HarmonyOS Memory Module Unauthorized Access

The vulnerability of the memory module of the HarmonyOS operating system is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the system...

CVE-2025-66260 PostgreSQL SQL Injection (status_sql.php)

PostgreSQL SQL Injection statussql.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in statussql.php. The statussql.php endpoint constructs...

CVE-2025-66260 PostgreSQL SQL Injection (status_sql.php)

PostgreSQL SQL Injection statussql.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in statussql.php. The statussql.php endpoint constructs...

Adminer Access Control Error

The vulnerability of the Adminer database management software is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access and modify protected information...

Compressor macOS Sequoia Code Execution

The vulnerability of the Compressor application for compressing and encoding video and audio materials on the macOS Sequoia operating system is related to access control errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-65957

Core Bot (open-source Discord bot for maple hospital servers) contained an information-disclosure vulnerability prior to commit dffe050, where API keys (SUPABASE_API_KEY, TOKEN) loaded from environment variables could be exposed in configuration summaries, logs, or embeds due to incomplete redact...

CVE-2025-65957 Core Bot is Leaking Sensitive Credentials in Logs, Errors, and Messages

Core Bot Is an Open Source discord bot made for maple hospital servers. Prior to commit dffe050, the API keys SUPABASEAPIKEY, TOKEN are loaded using environment variables, but there are cases in code error handling, summaries, webhooks where configuration summaries may inadvertently leak sensitiv...

CVE-2025-65942

VictoriaMetrics is a scalable solution for monitoring and managing time series data. In versions from 1.0.0 to before 1.110.23, from 1.111.0 to before 1.122.8, and from 1.123.0 to before 1.129.1, affected versions are vulnerable to DoS attacks because the snappy decoder ignored VictoriaMetrics...

runc security update

4:1.3.0-4 - rename errors.go to errorslinux.go - Related: RHEL-122400 4:1.3.0-3 - Add relevant patches to CVEs - Resolves: RHEL-122400 4:1.3.0-2 - fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 - Resolves: RHEL-122400 - Resolves: RHEL-122403 - Resolves: RHEL-122414...

Tenable Security Center Access Control Bypass

The vulnerability of the Tenable Security Center platform for managing vulnerabilities and analyzing security measures is related to access control errors. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

CVE-2025-56423

An issue in Austrian Academy of Sciences AW Austrian Archaeological Institute OpenAtlas v.8.12.0 allows a remote attacker to obtain sensitive information via the login error messages...

Mozilla Firefox Information Disclosure

The vulnerability of Mozilla Firefox and Firefox ESR browsers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

PT-2025-47927

Name of the Vulnerable Software and Affected Versions Austrian Academy of Sciences AW Austrian Archaeological Institute OpenAtlas version 8.12.0 Description An issue in OpenAtlas allows a remote attacker to obtain sensitive information via the login error messages. Recommendations At the moment,...

CVE-2025-56423

A security vulnerability exists in Austrian Academy of Sciences (AW) Austrian Archaeological Institute OpenAtlas v.8.12.0 , a database application for archaeology and history. A remote attacker can obtain sensitive information by leveraging login error messages (CWE-203). No information regarding...

Linux sync_file_merge Heap Buffer Overflow DoS

The vulnerability of the syncfilemerge function in the drivers/dma-buf/syncfile.c file of the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Memory Failure DoS

The vulnerability of the memoryfailure function in the mm/memory-failure.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel TPM Buffer Overflow DoS

The vulnerability of the tpmpmsuspend function in the drivers/char/tpm/tpm-interface.c file of the Linux kernel’s support for TPM-based alphanumeric devices is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service...

Linux kernel Android binder_update_page_range Heap Buffer Overflow DoS

The vulnerability of the binderupdatepagerange function in the drivers/android/binderalloc.c module of the Linux kernel’s communication driver for Android is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service...

Linux kernel umh Call User Mode Helper Exec

The vulnerability of the callusermodehelperexec function in the kernel/umh.c module of the Linux operating system is related to errors in system configuration or settings. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerabilities of the dqput and dquotinit functions in the Linux operating system are related to resource management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...