CVE-2025-4540

A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows. It has been rated as critical. This issue affects some unknown processing of the component CLodopPrintService. The manipulation leads to unquoted search path. The attack needs to be approached locally. The complexity of an attack...

CVE-2025-27197 Lightroom Desktop | Out-of-bounds Write (CWE-787)

Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2025-20855 · Siemens · User Management +4

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions 4.1 through 5.0 SINEC NMS affected versions not specified SINEMA Remote Connect affected versions not specified Totally Integrated Automation Portal TIA Portal versions 17 through 20 User Management Component UMC...

PT-2025-20921

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager Mobile EPMM versions 12.5.0.0 and prior Description A flaw exists in the API component of Ivanti Endpoint Manager Mobile EPMM that allows authenticated attackers to execute arbitrary code through crafted API requests...

PT-2025-21021 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Animate versions 24.0.8, 23.0.11 and earlier Description: The issue is an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2025-21015 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Photoshop Desktop versions 26.5, 25.12.2 and earlier Description: The issue is an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2025-1514)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2025-1531)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-21055 · Intel · Intel Data Center Gpu Flex Series

Name of the Vulnerable Software and Affected Versions: IntelR Data Center GPU Flex Series for Windows versions prior to 31.0.101.4255 Description: The issue is related to improper access control in the IntelR Data Center GPU Flex Series for Windows driver software. This may allow an authenticated...

PT-2025-21125 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an incorrect authorization vulnerability that could lead to arbitrary code execution in the context of the current user. A high-privileged attacker...

PT-2025-21040 · Dimension · Dimension

Name of the Vulnerable Software and Affected Versions: Dimension versions 4.1.2 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. To exploit this problem, it is necessary for the victim to...

CVE-2025-4540

CVE-2025-4540 – MTSoftware C-Lodop (CLodopPrintService) Affected: MTSoftware C-Lodop, versions 6.6.1.1 through 6.6.12. The issue resides in CLodopPrintService and causes an unquoted search path vulnerability. Impact/attack: Local attacker can trigger the vulnerability; attack complexity is high w...

Revealing Weaknesses in Text Watermarking through Self-Information Rewrite Attacks

Text watermarking aims to subtly embed statistical signals into text by controlling the Large Language Model LLM's sampling process, enabling watermark detectors to verify that the output was generated by the specified model. The robustness of these watermarking algorithms has become a key factor...

PT-2025-20630 · Unknown · Sourcecodester Online College Library System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online College Library System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online College Library System. The issue is related to an unknown function of the file /index.php, where the...

PT-2025-20627 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue has been discovered, affecting the /pages/creditor add.php file, which can lead to sql injection. This issue can be exploited remotely. Recommendations: For...

PT-2025-20469 · Totolink · Totolink N150Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A vulnerability was found in the Virtual Server Page component, leading to cross-site scripting. The attack can be initiated remotely, and the exploit has been disclosed to the public...

Ubuntu: Security Advisory (USN-7504-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Crowding out the Noise: Algorithmic Collective Action under Differential Privacy

The integration of AI into daily life has generated considerable attention and excitement, while also raising concerns about automating algorithmic harms and re-entrenching existing social inequities. While the responsible deployment of trustworthy AI systems is a worthy goal, there are many...

PT-2025-20361 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel's cpufreq driver for sun50i has been resolved. The issue was caused by an out-of-bounds access when handling the nvmem cell, which was reported by a...

Debian: Security Advisory (DSA-5916-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...