BIT-LARAVEL-2025-27515 Laravel has a File Validation Bypass

Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1...

RHSA-2025:3828 Red Hat Security Advisory: glibc security update

Bulletin has no description...

SUSE-SU-2025:1238-1 Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002330 fixes one issue. The following security issue was fixed: - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6create bsc1235218...

CVE-2025-24859

CVE-2025-24859 affects Apache Roller

PT-2025-16268 · Ibm · Ibm Aspera Console

Name of the Vulnerable Software and Affected Versions: IBM Aspera Console versions 3.4.0 through 3.4.4 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: For IBM...

PT-2025-16228

Name of the Vulnerable Software and Affected Versions: SoftCOM iKSORIS Internet Starter versions prior to 79.0 Description: The issue is related to Reflected XSS Cross-site Scripting attacks. An attacker might trick a user into filling a form designed for adding users with a malicious script, whi...

PT-2025-16540 · Unknown · Ashauthentication

Name of the Vulnerable Software and Affected Versions: Ash Authentication versions prior to 4.7.0 Description: The confirmation flow for account creation in Ash Authentication uses a GET request triggered by clicking a link sent via email. Some email clients and security tools may automatically...

PT-2025-16242 · Ibm · Ibm Robotic Process Automation For Cloud Pak +1

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak versions 21.0.0 through 21.0.7.20 IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak versions 23.0.0 through 23.0.20 Description: The issue...

PT-2025-16234

Name of the Vulnerable Software and Affected Versions: SoftCOM iKSORIS Internet Starter versions prior to 79.0 Description: The issue allows an attacker with access to a user's browser to set an arbitrary session cookie value, potentially leading to account takeover. The system's failure to destr...

PT-2025-16236 · Projectworlds · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Food Ordering System version 1.0 Apache Struts versions 2.5.26 and earlier Description: A critical issue has been found, allowing for remote exploitation. In the case of projectworlds Online Food Ordering System, an unkno...

DSA-5902-1 perl - security update

Bulletin has no description...

PT-2025-16181 · Shuanx · Burpapifinder

Name of the Vulnerable Software and Affected Versions: shuanx BurpAPIFinder versions up to 2.0.2 Description: A vulnerability has been found in shuanx BurpAPIFinder, affecting an unknown functionality of the file BurpApiFinder.db. The manipulation leads to denial of service. The attack can be...

DLA-4126-1 jinja2 - security update

Bulletin has no description...

CGA-43X3-MXJ2-GPJF

Bulletin has no description...

CGA-H52H-VQ4V-WHVC

Bulletin has no description...

MGASA-2025-0132 Updated graphicsmagick packages fix security vulnerabilities

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits. CVE-2025-27795...

DLA-4123-1 wpa - security update

Bulletin has no description...

Advisory ROSA-SA-2025-2844

Software: gtk3 3.22.30 OS: ROSA Virtualization 2.1 packageevrstring: gtk3-3.22.30-12.rv3 CVE-ID: CVE-2024-6655 BDU-ID: 2024-06447 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the GTK graphical user interface creation library GIMP Toolkit is related to mismanagement of code generation...

Advisory ROSA-SA-2025-2839

Software: dnsmasq 2.79 OS: ROSA Virtualization 2.1 packageevrstring: dnsmasq-2.79-33.0.1.rv3 CVE-ID: CVE-2020-25682 BDU-ID: 2021-01118 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the extractname function rfc1035.c of the dnsmasq DNS server is related to a buffer overflow in dynamic memory...

Advisory ROSA-SA-2025-2832

Software: avahi 0.7 OS: ROSA Virtualization 2.1 packageevrstring: avahi-0.7-21.0.1.rv3 CVE-ID: CVE-2023-1981 BDU-ID: 2023-03858 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Avahi Local Area Network Service Discovery System involves uncontrolled resource consumption. Exploitation of the...