ROS-20250923-17

Vulnerability in Zabbix universal monitoring system is related to incorrect authorization check in the hostprototype.get method in Zabbix API. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to confidential information. remotely to gain access to...

The vulnerability of OpenBao’s encryption and secret management system, related to the exposure of information through incompatibility, allows attackers to gain access to confidential information.

The vulnerability of the OpenBao encryption and secret management system is related to the exposure of information through incompatibility. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

The vulnerability of the cross-platform BitTorrent client qBittorrent, related to the lack of validation for incoming requests, allows a hacker to gain access to confidential information.

The vulnerability of the cross-platform BitTorrent client qBittorrent relates to the lack of validation for incoming requests. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

CVE-2025-26711

CVE-2025-26711 affects the ZTE T5400, with an unauthorized access vulnerability in the Web module interface due to improper permission control. An attacker with adjacent access and low privileges can obtain sensitive information through that interface. The CVSS v3.1 base score is 5.7 (Medium); im...

The vulnerability of the eLearning Server 5G platform, related to the use of files and directories accessible from external parties, allows a hacker to gain access to confidential information.

The vulnerability of the eLearning Server 5G platform is related to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor to gain access to user photos, news feeds, and information resources with HTML-like content...

ROS-20250912-12

A vulnerability in the cross-platform BitTorrent client qBittorrent is related to the lack of blocking access to the local file specified in the link URL. Exploitation of the vulnerability could allow an attacker, acting remotely, to gain access to confidential data...

PT-2025-86: Disclosure of confidential data via controller configuration request in Fastwel PLC web server

The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability can be exploited by an attacker to obtain administrator‑level privileges. Vulnerability status: Confirmed by vendor Date of vulnerability remediation:...

The vulnerability of the network stack for managing container networks in Netavark, related to the restoration of modified configuration backups, allows a attacker to access confidential information.

The vulnerability of the network stack for managing container networks of Netavark is related to the restoration of a modified backup configuration. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential information...

The vulnerability of the cJSON_ParseWithLength function allows attackers to access confidential information.

The vulnerability of the cJSONParseWithLength function in the cJSON parser is related to reading data beyond the memory bounds. Exploiting this vulnerability could allow an attacker to access confidential information...

AMD Embedded Processors和AMD Client Processor 安全漏洞

AMD Embedded Processors and AMD Client Processor are both products of AMD Semiconductor, Inc.AMD Embedded Processors are a family of embedded high-performance GPUs.AMD Client Processor is a processor for client devices such as personal computers, AMD Embedded Processors and AMD Client Processors...

CVE-2025-57806 Local Deep Research's API keys are stored in plain text

Local Deep Research is an AI-powered research assistant for deep, iterative research. Versions 0.2.0 through 0.6.7 stored confidential information, including API keys, in a local SQLite database without encryption. This behavior was not clearly documented outside of the database architecture page...

Linux Distros Unpatched Vulnerability : CVE-2024-12303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 17.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain...

Tenda AC9 安全漏洞

Tenda AC9 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in 2016. The Tenda AC9 suffers from a hard-coded vulnerability that originates from an unknown function in the file /etcro/shadow of the component management interface, which can be exploited by an attacker...

Linux Distros Unpatched Vulnerability : CVE-2022-2630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper access control issue in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.4, all versions from 15.3 before 15.3.2 allows disclosure...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, related to the use of a zero pointer, allows attackers to compromise the confidentiality of protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the use of a null pointer dereferencing. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality of protected information from a remote location...

The vulnerability of the Linux operating system’s kernel allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the Linux operating system’s kernel is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of the protected information...

Linux Distros Unpatched Vulnerability : CVE-2025-0652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 before 17.8.5, all version...

ROS-20250821-05

Vulnerability of the open source library Abseil-cpp for C++ standard library extension is related to failure to set an upper bound for its size argument in reserve and rehash functions. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to confidential...

BIT-GITLAB-2024-12303 Incorrect Privilege Assignment in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users with specific roles and permissions to delete issues including confidential ones by inviting...

The vulnerability of the Samba network communication software package, related to deficiencies in authentication procedures, allows attackers to gain access to confidential data.

The vulnerability of the Samba network communication package is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain access to confidential data...