PT-2025-7844 · Estatik · Estatik

Name of the Vulnerable Software and Affected Versions: Estatik versions n/a through 4.1.9 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion. Recommendations: For versions n/a...

PT-2025-25817

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.0-rc7 Description A vulnerability has been resolved in the Linux kernel related to the dmaengine, specifically the k3-udma-glue. The issue arises from the k3 udma glue reset rx chn function, which previously...

PT-2025-7502

Name of the Vulnerable Software and Affected Versions Qiskit SDK versions 0.45.0 through 1.2.4 Description A maliciously crafted QPY file containing a malformed symengine serialization stream can cause a segfault within the symengine library, allowing an attacker to terminate the hosting process...

PT-2025-16807 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: A SQL injection vulnerability has been identified in the affected application through the internally used CreateTrace method. This could allow an unauthenticated remote attacker ...

PT-2025-7615

Name of the Vulnerable Software and Affected Versions Exim versions 4.98 through 4.98.0 Description The issue allows remote SQL injection when SQLite hints and ETRN serialization are used. This could potentially allow a remote attacker to perform SQL injection, possibly stealing sensitive data or...

PT-2025-16808 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an unauthenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

PT-2025-26482

Name of the Vulnerable Software and Affected Versions: DNN formerly DotNetNuke versions 6.0.0 through 10.0.0 Description: The issue concerns the DNN formerly DotNetNuke platform, which is an open-source web content management platform in the Microsoft ecosystem. It allows specially crafted conten...

SUSE: Security Advisory (SUSE-SU-2025:0576-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-7516

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.2.0 through 4.2.10 Wireshark versions 4.4.0 through 4.4.3 Description The issue allows denial of service via packet injection or crafted capture file, specifically affecting the Bundle Protocol and CBOR dissector in...

NetScaler Console and NetScaler Agent Security Bulletin for CVE-2024-12284

Description of Problem A vulnerability has been discovered in NetScaler Console formerly NetScaler ADM and NetScaler Agent. Refer to below for further details: Affected Versions The following supported versions of NetScaler Console and NetScaler Agent are affected: NetScaler Console 14.1 BEFORE...

PT-2025-7481

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 133.0.6943.126 Description A heap buffer overflow in V8 in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The issue has a high security severity rating fr...

PT-2025-7483 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 133.0.6943.126 Description: The issue allows a remote attacker to potentially exploit heap corruption via a crafted web app, due to a use after free in the Network component. The severity of this issue is...

PT-2025-26481

Name of the Vulnerable Software and Affected Versions: DNN formerly DotNetNuke versions 6.0.0 through 10.0.0 Description: The issue allows a specially crafted request to inject scripts in the "Activity Feed Attachments" endpoint, which will then render in the feed, resulting in a cross-site...

PT-2025-7506 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome on Android versions prior to 133.0.6943.126 Description: A heap buffer overflow in the GPU of Google Chrome on Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity of thi...

Mozilla Firefox Security Advisory (MFSA2025-12) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2025-12. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

PT-2025-14283 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.11-200.fc41.x86 64 Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the ACPI backend of UCSI, where the UCSI "registers" are a memory copy of the register values i...

SUSE: Security Advisory (SUSE-SU-2023:1800-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-6742

Name of the Vulnerable Software and Affected Versions Das U-Boot versions prior to 2025.01-rc1 Description An integer overflow occurs in the ext4fs read symlink function in Das U-Boot. This happens when a crafted ext4 filesystem with an inode size of 0xffffffff is used, causing a malloc of zero a...

PT-2025-6744

Name of the Vulnerable Software and Affected Versions DAS U-Boot versions prior to 2025.01-RC1 Description Integer overflows in memory allocation occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff t is mishandled on x86 64. This issue affects the memory...

PT-2025-6535 · WordPress · Maps Plugin Using Google Maps

Name of the Vulnerable Software and Affected Versions: Maps Plugin using Google Maps for WordPress versions prior to 1.9.4 Description: The issue concerns the Maps Plugin using Google Maps for WordPress, where versions prior to 1.9.4 do not properly sanitise and escape some of its settings. This...