VMware Spring AI 安全漏洞

VMware Spring AI is a development framework by the American company VMware, which integrates artificial intelligence and large language model capabilities within the Spring ecosystem. Versions of VMware Spring AI prior to 1.0.5 and 1.1.4 contained security vulnerabilities. These vulnerabilities...

BS Producten Petcam 安全漏洞

BS Producten Petcam is a smart camera device from the Dutch company BS Producten, designed for remote monitoring of pet conditions and video viewing. Version 33.1.0.0818 of BS Producten Petcam has a security vulnerability. This vulnerability stems from improper access control, which may allow...

firewalld 安全漏洞

Firewalld is an open-source firewall software developed by Firewalld projects. There are security vulnerabilities in Firewalld, which stem from improper authorization. These vulnerabilities may allow local users to modify the firewall settings without proper authorization...

The vulnerability of the `update_eth regs async()` function in the `drivers/net/usb/pegasus.c` file of the Linux kernel’s network adapter driver module allows a hacker to cause a service failure.

The vulnerability of the updateeth regs async function in the drivers/net/usb/pegasus.c file of the Linux network adapter driver module is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2025-69988

BS Producten Petcam 33.1.0.0818 is vulnerable to Incorrect Access Control. An unauthenticated attacker in physical proximity can associate with this open network. Once connected, the attacker gains access to the camera's private network interface and can retrieve sensitive information, including...

CVE-2026-30689

In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure. Unauthorized parties can obtain sensitive administrator account information via a valid token, threatening system security. NOTE: Blog.Admin is related front-end...

PT-2026-28691

Name of the Vulnerable Software and Affected Versions letta-ai letta version 0.16.4 Description A flaw exists in the resolve type function within the letta/functions/ast parsers.py file. This issue involves improper neutralization of directives in dynamically evaluated code, potentially allowing...

ROS-20260327-73-0011

Vulnerability in NetworkManager related to improper saving of permissions. Exploitation of the vulnerability may allow an attacker to escalate privileges...

Page Replica 代码问题漏洞

Page Replica is an open-source tool for web content extraction and structured processing developed by Page Replica. Versions of Page Replica e4a7f52e75093ee318b4d5a9a9db6751050d2ad0 and earlier have code vulnerabilities. These vulnerabilities stem from improper handling of the parameter url in th...

PT-2026-28417

Name of the Vulnerable Software and Affected Versions Blog.Core versions prior to bcb4d17 Description The 'getinfobytoken' API endpoint contains improper access control, which allows unauthorized parties to obtain sensitive administrator account information by using a valid token. This issue lead...

itsourcecode Free Hotel Reservation System 安全漏洞

itsourcecode Free Hotel Reservation System is an open-source hotel reservation system developed by itsourcecode. Version 1.0 of the system has a security vulnerability; this vulnerability stems from incorrect handling of parameter IDs in the file admin/mod-room/index.php?view=edit, which may lead...

CVE-2026-30689

In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure. Unauthorized parties can obtain sensitive administrator account information via a valid token, threatening system security. NOTE: Blog.Admin is related front-end...

CVE-2025-61190

A Reflected Cross-Site Scripting XSS vulnerability has been identified in DSpace JSPUI 6.5 within the search/discover filtering functionality. The vulnerability exists due to improper sanitization of user-supplied input via the filtertype1 parameter...

OpenText Identity Manager 安全漏洞

OpenText Identity Manager is an identity governance platform provided by OpenText Corporation in Canada, which offers capabilities for managing the identity lifecycle and access control. Version 25.2 of OpenText Identity Manager contains a security vulnerability. This vulnerability stems from...

The vulnerability of the rpi_firmware_probe() function in the drivers/firmware/raspberrypi.c module of the Linux kernel’s firmware driver allows a hacker to cause a system failure.

The vulnerability of the rpifirmwareprobe function in the drivers/firmware/raspberrypi.c file of the Linux kernel’s firmware driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-34352

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions...

CVE-2025-14684

IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...

CVE-2026-33674

PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 improperly use the validation framework. Versions 8.2.5 and 9.1.0 contain a fix. No known workarounds are available...

Improper Verification of Cryptographic Signature

Overview org.webjars.npm:node-forge is a WebJar for node-forge. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in ASN.1 structures during RSA signature verification. An attacker can bypass signature verification and inject forged signatures by...

Improper Authorization

Overview @openclaw/synology-chat is a Synology Chat channel plugin for OpenClaw Affected versions of this package are vulnerable to Improper Authorization in the webhook process. An attacker can gain unauthorized access to direct message policies by exploiting a path collision in the multi-accoun...