Jira Align Authorization Bypass

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process when processing audit logs. Exploiting this vulnerability could allow a malicious actor, operating...

Linux kernel DoS

The vulnerability of the kernel component of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux SMB DoS

The vulnerability of the smb component in Linux operating systems is related to the tracking of UNIX symbolic links. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux dbMount Data Compromise

The vulnerability of the dbMount function in the Linux operating system’s kernel relates to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality of the protected information...

ROS-20251028-06

The vulnerability of the Pgpool-II database connection pooling management utility is related to disclosure of information. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to the sensitive data...

EUVD-2025-36329

Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2025-62263

Multiple cross-site scripting XSS vulnerabilities in Liferay Portal 7.3.7 through 7.4.3.103, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 service pack 3 through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected int...

Cloud Attack Surface Management Mapping 101

Before an attacker launches an assault, they do their homework. Their first step is to meticulously map your digital footprint, searching for the path of least resistance—an exposed database, an unpatched server, or a forgotten subdomain. The reality is that your attack surface is already being...

EUVD-2025-36194

IBM OpenPages 9.1 and 9.0 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

CVE-2025-52263

An issue in the Web Configuration module of Startcharge Artemis AC Charger 7-22 kW v1.0.4 allows authenticated network-adjacent attackers to upload crafted firmware, leading to arbitrary code execution...

CVE-2025-11971

GitLab has remediated an issue in GitLab EE affecting all versions from 10.6 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to trigger unauthorized pipeline executions by manipulating commits...

CVE-2025-52263

An issue in the Web Configuration module of Startcharge Artemis AC Charger 7-22 kW v1.0.4 allows authenticated network-adjacent attackers to upload crafted firmware, leading to arbitrary code execution...

CVE-2025-61385

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

CVE-2025-52263

The Startcharge Artemis AC Charger 7-22 kW v1.0.4 is affected by a vulnerability in its Web Configuration module . This flaw allows authenticated network-adjacent attackers to upload crafted firmware , which can result in arbitrary code execution . The root cause is categorized as a download of c...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab EE versions 17.6.0 to before 18.3.5,...

Oracle Financial Services Analytical Applications Infrastructure Unauthorized Access

The vulnerability of the Oracle Financial Services Analytical Applications Infrastructure platform component related to insufficient access control measures. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

PT-2025-43957

Name of the Vulnerable Software and Affected Versions Startcharge Artemis AC Charger version 1.0.4 Description An issue exists within the Web Configuration module that permits authenticated attackers on the network to upload specially crafted firmware. Successful exploitation could lead to...

PT-2025-44075

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description Keycloak is susceptible to a Denial of Service DoS attack. This is due to a default Java Development Kit JDK setting that allows Client-Initiated Renegotiation within the TLS 1.2 protocol. A...

Linux DMA Direct Info Disclosure

The vulnerability of the dma-direct component in the Linux operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to access confidential information...

CVE-2025-11989 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to execute unauthorized quick actions by including malicious commands in specific descriptions...