TawkTo Widget 安全漏洞

TawkTo Widget is a widget design program from TawkTo, Inc. A security vulnerability exists in version v4 of TawkTo Widget that originates from unvalidated input and could lead to a reflected cross-site scripting attack...

Linux Distros Unpatched Vulnerability : CVE-2025-1131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A local privilege escalation vulnerability exists in the safeasterisk script included with the Asterisk toolkit package. When Asterisk is started via this scrip...

Vasion Print Virtual Appliance Host 安全漏洞

Vasion Print Virtual Appliance Host is a print management software from Vasion USA. A security vulnerability exists in Vasion Print Virtual Appliance Host versions prior to 25.1.102, which stems from a PHP script in the consolerelease directory that does not properly validate user input,...

PT-2025-39866

Name of the Vulnerable Software and Affected Versions Esri Portal for ArcGIS versions 11.4 and below Description An unvalidated redirect issue exists in Esri Portal for ArcGIS that could allow a remote, unauthenticated attacker to create a URL designed to redirect a user to a website of the...

PT-2025-39814

Name of the Vulnerable Software and Affected Versions Perfex CRM version 3.2.1 Description An HTML injection issue exists in Perfex CRM version 3.2.1. The issue is due to insufficient validation of user-supplied data. An attacker can inject HTML code by sending a POST request to the...

Vasion Print Virtual Appliance Host 安全漏洞

Vasion Print Virtual Appliance Host is a print management software from Vasion USA. A security vulnerability exists in Vasion Print Virtual Appliance Host versions prior to 25.1.102 that stems from a failure to validate or filter the $printervo-strhostaddress variable, which could lead to a...

PT-2025-39915

Name of the Vulnerable Software and Affected Versions mkdocs-include-markdown-plugin versions prior to 7.1.8 Description The mkdocs-include-markdown-plugin has an issue where input validation is insufficient, potentially leading to collisions with substitution placeholders. This could allow for...

Liferay Portal和Liferay DXP 跨站脚本漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

Vasion Print Virtual Appliance Host 安全漏洞

Vasion Print Virtual Appliance Host is a print management software from Vasion USA. A security vulnerability exists in Vasion Print Virtual Appliance Host versions prior to 25.1.102 that stems from the filegetcontents function not validating input, which could lead to credential disclosure and...

Liferay Portal和Liferay DXP 跨站脚本漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

Esri Portal For ArcGIS 跨站脚本漏洞

Esri Portal For ArcGIS is a component of Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A cross-site scripting vulnerability exists in Esri Portal For ArcGIS 11.4 and prior versions that originates from unvalidated...

PT-2025-39865

Name of the Vulnerable Software and Affected Versions Esri Portal for ArcGIS versions 11.4 and below Description An unvalidated redirect issue exists in Esri Portal for ArcGIS. A remote, unauthenticated attacker can create a malicious URL that redirects a user to an arbitrary website, potentially...

The vulnerability of the clk component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the clk component in the Linux operating system’s kernel is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dequeue_entities() function in the kernel/sched/fair.c component of the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the dequeueentities function in the kernel/sched/fair.c component of the Linux operating system is related to an unvalidated return value. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the inftlcore.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the inftlcore.c component in the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the `net/sched/sch_sfq.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the net/sched/schsfq.c component of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-39781

CVE-2025-60033 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-60033 Published : Sept. 26, 2025, 3:15 a.m. | 4 hours, 8 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2024-6429

A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain conditions, error messages are passed through URL parameters without validation, allowing malicious actors to inject arbitrary content into the UI. By exploiting this...

Park Ticketing Management System normal-bwdates-reports-details.php file SQL injection vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the parameter fromdate in the file normal-bwdates-reports-details.php. A...

Tenda AC6 formSetIptv Function Command Injection Vulnerability

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps. The Tenda AC6 suffers from a command injection vulnerability that stems from the formSetIptv function not validating or cleaning up special characters when handlin...