CVE-2025-29932

JetBrains GoLand prior to 2025.1 is affected by CVE-2025-29932: an XXE during debugging allows reading files via XML external entities. The vulnerability concerns the GoLand IDE (Go development) and is documented across multiple sources; no remediation details are provided in the supplied documen...

Stunnel format bug

Macaroon Advisory Hi, ppl We have recently discovered a format bug in stunnel= 3.8 in which the log function calls directly the syslog with only two parameters: sysloglevel, text. It should be sysloglevel, "s", text. If a user can pass any string that is written to the log file, he can exploit th...