CVE-2024-52975: Exposure of Sensitive Information to an Unauthorized Actor

An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled...

CVE-2023-37018

Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a "UE Capability Info Indication" message missing a required "MMEUES1APID" field to repeatedly crash the MME, resulting in denial of service...

CVE-2024-43770

In gattsprocessfindinfo of gattsr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

VulnCheck KEV: CVE-2023-26134

Versions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported method gitCommitInfo fails to sanitize its parameter commit, which later flows into a sensitive command execution API. As a result, attackers may inject malicious commands once...

PT-2025-8808

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.0-rc7 Description A vulnerability in the Linux kernel has been resolved, which occurred when the NETWORK INTERFACE INFO::LinkSpeed was not set by the server, causing the client to handle any values and...

AZL-56154 CVE-2025-21649 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices Currently, HIP08 devices does not register the ptp devices, so the hdev-ptp is NULL. But the tx process would still try to set hardware time stamp info with...

PT-2025-3959 · Epic Games · Epic Games Launcher

Name of the Vulnerable Software and Affected Versions: Epic Games Launcher versions up to 17.2.1 Description: A vulnerability was found in the Epic Games Launcher, affecting the library profapi.dll of the component Installer. The issue leads to an untrusted search path. Local attack is required,...

PT-2025-1347 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an unauthenticated remote code execution in the Apache HTTP Server. No specific details about affected versions, estimated number of potentially affected...

PT-2025-1339 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: In the ip6 append data function of ip6 output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to a local privilege escalation...

PT-2025-7558 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.06 Description: The issue is related to a Buffer Overflow in the get parentControl list Info function. Recommendations: For Tenda AC8 version 16.03.34.06, consider disabling the get parentControl list Info function...

PT-2025-5097 · WordPress · Wp Options Editor

Name of the Vulnerable Software and Affected Versions: WP Options Editor versions n/a through 1.1 Description: A Cross-Site Request Forgery CSRF issue allows Privilege Escalation. This means an attacker can perform actions on behalf of another user without their knowledge or consent...

PT-2025-4739

Name of the Vulnerable Software and Affected Versions RE11S version 1.11 Description A stack overflow issue was discovered in the setWAN function via the pptpUserName parameter. This issue can be exploited, potentially leading to unintended consequences. No information is available about the...

Vulnerabilities fixed in Rsync

Rsync Project has fixed vulnerabilities in Rsync versions 3.4.0. The most critical vulnerabilities in Rsync include a heap-based 'buffer overflow' CVE-2024-12084 and an 'info leak' CVE-2024-12085 that can lead to arbitrary code execution present in Rsync versions 3.2.7 & 3.3.0. In addition, there...

rsync: Info Leak via Uninitialized Stack Contents

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time...

rsync: Info Leak via Uninitialized Stack Contents

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time...

CVE-2025-0485: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been classified as problematic. Affected is an unknown function of the file /fladmin/sysconfigdoedit.php. The manipulation of the argument info leads to cross site scripting. It is possible to launch the attack remotely. The exploi...

PT-2025-14489

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the HP 5MP Camera USB ID 0408:5473. The camera reports a HID sensor interface that is not actually implemented, causing...

native-php-cms 安全漏洞

native-php-cms is a website builder system for FLi individual developers. A security vulnerability exists in version 1.0 of native-php-cms, which stems from the parameter info in the file /fladmin/sysconfigdoedit.php that can lead to cross-site scripting attacks...

PT-2025-3915

Name of the Vulnerable Software and Affected Versions Fanli2012 native-php-cms version 1.0 Description A problem has been found in the software. It affects an unknown function of the file /fladmin/sysconfig doedit.php. The issue arises from the manipulation of the info argument, leading to...

Oracle Linux 9 : rsync (ELSA-2025-0324)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0324 advisory. 3.2.3-20.1 - Resolves: RHEL-72495 - Info Leak via Uninitialized Stack Contents Tenable has extracted the preceding description block directly from the Oracle...