CVE-2025-59336

Luanox is a module host for Lua packages. Prior to 0.1.1, a file traversal vulnerability can cause potential denial of service by overwriting Phoenix runtime files. Package names like ../../package are not properly filtered and pass the validity check of the rockspec verification system. This...

PT-2025-38369

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the Linux kernel when using the debugfs lookup function. Failing to call dput on the result of debugfs lookup leads to a memory leak over time. The issue is...

PT-2025-38441

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue where a memory leak occurs when reading the fw info file completely, as the status tracking object is not freed after returning NULL, indicating no...

PT-2025-38398

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the USB subsystem related to the isp1362 driver when using the debugfs lookup function. Failing to call dput on the result of debugfs lookup leads to a memory lea...

PT-2025-38450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where the SCSI subsystem ses could attempt to manage an enclosure with no components. This could lead to an error if the driver tries to manage a...

PT-2025-38400

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the USB gadget functionality related to the lpc32xx udc driver. The issue occurs when using the debugfs lookup function without properly...

PT-2025-38464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a refcount bug in the qrtr recvmsg function. This issue occurs in concurrent scenarios involving qrtr recvmsg and qrtr endpoint unregister, potentially leading ...

PT-2025-38417

Name of the Vulnerable Software and Affected Versions fuyang lipengjun platform version 1.0 Description A vulnerability exists in the AttributeCategoryController function within the /attributecategory/queryAll file, leading to improper authorization. The attack can be launched remotely and the...

PT-2025-38388

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the USB gadget pxa25x udc driver when using the debugfs lookup function. Failing to call dput on the result of debugfs lookup leads to a memory leak over time. Th...

PT-2025-38433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was resolved in the wpcm450 aic of init function within the irqchip/wpcm450 module. If the of iomap function failed, the aic memory was not freed before the function...

CVE-2025-35430 CISA Thorium insecure downloaded file path validation

CISA Thorium does not adequately validate the paths of downloaded files via 'downloadephemeral' and 'downloadchildren'. A remote, authenticated attacker could access arbitrary files subject to file system permissions. Fixed in 1.1.2...

PT-2025-38264

Name of the Vulnerable Software and Affected Versions Wondershare Repairit version 6.5.2 Wondershare Repairit affected versions not specified Description The software contains an authentication bypass issue stemming from incorrect permission assignments within a storage account token. This allows...

PT-2025-38208

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a use-after-free UAF issue occurring during concurrent SMB2 tree disconnect operations. A patch introduces the TREE CONN EXPIRE flag for transaction control...

PT-2025-38173

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was discovered in the Linux kernel related to the alloc sk msg function. Specifically, alloc sk msg could be called from a non-sleepable context, potentially leading to issues...

PT-2025-38185

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the RDMA/cxgb4 component where a null pointer dereference could occur in the pass establish function. This happens if get ep from tid fails to locat...

PT-2025-38157

Name of the Vulnerable Software and Affected Versions: Perplexity AI GPT-4 affected versions not specified Description: An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter. Recommendations: At the moment, there is no information about a new...

CVE-2025-55115

CVE-2025-55115 affects BMC Control-M/Agent versions 9.0.18–9.0.20 (and potentially earlier unsupported builds). The vulnerability is a path traversal in the Control-M/Agent that can enable local privilege escalation when an attacker has access to the system running the Agent. Impact is described ...

PT-2025-46758

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to race conditions when using task locktsk-group leader within the sys prlimit64 function and its associated do prlimit path. Specifically, the...

CVE-2025-6088 Improper Authorization in danny-avila/librechat

In version 0.7.8 of danny-avila/librechat, improper authorization controls in the conversation sharing feature allow unauthorized access to other users' conversations if the conversation ID is known. Although UUIDv4 conversation IDs are generated server-side and are difficult to brute force, they...

PT-2025-44688

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in Google Chrome that could allow attackers to impact the system. The issue is an out-of-bounds read within the V8 JavaScript engine. Microsoft Edge, being Chromium-based,...