BELL-CVE-2025-68328

Bulletin has no description...

AZL-78410 CVE-2025-68365 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized values detected: - KMSAN: uninit-value in ntfsreadhdr 3 - KMSAN: uninit-value in bcmp 3 Memory is allocated by getname, which is a wrapper for...

GHSA-VWW6-79RV-3J4X Mattermost doesn't verify that post actions invoking `/share-issue-publicly` were created by the Jira plugin

Mattermost versions 11.1.x = 11.1.0, 11.0.x = 11.0.5, 10.12.x = 10.12.3, 10.11.x = 10.11.7 fail to verify that post actions invoking /share-issue-publicly were created by the Jira plugin which allowed a malicious Mattermost user to exfiltrate Jira tickets when victim users interacted with affecte...

Google Chrome: chromium: webkitgtk: Out of bounds memory access via crafted HTML page

A flaw was found in ANGLE in Google Chrome. This vulnerability allows a remote attacker to perform out of bounds memory access via a crafted HTML HyperText Markup Language page. Although this was reported on Google Chrome, this issue also affected the WebKitGTK package with the same possible...

CVE-2025-64641

Mattermost contains a vulnerability where post actions invoking /share-issue-publicly are not verified to be created by the Jira plugin, enabling a malicious user to exfiltrate Jira tickets when victims interact with affected posts. Affected versions include Mattermost 11.1.x (<=11.1.0), 11.0....

PT-2025-53294

Name of the Vulnerable Software and Affected Versions Specto CM versions prior to 17032025 Description Specto CM contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can be injected into...

PT-2025-53284

Name of the Vulnerable Software and Affected Versions Bit Assist versions through 1.5.11 Description An authorization issue exists in Bit Apps Bit Assist. The problem involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update B...

PT-2025-53273

Name of the Vulnerable Software and Affected Versions Ben Balter WP Document Revisions versions through 3.7.2 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. Recommendations Update to a version later than 3.7.2...

PT-2025-53301

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A successful exploitation could result in access to the device. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-53289

Name of the Vulnerable Software and Affected Versions Rustaurius Five Star Restaurant Reservations versions through 2.7.7 Description A Cross-Site Request Forgery CSRF issue exists in Rustaurius Five Star Restaurant Reservations restaurant-reservations, potentially allowing attackers to perform...

PT-2025-53297

Name of the Vulnerable Software and Affected Versions MyNET versions up to 26.08.316 Description The software contains an unauthenticated SQL Injection issue through the intmenu parameter. This allows for potential unauthorized access to the database. Recommendations Update MyNET to a version lat...

PT-2025-53383

Name of the Vulnerable Software and Affected Versions OpenOps versions prior to 0.6.11 Description The software allows for remote code execution within the Terraform block. Recommendations Update to version 0.6.11 or later...

SUSE: Security Advisory (SUSE-SU-2025:4506-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-53293

Name of the Vulnerable Software and Affected Versions PostX versions through 5.0.3 Description A flaw exists in WPXPO PostX ultimate-post that allows the retrieval of embedded sensitive data, leading to exposure of sensitive system information to an unauthorized control sphere. Recommendations...

PT-2025-53139

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc8-00588-g76dcd734eca2 Description The Linux kernel contains a flaw within the ALSA subsystem, specifically in the snd mts64 interrupt function. A null pointer dereference can occur during interrupt handli...

PT-2025-53265

Name of the Vulnerable Software and Affected Versions Virusdie versions n/a through 1.1.6 Description An authorization issue exists in Virusdie, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Virusdie to a version later than 1.1.6...

PT-2025-53291

Name of the Vulnerable Software and Affected Versions Marketing Fire Editorial Calendar versions 3.8.8 and earlier Description An authorization issue exists in the Editorial Calendar component of Marketing Fire Editorial Calendar. This allows exploitation of incorrectly configured access control...

PT-2025-53242

Name of the Vulnerable Software and Affected Versions tmtraderunner Trade Runner versions n/a through 3.14 Description A Cross-Site Request Forgery CSRF issue exists in tmtraderunner Trade Runner. This allows attackers to potentially perform actions on behalf of an authenticated user without thei...

PT-2025-53109

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the erofs filesystem related to pcluster objects. Specifically, the issue occurs when a pcluster is registered with a zero block address, which...

PT-2025-53251

Name of the Vulnerable Software and Affected Versions Icegram Icegram Express Pro versions through 5.9.11 Description A flaw exists in Icegram Icegram Express Pro email-subscribers-premium related to the deserialization of untrusted data, potentially leading to object injection. Recommendations...