PT-2025-48337

Name of the Vulnerable Software and Affected Versions HCL Technologies Ltd. Unica version 12.0.0 Description A CSV formula injection issue exists in HCL Technologies Ltd. Unica. The issue allows for potential manipulation through crafted CSV files. Recommendations At the moment, there is no...

Apache Kvrocks 安全漏洞

Apache Kvrocks is a distributed key-value NoSQL database from the Apache USA Foundation. Apache Kvrocks suffers from an elevation of privilege vulnerability that is caused by improper privilege management in the RESET command. An attacker can exploit this vulnerability to gain administrator...

The vulnerability of the Grub2 operating system loader, related to the pointer being set to expired, allows a hacker to trigger a service failure.

The vulnerability of Grub2 operating system loaders is related to the pointer being set to an expired value. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the management tool for SNMP systems in centralized network device and port management solutions from Advantech iView allows a hacker to execute arbitrary code.

The vulnerability of the SNMP management tool for centralized network device and port management systems from Advantech iView relates to the lack of protection for the SQL query structure during the processing of the ztpsearchvalue parameter. Exploiting this vulnerability allows a malicious actor...

mpv:fuzzer_protocol_edl: Use-of-uninitialized-value in wsd_read_header

Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=6331846331006976 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzerprotocoledl Job Type: libfuzzermsanmpv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in fetchRGBA8888ToRGBA64PM_sse4

Detailed Report: https://oss-fuzz.com/testcase?key=6156524960677888 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: fetchRGBA8888ToRGBA64PMsse4...

CVE-2025-12140

The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code execution...

kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in XCFImageFormat::assignImageBytes

Detailed Report: https://oss-fuzz.com/testcase?key=6624707266019328 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

graphicsmagick:coder_GIF_fuzzer: Use-of-uninitialized-value in IsMonochromeImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6574503393296384 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderGIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in QImage::pixel

Detailed Report: https://oss-fuzz.com/testcase?key=6567643525218304 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: QImage::pixel...

AMD uProf Return Value Mishandling Vulnerability

AMD uProf is a suite of performance analysis tools from AMD for analyzing the performance of x86 architecture applications on Windows, Linux and FreeBSD systems. A return value mishandling vulnerability exists in AMD uProf, which can be exploited by an attacker to cause a KSLR bypass and loss of...

CacheTrap: Injecting Trojans in LLMs without Leaving Any Traces in Inputs or Weights

Adversarial weight perturbation has emerged as a concerning threat to LLMs that either use training privileges or system-level access to inject adversarial corruption in model weights. With the emergence of innovative defensive solutions that place system- and algorithm-level checks and correctio...

OPENSUSE-SU-2025:20089-1 Security update for mysql-connector-java

This update for mysql-connector-java fixes the following issues: - Upgrade to Version 9.3.0 - CVE-2025-30706: Fixed Connector/J vulnerability bsc1241693 - Updatable ResultSet fails with 'Parameter index out of range'. - Fixed Resultset UPDATE methods not checking validity of ResultSet. -...

JLSEC-2025-264 Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to...

Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2...

kimageformats:kimgio_raw_fuzzer: Use-of-uninitialized-value in LibRaw::subtract_black_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5649868204081152 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiorawfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::subtractblackinterna...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

📄 Citrix Bleed 2 PHP Mass Scanner

This is a high-speed mass-scanner written in PHP designed to test for data leakage through the CitrixBleed2 InitialValue extraction issue. The tool reproduces the functionality of the original Bash/Parallel scanner but works in restricted PHP environments...

RHEL 8 : tigervnc (RHSA-2025:22041)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22041 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...