hyper

Name of the Vulnerable Software and Affected Versions: vercel hyper versions up to 3.4.1 Description: A problematic vulnerability has been found in vercel hyper, affecting the function expand/braceExpand/ignoreMap of the file hyper/bin/rimraf-standalone.js. This issue leads to inefficient regular...

PT-2025-28029 · Alinto +1 · Sogo +1

Name of the Vulnerable Software and Affected Versions: Alinto SOPE SOGo versions 2.0.2 through 5.12.2 Description: This issue involves a NULL pointer dereference in sope-core/NGExtensions/NGHashMap.m that can lead to a crash of the SOGo application. The vulnerability occurs when a request contain...

PT-2025-28032 · Rustls · Rustls

Name of the Vulnerable Software and Affected Versions: rustls versions 0.23.13 through 0.23.17 Description: The issue allows a panic via a fragmented TLS ClientHello when rustls::server::Acceptor::accept is used. Recommendations: For rustls versions 0.23.13 through 0.23.17, update to version...