GTT Tax Information System security vulnerabilities

GTT Sistema de Información Tributario is an e-government platform from GTT USA. A security vulnerability exists in GTT Sistema de Información Tributario that stems from an authentication method bypass that could allow an attacker to impersonate any domain user...

Linux Distros Unpatched Vulnerability : CVE-2025-40271

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/proc: fix uaf in procreaddirde Pde is erased from subdir rbtree through rberase, but not set the node to EMPTY, which may result in uaf access. We should us...

CVE-2025-40271

In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in procreaddirde Pde is erased from subdir rbtree through rberase, but not set the node to EMPTY, which may result in uaf access. We should use RBCLEARNODE set the erased node to EMPTY, then pdesubdirnext will...

CVE-2025-63363: Improper Access Control

A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH B Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to execute de-authentication attacks, allowing crafted deauthentication and disassociation frames to be broadca...

CVE-2025-64763: Protection Mechanism Failure

Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, when Envoy is configured in TCP proxy mode to handle CONNECT requests, it accepts client data before issuing a 2xx response and forwards that data to the upstream TCP connection. If a forwardi...

m9s-account-banking-import (>=5.2.0, <=5.2.7), m9s-account-banking-import-hibiscus (>=5.2.0, <=5.2.4) +218 more potentially affected by CVE-2025-66422 via trytond (5.2.20)

trytond PYPI version 5.2.20 is affected by a known vulnerability. The following packages have a transitive dependency on trytond and may be impacted: - m9s-account-banking-import =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.2, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.4 and more Source...

mds-account-de-skr04 (>=4.6.0, <=4.6.1), mds-account-invoice-confirmpost (4.6.0) +133 more potentially affected by CVE-2025-66422 via trytond (4.6.22)

trytond PYPI version 4.6.22 is affected by a known vulnerability. The following packages have a transitive dependency on trytond and may be impacted: - mds-account-de-skr04 =4.6.0, =4.6.0, =4.6.0, =4.6.4, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.4 and more Source cves: CVE-2025-66422 Source advisory:...

JLSEC-2025-259 LibTIFF 4.3.0 has an out-of-bounds read in `_TIFFmemcpy` in `tif_unix.c` in certain situations...

LibTIFF 4.3.0 has an out-of-bounds read in TIFFmemcpy in tifunix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field...

PT-2025-55417

LibTIFF 4.3.0 has an out-of-bounds read in TIFFmemcpy in tif unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field...

rgui-3.4.4-seh-bof-exploit

💥 Exploração de Buffer Overflow SEH Overwrite no RGui 3.4.4...

helm-ai (>=0.1.0, <=0.2.5), iflow-mcp-behinduall-wiki-js-mcp (1.0.0) +4 more potentially affected by CVE-2025-62801 via fastmcp (0.1.0)

fastmcp PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - helm-ai =0.1.0, =0.1.0, =0.1.1, =0.1.12 Source cves: CVE-2025-62801 Source advisory: OSV:GHSA-RJ5C-58RQ-J5G5...

learn_exploit_dev

Este repositorio contiene un seguim...

MAL-2025-48624 Malicious code in de-sxm-reactlib (npm)

The package de-sxm-reactlib was found to contain malicious code...

Malicious code in de-sxm-reactlib (npm)

The package de-sxm-reactlib was found to contain malicious code...

CVE-2025-60131

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zoefff Werk aan de Muur werk-aan-de-muur allows Stored XSS.This issue affects Werk aan de Muur: from n/a through = 1.5...

EUVD-2025-35426

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zoefff Werk aan de Muur werk-aan-de-muur allows Stored XSS.This issue affects Werk aan de Muur: from n/a through = 1.5...

CVE-2025-60131

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zoefff Werk aan de Muur werk-aan-de-muur allows Stored XSS.This issue affects Werk aan de Muur: from n/a through = 1.5...

CVE-2025-60131

CVE-2025-60131: Stored XSS in Zoefff Werk aan de Muur werk-aan-de-muur WordPress plugin (

CVE-2025-60131 WordPress Werk aan de Muur Plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zoefff Werk aan de Muur werk-aan-de-muur allows Stored XSS.This issue affects Werk aan de Muur: from n/a through = 1.5...

CVE-2025-60131 WordPress Werk aan de Muur Plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zoefff Werk aan de Muur werk-aan-de-muur allows Stored XSS.This issue affects Werk aan de Muur: from n/a through = 1.5...