CVE-2025-55449

AstrBotDevs AstrBot 3.5.15 has AdvancedSystemforTextResponseandBotOperationsTool as the hardcoded private key used to sign a JWT...

CVE-2025-21539

The CVE-2025-21539 entry concerns Oracle PeopleSoft: FIN eSettlements (component: eSettlements) in version 9.2. The vulnerability can be triggered by a low-privileged attacker with network access via HTTP, enabling unauthorized update/insert/delete and unauthorized read access to a subset of eSet...