PT-2025-16220

Name of the Vulnerable Software and Affected Versions: Mattermost Mobile Apps versions =2.25.0 Description: The issue arises when Mattermost Mobile Apps fail to terminate sessions during logout under certain conditions, such as poor connectivity, allowing unauthorized users on shared devices to...

CVE-2024-45552 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesnt adhere to RFC standards...

CVE-2024-45544 Use After Free in Data Network Stack & Connectivity

Memory corruption while processing IOCTL calls to add route entry in the HW...

[SECURITY] Fedora 40 Update: containernetworking-plugins-1.5.1-2.fc40

Some reference and example networking plugins, maintained by the CNI team. The CNI Container Network Interface project consists of a specification and libraries for writing plugins to configure network interfaces in Linux containers, along with a number of supported plugins. CNI concerns itself...

CVE-2025-0415

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for...

insightsoftware Spark JDBC 安全漏洞

insightsoftware Spark JDBC is a data connectivity driver from insightsoftware. It supports Spark access to multiple databases A security vulnerability exists in insightsoftware Spark JDBC version 2.6.21, which stems from malicious parameter injection that could lead to remote code execution...

CVE-2025-0415

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for...

CVE-2025-0415 Command Injection in NTP Setting

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for...

CVE-2025-0415

CVE-2025-0415 is a remote command-injection vulnerability in MOXA device web interfaces via NTP settings. The issue allows a web-admin to execute arbitrary system commands, potentially causing the device to enter an infinite reboot loop and disrupt connectivity for downstream systems. The CVSS ba...

PVS Configuration Wizard Error: Insufficient Privileges

When creating a new PVS farm by running configuration wizard, and selecting option to register the PVS server with a CVAD farm, configuration wizard returns an error: The current user needs to be a Machine catalog Administrator or higher on the Citrix Virtual Desktops Controller at "servername"...

kubeslice 安全漏洞

kubeslice is a kubeslice open source application that enables multi-cloud, multi-cluster service connectivity. A security vulnerability exists in kubeslice version 1.3.1, which stems from improper privileges and could allow an attacker to obtain a token for a service account and elevate privilege...

go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment

Impact The issue only occurs when the CLIENT SETINFO command times out during connection establishment. The following circumstances can cause such a timeout: 1. The client is configured to transmit its identity. This can be disabled via the DisableIndentity flag. 2. There are network connectivity...

CVE-2025-29923 go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment

go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.3, go-redis potentially responds out of order when CLIENT SETINFO times out during connection establishment. This can happen when the client is configured to transmit its identity, there...

CVE-2025-29923

CVE-2025-29923 affects the Go Redis client library (go-redis). Prior to versions 9.5.5, 9.6.3, and 9.7.3, the client may return out-of-order responses when a timeout occurs during the CLIENT SETINFO phase at connection establishment, especially if identity transmission is enabled or timeouts are ...

nmstate bug fix and enhancement update

An update is available for nmstate. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Nmstate is a library with an accompanying command line tool that manages host...

The vulnerability of the SSL-VPN portal for FortiOS operating systems allows a hacker to induce a service failure.

The vulnerability of the SSL-VPN portal for FortiOS operating systems is related to the assignment of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

TSplus Remote Access (Windows)

Binary data tsplusremoteaccessserverdetect.nbin...

Tenda TX3 Router Buffer Overflow Vulnerability

Tenda TX3 is a wireless router from Tenda that provides internet connectivity. A buffer overflow vulnerability exists in Tenda TX3 router version 16.03.13.11multi, which originates from improper handling of the deviceList parameter in the /goform/setMacFilterCfg file. No detailed vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2024-53149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by- one in connectorstatus UCSI connector's indices start...

CVE-2025-1925 Open5GS AMF nsmf-handler.c amf_nsmf_pdusession_handle_update_sm_context denial of service

A vulnerability classified as problematic was found in Open5GS up to 2.7.2. Affected by this vulnerability is the function amfnsmfpdusessionhandleupdatesmcontext of the file src/amf/nsmf-handler.c of the component AMF. The manipulation leads to denial of service. The attack can be launched...