Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpoints

Note This is a separate issue from the RCE vulnerability State Pollution currently being patched. While related to tokensecurity.js, it involves different endpoints and risks. Summary An unauthenticated information disclosure vulnerability allows any user to retrieve sensitive system information,...

PT-2026-6139

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The virtio transport get credit function in the Linux kernel contains a flaw related to credit calculation using unsigned arithmetic. Specifically, if the peer reduces its advertised...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993186)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993186 advisory. In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in hswephaslimitsbox pcigetdevice will increase t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992191)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992191 advisory. In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Handle cameras with invalid descriptors If the source entity does not contain an...

BELL-CVE-2025-68373

Bulletin has no description...

BELL-CVE-2025-68248

Bulletin has no description...

BELL-CVE-2025-68294

Bulletin has no description...

MINI-JQ7G-GRRM-93XJ

Bulletin has no description...

Arbitrary Code Injection

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Arbitrary Code Injection via the hasmetacommands function. An attacker can execute arbitrary commands on the system by crafting a SQL file that begins with a UTF-8 Byte Order Mark or special byte sequences...

MINI-RQXJ-GH6G-35VG

Bulletin has no description...

Exploit for CVE-2025-55182

CVE-2025-55182: React Server Components RCE A minimal proof o...

MINI-576H-RC24-66W6

Bulletin has no description...

JLSEC-2025-186 libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a...

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitindexadd can cause heap corruption that could be leveraged for arbitrary code execution. There...

BELL-CVE-2025-40017

Bulletin has no description...

EUVD-2017-0211

Malware in sbrugna...

EUVD-2025-20942

Malicious code in bioql PyPI...

EUVD-2022-55537

Malicious code in bioql PyPI...

EUVD-2025-29204

Malicious code in bioql PyPI...

MINI-WW93-RHH5-R329

Bulletin has no description...

CVE-2025-57248

A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file. When the file is opened, the application crashes inside libmupdf.dll, specifically in the DataPool::hasdata function...