Uncaught Exception

Overview mcp is a Model Context Protocol SDK Affected versions of this package are vulnerable to Uncaught Exception due to improper validation in the FastMCP Server process. An attacker can cause the service to become unavailable by sending malformed requests that trigger unhandled exceptions,...

CVE-2025-7060

CVE-2025-7060 concerns Monitorr up to 1.7.6m. The vulnerability affects the Installer component and specifically the file assets/config/_installation/mkdbajax.php. The issue is due to improper input validation when manipulating the datadir argument, enabling a remote attack. Documents indicate th...

IBM MQ 9.3 < 9.3.0.30 LTS / 9.3 < 9.4.3 CD / 9.4 < 9.4.0.12 LTS / 9.4.3 (7238313)

The version of IBM MQ Server running on the remote host is affected by a vulnerability as referenced in the 7238313 advisory. - CWE: CWE-295: Improper Certificate Validation CVE-2025-33181 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...

Host Header Injection

github.com/go-chi/chi is vulnerable to host header injection. The vulnerability is due to improper validation of the Host header in the RedirectSlashes function, allowing an attacker to manipulate redirects...

PDF-XChange Editor 缓冲区错误漏洞

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. An information disclosure vulnerability exists in PDF-XChange Editor, which is caused by a lack of proper validation of user-supplied data. An attacker could exploit this vulnerabilit...

PDF-XChange Editor 缓冲区错误漏洞

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. An information disclosure vulnerability exists in PDF-XChange Editor, which is caused by a lack of proper validation of user-supplied data. An attacker could exploit this vulnerabilit...

PDF-XChange Editor 缓冲区错误漏洞

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. An information disclosure vulnerability exists in PDF-XChange Editor, which is caused by a lack of proper validation of user-supplied data. An attacker could exploit this vulnerabilit...

PDF-XChange Editor 缓冲区错误漏洞

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. An information disclosure vulnerability exists in PDF-XChange Editor, which is caused by a lack of proper validation of user-supplied data. An attacker could exploit this vulnerabilit...

CVE-2025-52883: Improper Validation of Specified Type of Input

Meshtastic-Android is an Android application for the mesh radio software Meshtastic. Prior to version 2.5.21, an attacker is able to send an unencrypted direct message to a victim impersonating any other node of the mesh. This message will be displayed in the same chat that the victim normally...

CVE-2025-6547

CVE-2025-6547 is an Improp er Input Validation flaw in pbkdf2 (affecting pbkdf2

CVE-2025-52552

FastGPT is an AI Agent building platform. Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable to open redirect and DOM-based XSS. Improper validation and lack of sanitization of this parameter allows attackers execute malicious JavaScript or redirect them to...

CVE-2025-52919

In Yealink RPS before 2025-05-26, the certificate upload function does not properly validate certificate content, potentially allowing invalid certificates to be uploaded...

Authorization Bypass

Salt is vulnerable to an Authorization Bypass. The vulnerability is due to improper validation of minion messages, allowing an attacker with access to a minion key to execute jobs on other minions...

CVE-2025-49015: Improper Validation of Certificate with Host Mismatch

The Couchbase .NET SDK client library before 3.7.1 does not properly enable hostname verification for TLS certificates. In fact, the SDK was also using IP addresses instead of hostnames due to a configuration option that was incorrectly enabled by default...

CVE-2022-50020: Improper Validation of Specified Quantity in Input

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the filesystem to an unaligned cluster boundary. An online resize to a size that is not integral to cluster size results in the last iteration...

CVE-2025-4365: Improper Validation of Specified Quantity in Input

Arbitrary file read in NetScaler Console and NetScaler SDX SVM...

Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2024-12133 DESCRIPTION: A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate,...

CVE-2025-4418

An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files cache and buffers in a way that causes the...

LDAP Injection

Mattermost is vulnerable to LDAP Injection. The vulnerability is due to improper validation due to failure to sanitize LDAP group ID attributes in the /api/v4/ldap/groups/remoteid/link API when objectGUID is used as the Group ID Attribute...

CVE-2025-5868

A vulnerability, which was classified as critical, has been found in RT-Thread 5.1.0. This issue affects the function systhreadsigprocmask of the file rt-thread/components/lwp/lwpsyscall.c. The manipulation of the argument how leads to improper validation of array index...