CVE-2025-60892

Raspberry Pi Imager version 1.9.6 for Windows contains a vulnerability in its OS customization feature . The public-key authentication setting unintentionally re-adds a user's id_rsa.pub key from the local Windows machine to the authorized_keys file on the Raspberry Pi, even after the user explic...

PT-2025-6526

Name of the Vulnerable Software and Affected Versions Lenovo Vantage versions on Lenovo V Series Gen 5 Lenovo Vantage versions on ThinkBook 14 Gen 6, 7 Lenovo Vantage versions on ThinkBook 16 Gen 6, 7 Lenovo Vantage versions on ThinkPad E Series Gen 1 Description An improper privilege vulnerabili...

Cross site scripting

Multiple Cross Site Scripting XSS vulnerabilities in Concrete CMS v.9.2.1 allow an attacker to execute arbitrary code via a crafted script to the Header and Footer Tracking Codes of the SEO & Statistics. NOTE: the vendor disputes this because these header/footer changes can only be made by an...