PT-2025-43949

Name of the Vulnerable Software and Affected Versions Open5GS versions up to 2.7.5 Description A reachable assertion issue in Open5GS up to version 2.7.5 can lead to a denial of service. An attacker with network access to the Network Repository Function NRF can exploit this by sending a Network...

PT-2025-47717

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the btrfs file system within the Linux kernel, specifically in the btrfs add qgroup relation function. This occurs when the function is called with invalid qgroup...

PT-2025-43697

Name of the Vulnerable Software and Affected Versions Bitcoin Core versions through 29.0 Description The software is susceptible to Uncontrolled Resource Consumption. As of October 25, 2025, the identifier CVE-2025-54604 is not a valid identifier and is not included in the National Vulnerability...

PT-2025-43695

Name of the Vulnerable Software and Affected Versions Bitcoin Core affected versions not specified Description The software contains an issue that requires the victim to run it on an old 32-bit system and to have configured a large, non-standard mempool. An attacker must then craft an invalid 1 G...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to check the value of ssize, which could lead to security issues in encryption and decryption operatio...

PT-2025-43698

Name of the Vulnerable Software and Affected Versions Bitcoin Core versions through 29.0 Description The software is susceptible to an issue involving uncontrolled resource consumption. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2025-62397

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance...

CVE-2025-62397 Moodle: router produces json instead of 404 error for invalid course id

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance...

EUVD-2025-35670

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance...

CVE-2025-62397 Moodle: router produces json instead of 404 error for invalid course id

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance...

CVE-2025-62397

CVE-2025-62397 describes a router-side issue where responses to invalid course IDs are inconsistent, enabling an attacker to infer which course IDs exist (information disclosure for reconnaissance). The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) indicates network access with low confi...

CVE-2025-62397 Moodle: router produces json instead of 404 error for invalid course id

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2025-11021: Ignored invalid date when processing cookies to prevent out-of-bounds read bsc1250562. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2025:3752-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-11021: Ignored invalid date when processing cookies to prevent out-of-bounds read bsc1250562...

CVE-2025-41402

Client-Side Enforcement of Server-Side Security CWE-602 in the Command Centre Server allows a privileged operator to enter invalid competency data, bypassing expiry checks. This issue affects Command Centre Server: 9.30 prior to vEL9.30.2482 MR2, 9.20 prior to vEL9.20.2819 MR4, 9.10 prior to...

CVE-2025-41402

CVE-2025-41402 affects Gallagher Command Centre Server. Root cause: Client-Side Enforcement of Server-Side Security (CWE-602) allowing a privileged operator to bypass expiry checks and enter invalid competency data. Affected: 9.30 until MR2 vEL9.30.2482, 9.20 until MR4 vEL9.20.2819, 9.10 until MR...

CVE-2025-41402

Client-Side Enforcement of Server-Side Security CWE-602 in the Command Centre Server allows a privileged operator to enter invalid competency data, bypassing expiry checks. This issue affects Command Centre Server: 9.30 prior to vEL9.30.2482 MR2, 9.20 prior to vEL9.20.2819 MR4, 9.10 prior to...

CVE-2025-41402

Client-Side Enforcement of Server-Side Security CWE-602 in the Command Centre Server allows a privileged operator to enter invalid competency data, bypassing expiry checks. This issue affects Command Centre Server: 9.30 prior to vEL9.30.2482 MR2, 9.20 prior to vEL9.20.2819 MR4, 9.10 prior to...

PT-2025-43445

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance. This could assist...

Gallagher Command Centre Server 安全漏洞

Gallagher Command Centre Server is a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. A security vulnerability exists in Gallagher Command Centre Server that stems from improper enforcement of server-side security mechanisms on the client side,...