Ivanti Endpoint Manager HIIDriver Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Alternatively, no user interaction is...

Ivanti Avalanche SecureFilter Authentication Bypass Vulnerability

This vulnerability allows remote attackers to partially bypass authentication on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecureFilter class. The issue results from incorrect string matching when...

USN-7208-1: Apache Commons BCEL vulnerability

Felix Wilhelm discovered that Apache Commons BCEL APIs incorrectly handled parameters due to a memory issue. An attacker supplying malicious input could exploit this to generate and execute arbitrary bytecode...

BIT-PYTHON-MIN-2020-14422

Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface...

PT-2025-19367 · Git +1 · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The software is susceptible to a heap-buffer-overflow READ issue. This occurs during the WriteObjects function within the Assimp::FBXExporter class, which is called by ExportBinary and...

CVE-2025-23026

jte Java Template Engine is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTML templates with "script" tags or script attributes that include a Javascript template string backticks are subject to XSS. The "javaScriptBlock" and "javaScriptAttribute" methods...

WordPress plugin Coupon X has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-1777 · WordPress · The Coupon X: Discount Pop Up

Name of the Vulnerable Software and Affected Versions: The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress versions up to, and including, 1.3.5 Description: The issue is related to missing capability checks on several functions in the...

CVE-2024-12204: Missing Authorization

The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in the class-cx-rest.php file in all versions up to, and including, 1.3.5. This makes it...

PT-2025-6065

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.6 Description The issue is related to an Out-Of-Bounds indexing vulnerability in the ets class from arg function when passed a clid of 0. This overflow may cause local privilege escalation. The vulnerability...

CVE-2025-0341

A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this issue is some unknown functionality of the file /class/edit/edit. The manipulation of the argument ephoto leads to unrestricted upload. The attack may be...

GLPI Addressing System External Input Authorization Bypass

The vulnerability of the addressing plugin in the GLPI system for managing requests, incidents, and inventory of computer equipment is related to the use of an external controlled input for selecting classes or codes. Exploiting this vulnerability can allow a malicious actor to gain unauthorized...

PT-2025-3837

Name of the Vulnerable Software and Affected Versions CampCodes Computer Laboratory Management System version 1.0 Description A problem has been found in the system. It affects a part of the file /class/edit/edit. The manipulation of the s lname argument leads to cross site scripting attacks. It ...

CVE-2025-0342: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0. This affects an unknown part of the file /class/edit/edit. The manipulation of the argument slname leads to cross site scripting. It is possible to initiate the attack remotely...

CVE-2025-0341: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this issue is some unknown functionality of the file /class/edit/edit. The manipulation of the argument ephoto leads to unrestricted upload. The attack may be...

SUSE CVE-2024-56587

In the Linux kernel, the following vulnerability has been resolved: leds: class: Protect brightnessshow with ledcdev-ledaccess mutex There is NULL pointer issue observed if from Process A where hid device being added which results in adding a ledcdev addition and later a another call to access of...

serenity:FuzzJs: Heap-use-after-free in AK::HashSetResult AK::HashTable<AK::StringView, AK::Traits<AK::StringView>, fals

Detailed Report: https://oss-fuzz.com/testcase?key=5886652911779840 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzJs Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x50300000ed86 Crash State: AK::HashSetResult AK::HashTable,...

PT-2025-9001

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential wild pointer dereferences issue exists in the Linux kernel regarding the APIs class dev iter init, class dev iter next, and class dev iter exit. The issue arises when the cla...

PT-2025-8857

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to the blk-cgroup subsystem. The blkcg fill root iostats function iterates over devices by class dev iter init and class dev iter...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper input sanitization of the generateRowparameter in the \Writer\Html class. Remediation There is no fixed version for phpoffice/phpexcel. References - GitHub Commit Credit: Aleksey Solovev...