Mattermost Server 10.10.x < 10.10.2 / 10.11.0 Missing Authorization (MMSA-2025-00513)

The version of Mattermost Server installed on the remote host is affected by a vulnerability as referenced in the MMSA-2025-00513 advisory. - Mattermost versions 10.10.x = 10.10.1 fail to properly sanitize user data during shared channel membership synchronization, which allows malicious or...

CVE-2025-59163

vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers when vet is used as an MCP server in SSE...

CVE-2025-59163 vet MCP Server SSE Transport DNS Rebinding Vulnerability

vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers when vet is used as an MCP server in SSE...

CVE-2025-54591

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below expose information about feeds and tags of default admin users, due to lack of access checking in the FreshRSSAuth::hasAccess function used by some of the tag/feed related endpoints. FreshRSS controllers usually have a...

XML Injection

Overview Affected versions of this package are vulnerable to XML Injection when processing XML data with tags containing references to system properties or environment variables. An attacker can access sensitive information, such as credentials, file paths, or system configuration details, by...

PT-2025-39925

Name of the Vulnerable Software and Affected Versions AgentAPI versions 0.3.3 and below Description AgentAPI, an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, and Codex, is susceptible to a client-side DNS rebinding attack when hosted over plain HTTP on localhost. An attacker can gain acce...

PT-2025-39909

Name of the Vulnerable Software and Affected Versions vet versions prior to 1.12.5 Description The software is susceptible to a DNS rebinding attack because of missing HTTP Host and Origin header validation. When used as an MCP server in SSE mode with default ports, the sqlite3 database containin...

CVE-2025-59163: Reliance on Reverse DNS Resolution for a Security-Critical Action

vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers when vet is used as an MCP server in SSE...

The vulnerability of the amdgpu_dm_hdcp.c component in the Linux operating system allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the amdgpudmhdcp.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the `net/sched/sch_hfsc.c` component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the net/sched/schhfsc.c component of the Linux operating system relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Code-Projects Simple Scheduling System SQL注入漏洞

Simple Scheduling System is a simple scheduling system. Simple Scheduling System suffers from a SQL injection vulnerability that originates from not securely filtering the faculty parameter in the /add.home.php file. An attacker could exploit this vulnerability to obtain sensitive database...

DELL PowerScale OneFS Information Disclosure Vulnerability

DELL PowerScale OneFS is a horizontally scalable NAS Network Attached Storage operating system from Dell Technologies that is primarily used to manage massive amounts of unstructured data. An information disclosure vulnerability exists in DELL PowerScale OneFS that originates from unauthorized...

IBM Cognos Controller and IBM Controller Encryption Issues Vulnerabilities

IBM Cognos Controller is an enterprise financial consolidation and reporting software from IBM. A security vulnerability exists in IBM Cognos Controller versions 11.0.0 through 11.0.1 and IBM Controller versions 11.1.0 through 11.1.1, which stems from the use of a hard-coded encryption key to sig...

The vulnerability of the decode_utf8 function in the base/gp_utf8.c software component of the Ghostscript document processing software allows an attacker to access confidential data and compromise its integrity.

The vulnerability of the decodeutf8 function in the base/gputf8.c software component of the Ghostscript document processing software is related to deficiencies in checking the path name to the restricted-access directory. Exploiting this vulnerability could allow an attacker to gain access to...

The vulnerability of the string_view.h component in the OpenImageIO image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the stringview.h component in the OpenImageIO image processing library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the erdma_accept_newconn() function in the drivers/infiniband/hw/erdma/erdma_cm.c file of the Linux kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the erdmaacceptnewconn function in the drivers/infiniband/hw/erdma/erdmacm.c file of the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause...

The vulnerability in the driver/md/dm-flakey.c component of the Linux operating system allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the drivers/md/dm-flakey.c component in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the pcf85063_nvmem_read() function in the drivers/rtc/rtc-pcf85063.c kernel module of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the pcf85063nvmemread function in the drivers/rtc/rtc-pcf85063.c component of the Linux operating system is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause servic...

The vulnerability of the DRM/AMD/display components in the Linux operating system allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the elflink.c component in the GNU Binutils development environment allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the elflink.c component of the GNU Binutils development environment is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...