PT-2025-4630 · Nirweb · Nirweb

Name of the Vulnerable Software and Affected Versions: Nirweb support versions n/a through 3.0.3 Description: The issue is related to an Authorization Bypass Through User-Controlled Key, which affects the Nirweb support. This allows for potential unauthorized access. No information is provided...

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to the lack of security measures protecting the structure of web pages. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the email client Thunderbird, are related to the lack of security measures for handling web page structures. Exploiting these vulnerabilities can allow an attacker operating remotely to gain unauthorized access to protected...

Vulnerability of Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, related to writing beyond the buffer limit, allowing attackers to trigger a service failure.

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to buffer overflow attacks. Exploiting these vulnerabilities can allow an attacker to cause service interruptions remotely...

CVE-2024-13775

The WooCommerce Support Ticket System plugin for WordPress is vulnerable to unauthorized access and loss of data due to missing capability checks on the 'ajaxdeletemessage', 'ajaxgetcustomerspartiallist', and 'ajaxgetadminslist' functions in all versions up to, and including, 17.8. This makes it...

CVE-2024-13775 WooCommerce Support Ticket System <= 17.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposure

The WooCommerce Support Ticket System plugin for WordPress is vulnerable to unauthorized access and loss of data due to missing capability checks on the 'ajaxdeletemessage', 'ajaxgetcustomerspartiallist', and 'ajaxgetadminslist' functions in all versions up to, and including, 17.8. This makes it...

BeyondTrust Zero-Day Breach Exposed 17 SaaS Customers via Compromised API Key

BeyondTrust has revealed it completed an investigation into a recent cybersecurity incident that targeted some of the company's Remote Support SaaS instances by making use of a compromised API key. The company said the breach involved 17 Remote Support SaaS customers and that the API key was used...

Fedora 41 : rust-routinator (2025-bbabead4d7)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-bbabead4d7 advisory. New ASPA support is now always compiled in and available if enable-aspa is set. The aspa Cargo feature has been removed. 990 If merging mutliple ASPA objects...

WordPress Nirweb support plugin <= 3.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Plugin Nirweb support versions = 3.0.3...

D-Link DAP-2555 DoS Vulnerability (SAP10232)

D-Link DAP-2555 devices are prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] [DLA 4036-1] debian-security-support update

Debian LTS Advisory DLA-4036-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón January 30, 2025 https://wiki.debian.org/LTS Package : debian-security-support Version : 1:11+2025.01.30 Debian Bug : 1087718 1094651 debian-security-support, the Debian security...

CLSA-2025-1738266573 samba: Fix of CVE-2023-34967

Fix CVE-2023-34967: fix type confusion vulnerability in Samba's mdssvc RPC service for Spotlight...

SUSE: Security Advisory (SUSE-SU-2025:0290-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4036 : debian-security-support - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4036 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4036-1 [email protected] https://www.debian.org/lts/security/...

DLA-4036-1 debian-security-support - update

Bulletin has no description...

Security Bulletin: AIX is vulnerable to a denial of service due to libxml2 (CVE-2024-25062)

Summary Vulnerability in libxml2 could allow a remote attacker to cause a denial of service CVE-2024-25062. AIX uses libxml2 as part of its XML parsing functions. Vulnerability Details CVEID:CVE-2024-25062 DESCRIPTION: An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. Whe...

Security update for hplip

This update for hplip fixes the following issues: This update for hplip fixes the following security issues: CVE-2020-6923: Fixed a memory buffer overflow in the HP Linux Imaging and Printing HPLIP. bsc1234745 This update for hplip fixes the following issues: Update to hplip 3.24.4 jscPED-5846...

SUSE-SU-2025:0290-1 Security update for hplip

This update for hplip fixes the following issues: This update for hplip fixes the following security issues: - CVE-2020-6923: Fixed a memory buffer overflow in the HP Linux Imaging and Printing HPLIP. bsc1234745 This update for hplip fixes the following issues: Update to hplip 3.24.4 jscPED-5846 ...

SUSE SLED15: hplip / hplip-devel / hplip-hpijs / hplip-sane / hplip-scan-utils / etc (SUSE-SU-SUSE-RU-2025:0270-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2025:0270-1 advisory. This update for hplip fixes the following issues: Update to hplip 3.24.4 jscPED-5846 - Added...

SUSE SLES15 : Recommended update for hplip (SUSE-SU-SUSE-RU-2025:0272-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2025:0272-1 advisory. This update for hplip fixes the following issues: Update to hplip 3.24.4 jscPED-5846 - Added support for new printers: HP OfficeJet...

Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands are vulnerable to denial of service [CVE-2024-47554]

Summary Apache Commons IO is used by IBM App Connect Enterprise Certified Container by the IntegrationServer and IntegrationRuntime operands. These operands are vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability in Apache Commons IO...