CVE-2025-30107

On IROAD V9 devices, Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. A vulnerability in the dashcam's configuration management allows unauthorized users to modify settings, disable critical functions, and turn off battery...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the concatenateForRewrite method in JettyUtils when the management proxy is enabled - which it is in the default configuration. An attacker can manipulate the URL to redirect requests to an arbitrary...

PT-2025-12052

Name of the Vulnerable Software and Affected Versions: gaizhenbiao/chuanhuchatgpt version git d4ec6a3 Description: The issue is related to a local file inclusion vulnerability due to the use of the gradio component gr.JSON. This vulnerability allows unauthenticated users to access arbitrary files...

PT-2025-12007 · WordPress · Meintopf

Name of the Vulnerable Software and Affected Versions: mEintopf WordPress plugin versions 0.2.1 and earlier Description: The mEintopf WordPress plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used...

FlatPress 跨站请求伪造漏洞

FlatPress is a lightweight, easy to set up flat file blogging engine from the FlatPress open source. A cross-site request forgery vulnerability exists in FlatPress. An attacker exploiting this vulnerability can enable or disable plugins...

PT-2025-12073

Name of the Vulnerable Software and Affected Versions eosphoros-ai/db-gpt version v0.6.0 Description The issue allows execution of arbitrary SQL queries without access control through the web API endpoint POST /api/v1/editor/sql/run. This can be exploited to perform Arbitrary File Write using...

PT-2025-12252

Name of the Vulnerable Software and Affected Versions composiohq/composio version v0.4.4 Description A Server-Side Request Forgery SSRF issue exists, allowing an attacker to read the contents of any file in the system. This is achieved by exploiting the BROWSERTOOL GOTO PAGE and BROWSERTOOL GET...

PT-2025-12302 · Pandas +1 · Pandas +1

Name of the Vulnerable Software and Affected Versions: Dify Tools versions prior to the fixed version Description: A vulnerability in the Dify Tools' Vanna module of the langgenius/dify repository allows for a Pandas Query Injection in the latest version. The vulnerability occurs in the function...

PT-2025-12240

Name of the Vulnerable Software and Affected Versions h2oai/h2o-3 version 3.46.0 Description The issue arises from the /99/Models/name/json endpoint, which allows for arbitrary file overwrite on the target server. This is due to the exportModelDetails function in ModelsHandler.java, where the...

PT-2025-12250

Name of the Vulnerable Software and Affected Versions composiohq/composio version 0.4.3 Description The issue concerns the use of the unsafe eval function in the "mathematical calculator" endpoint to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is...

PT-2025-12249

Name of the Vulnerable Software and Affected Versions composiohq/composio version v0.4.2 Description A Server-Side Request Forgery SSRF issue exists, specifically in the "/api/actions/execute/WEBTOOL SCRAPE WEBSITE CONTENT" endpoint. This allows an attacker to read files, access AWS metadata, and...

PT-2025-12074

Name of the Vulnerable Software and Affected Versions eosphoros-ai/db-gpt version v0.6.0 Description The issue allows execution of arbitrary SQL queries without access control through the web API endpoint POST /api/v1/editor/chart/run. This can be exploited to perform Arbitrary File Write, enabli...

PT-2025-12077

Name of the Vulnerable Software and Affected Versions lm-sys/fastchat versions 0.2.36 and earlier Description The server fails to handle excessive characters appended to the end of multipart boundaries. This flaw can be exploited by sending malformed multipart requests with arbitrary characters a...

PT-2025-12172

Name of the Vulnerable Software and Affected Versions h2oai/h2o-3 version 3.46.0 Description The issue allows an attacker to encrypt any files on the target server with a key of their choosing through an endpoint exposing a custom EncryptionTool. This can result in ransomware-like behavior, makin...

PT-2025-12235

Name of the Vulnerable Software and Affected Versions modelscope/agentscope versions all Description The issue is related to a path traversal problem in the application. It is present in the "/delete-workflow" endpoint, which allows an attacker to delete arbitrary files from the filesystem. This...

PT-2025-12287

Name of the Vulnerable Software and Affected Versions berriai/litellm versions 1.44.9 through 1.44.11 Description The issue affects the litellm/litellm core utils/litellm logging.py file, where the API key masking code only masks the first 5 characters of the key. This results in the leakage of...

Unexpected Status Code or Return Value

Overview Affected versions of this package are vulnerable to Unexpected Status Code or Return Value in initConn, which causes out of order responses when CLIENT SETINFO times out while establishing a connection. Workaround This vulnerability can be avoided by setting DisableIndentity to true when...

CVE-2025-30235

The CVE-2025-30235 entry concerns Shearwater SecurEnvoy SecurAccess Enrol prior to version 9.4.515. The vulnerability arises from improper handling of concurrent authentication attempts, allowing hundreds of failed logins before detection rather than limiting to the intended threshold of 10. This...

kernel security update

4.18.0-553.45.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

PT-2025-11700

Name of the Vulnerable Software and Affected Versions kin-openapi versions prior to 0.131.0 Description The issue arises when validating a request with a multipart/form-data schema. If the OpenAPI schema allows it, an attacker can upload a crafted ZIP file, such as a ZIP bomb, causing the server ...