CVE-2025-28072

PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php...

PT-2025-16623

Name of the Vulnerable Software and Affected Versions nopCommerce versions prior to 4.80.0 Description The issue is related to a race condition that allows for the duplicate redeeming of gift cards due to the lack of locking for order placement. Recommendations For versions prior to 4.80.0, updat...

2025 Ransomware: Business as Usual, Business is Booming

Getting an edge on your adversaries involves understanding their behaviors and their mindset. Rapid7 Labs took a look at internal and publicly-available ransomware data for Q1 2025 and added our own insights to provide a picture of the year thus far—and what you can do now to reduce your attack...

AZL-60288 CVE-2025-21962 affecting package kernel for versions less than 6.6.85.1-2

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffi...

AZL-59876 CVE-2025-21936 affecting package kernel for versions less than 6.6.85.1-2

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Add check for mgmtallocskb in mgmtdeviceconnected Add check for the return value of mgmtallocskb in mgmtdeviceconnected to prevent null pointer dereference...

CVE-2024-10950

In binary-husky/gptacademic version = 3.83, the plugin CodeInterpreter is vulnerable to code injection caused by prompt injection. The root cause is the execution of user-provided prompts that generate untrusted code without a sandbox, allowing the execution of parts of the LLM-generated code. Th...

OpenText Service Management Automation X 安全漏洞

OpenText Service Management Automation X is advanced service management made easy by OpenText Canada. Based on embedded machine learning and analytics, it provides a smarter approach to IT Service Management ITSM, IT Asset Management ITAM and Enterprise Service Management ESM. A security...

Linux Distros Unpatched Vulnerability : CVE-2022-46280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted...

Intel PROSet/Wireless WiFi和Intel Killer WiFi 安全漏洞

Intel PROSet/Wireless WiFi and Intel Killer WiFi are both wireless network card drivers from Intel Corporation USA. A security vulnerability exists in Intel PROSet/Wireless WiFi and Killer WiFi prior to version 23.80, which stems from the presence of a stack-based buffer overflow that could allow...

PT-2025-6205 · Siemens · Simatic S7-1200 Cpu +1

Name of the Vulnerable Software and Affected Versions: SIMATIC S7-1200 CPU versions 6ES7211-1BE40-0XB0 through 6ES7217-1AG40-0XB0 SIPLUS S7-1200 CPU versions 6AG1212-1AE40-2XB0 through 6AG1215-1AF40-5XB0 Description: A vulnerability has been identified in certain SIMATIC S7-1200 CPUs, where...

CVE-2020-27866

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Authentication is not required to exploit this...

CVE-2024-29969

When a Brocade SANnav installation is upgraded from Brocade SANnav v2.2.2 to Brocade SANnav 2.3.0, TLS/SSL weak message authentication code ciphers are added by default for port 18082...

Check Point Response to CVE-2024-24911 - Out of Bounds read in the CPCA process on a Check Point Management Server

Cause An Out-of-Bounds read may occur when processing certain HTTP "POST" requests to the Security Management Server / Domain Management Server to the TCP port 18264. Repeated requests can cause a denial-of-service DoS of the cpca process and may lead it to exit unexpectedly with a core dump file...

CVE-2025-24739 WordPress FluentSMTP plugin <= 2.2.80 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Shahjahan Jewel FluentSMTP fluent-smtp allows Cross Site Request Forgery.This issue affects FluentSMTP: from n/a through = 2.2.80...

PT-2025-3684 · Unknown · Websam Deploymentmanager

Name of the Vulnerable Software and Affected Versions: WebSAM DeploymentManager versions 6.0 through 6.80 Description: The issue allows an attacker to reset configurations or restart products via the network due to an unspecified X-FRAME-OPTIONS. Recommendations: For versions 6.0 through 6.80,...

CVE-2024-52888 - Mobile Access File Share applications are vulnerable to stored XSS attacks

Symptoms - When an authenticated Mobile Access portal end-user browses to a File Share application, the portal may run a script while attempting to display a directory or some file's properties. Additionally, an authenticated attacker may store specially crafted file/dir names for other...

NEC WebSAM DeploymentManager 安全漏洞

NEC WebSAM DeploymentManager is an application from Japan Electric NEC. It can remotely manage machines. A security vulnerability exists in NEC WebSAM DeploymentManager versions v6.0 through v6.80 that originated from allowing an attacker to reboot the product via an unspecified network reset...

PT-2025-2974 · Siemens · Siprotec 5 Compact 7Sx800 +16

Name of the Vulnerable Software and Affected Versions: SIPROTEC 5 6MD84 CP300 versions prior to V9.80 SIPROTEC 5 6MD85 CP300 versions 7.80 through 9.79 SIPROTEC 5 6MD86 CP300 versions 7.80 through 9.79 SIPROTEC 5 6MD89 CP300 versions 7.80 through 9.89 SIPROTEC 5 6MU85 CP300 versions 7.80 through...

Menlo Security On-Premise 安全漏洞

Menlo Security On-Premise is a secure enterprise browser-native program from Menlo Security. A security vulnerability exists in Menlo Security On-Premise versions prior to 2.88 that stems from the possibility that Web policies may not always be applied correctly to intentionally misformatted clie...

Gallagher Controller 6000和Gallagher Controller 7000 安全漏洞

The Gallagher Controller 6000 and Gallagher Controller 7000 are both products of Gallagher New Zealand.The Gallagher Controller 6000 is an interface between a Gallagher Command Center server and distributed field hardware. The Gallagher Controller 7000 is a powerful network connected controller. ...