CVE-2025-67806

The login mechanism of Sage DPW 202106004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 202106000. On-premise administrators can toggle this behavior in newer versions...

CVE-2025-67807

The login mechanism of Sage DPW 202506004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 202106000. On-premise administrators can toggle this behaviour in newer versions...

CLEANSTART-2026-SW07802 Security fixes for CVE-2025-61729 applied in versions: 1.1.0-r0

Security vulnerability affects the external-secrets package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2025-67807

The login mechanism of Sage DPW 202506004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 202106000. On-premise administrators can toggle this behaviour in newer versions...

PT-2026-29543

The login mechanism of Sage DPW 2025 06 004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021 06 000. On-premise administrators can toggle this behaviour in newer versions...

CVE-2025-67807

The login mechanism of Sage DPW 202506004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 202106000. On-premise administrators can toggle this behaviour in newer versions...

CVE-2026-29111

A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication IPC API call with spurious data. In older versions v249 and earlier, this can lead to stack overwriting with attacker-controlled content,...

PT-2026-25980

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-17 ImageMagick versions prior to 6.9.13-42 Description ImageMagick is software used for editing and manipulating digital images. A bug exists in the NewXMLTree method that could cause a crash due to an...

netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

A flaw was found in Netty. With specially crafted input, BrotliDecoder and some other decompressing decoders will allocate a large number of reachable byte buffers, which can lead to denial of service...

PT-2026-20335

Name of the Vulnerable Software and Affected Versions Beetel 777VR1 versions up to 01.00.09 Description A security issue exists in Beetel 777VR1 up to version 01.00.09, related to the Telnet Service/SSH Service component. The issue involves insecure default initialization of a resource and can be...

PT-2026-6711

Name of the Vulnerable Software and Affected Versions AMS module affected versions not specified Description A permission control issue exists within the AMS module. Successful exploitation of this issue may impact system availability. Recommendations At the moment, there is no information about ...

PT-2026-6246

Name of the Vulnerable Software and Affected Versions WP Bannerize Pro versions through 1.11.0 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. This allows for potential exploitation. Recommendations Update WP Bannerize...

CVE-1999-0880

Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly...

PT-2026-1676

Name of the Vulnerable Software and Affected Versions FaceSentry Access Control System version 6.4.8 Description The FaceSentry Access Control System is susceptible to a cleartext transmission issue. This allows remote attackers to intercept authentication credentials through man-in-the-middle...

PT-2026-2104

Name of the Vulnerable Software and Affected Versions Tarkov Data Manager versions prior to commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8 Description The Tarkov Data Manager is a tool used to manage Tarkov item data. Prior to commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8, a time-based blind S...

PT-2026-1539

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A memory corruption issue occurs when multiple threads concurrently access and modify shared resources. This can lead to unpredictable behavior and potentially allow for malicious code execution...

PT-2025-53896

Name of the Vulnerable Software and Affected Versions Crowdsignal Forms versions through 1.7.2 Description A missing authorization issue exists in Automattic Crowdsignal Forms. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access...

PT-2025-53274

Name of the Vulnerable Software and Affected Versions Gora Tech Cooked versions through 1.11.2 Description An authorization issue exists in Gora Tech Cooked, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Gora Tech Cooked to a version...

Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2024-37047)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2025-64760

Tuleap has a CSRF protection vulnerability in the tracker trigger management functionality. Affected products are Tuleap Community Edition older than 17.0.99.1763126988 and Tuleap Enterprise Edition older than 17.0-3 and 16.13-8. The issue allows attackers to create or remove tracker triggers due...