PT-2025-29517 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.5 Description: WeGIA is an open source web manager. A Reflected Cross-Site Scripting XSS vulnerability exists in the relatorio geracao.php endpoint. Attackers can inject malicious scripts through the tipo relatorio...

PT-2025-27491 · Electron · Electron

Name of the Vulnerable Software and Affected Versions: Electron versions 30.0.0-alpha.1 through 30.0.5 Electron versions 31.0.0-alpha.1 through 31.0.0-beta.1 Description: The issue is an ASAR Integrity bypass, which only impacts applications that have the embeddedAsarIntegrityValidation and...

PT-2025-19769 · Misskey · Misskey

Name of the Vulnerable Software and Affected Versions: Misskey versions 12.0.0 through 2025.4.0 Description: The issue arises from an oversight in validation performed in UrlPreviewService and MkUrlPreview, allowing an attacker to inject arbitrary CSS into the MkUrlPreview component. This can lea...

GIMP Buffer Overflow Vulnerability (Apr 2025) - Windows

GIMP is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gimp:gimp"; ifdescription...

PT-2024-35142 · Tenda · Tenda Ac6V2

Name of the Vulnerable Software and Affected Versions: Tenda AC6V2 versions through 15.03.06.50 Description: The issue is a stack-based buffer overflow vulnerability in the fromAdvSetLanip module, specifically with the lanMask argument, allowing buffer overflows. This problem affects Tenda AC6V2...

PT-2023-32201 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.10.0 Description: The issue is related to SQL Injection in the GitHub repository librenms/librenms. Recommendations: For versions prior to 23.10.0, update to version 23.10.0 or later to resolve the issue...

PT-2023-27547 · S4Core · S4Core

Name of the Vulnerable Software and Affected Versions: S4CORE Manage Purchase Contracts App versions 102 through 107 Description: The issue is related to the lack of necessary authorization checks for authenticated users, which could allow an attacker to perform unintended actions, resulting in...

PT-2023-6480

Name of the Vulnerable Software and Affected Versions Redis versions 2.6.0 through 6.0.19 Redis versions 6.2.0 through 6.2.12 Redis versions 7.0.0 through 7.0.11 Description A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, resulting in heap...