CVE-2025-8667

A vulnerability, which was classified as critical, was found in SkyworkAI DeepResearchAgent up to 08eb7f8eb9505d0094d75bb97ff7dacc3fa3bbf2. Affected is the function fromcode/fromdict/frommcp of the file src/tools/tools.py. The manipulation leads to os command injection. It is possible to launch t...

PT-2025-23987

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue concerns the behavior of os.OpenFile when the target path is a dangling symlink. On Unix systems, os.OpenFile with O CREATE and O EXCL flags never follows symlinks. However, on...

CVE-2025-4575

Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate. Impact summary: If a user intends to make a trusted certificate rejected for a particular use it will be instead marked as trusted for that use. A copy & paste...

PT-2025-20609 · Apple · Ios

Name of the Vulnerable Software and Affected Versions: Apple iOS affected versions not specified Description: The issue concerns an unvalidated redirect in Apple iOS. No specific details about the technical aspects of the issue, such as API endpoints, vulnerable parameters, or function names, are...

SUSE CVE-2025-3408

A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the function stbdupreplace. The manipulation leads to integer overflow. The attack may be launched remotely. Continious delivery with rolling releases is used by this product...

PT-2025-2353 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A CVE record was rejected due to non-usage, following CNA rules. No information is provided about the issue itself, including general details or potential impacts...

PT-2025-2340 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

PT-2025-2323 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

PT-2025-2342 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A vulnerability alert has been mentioned, but details about the issue are not provided. No information is available about potentially affected...

PT-2024-35842 · Unknown · Rohit Harsh Fence Url

Name of the Vulnerable Software and Affected Versions: Rohit Harsh Fence URL versions n/a through 2.0.0 Description: The issue is related to improper neutralization of input during web page generation, leading to a Stored Cross-Site Scripting XSS vulnerability. This allows for Stored XSS attacks...

PT-2024-40625 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash state includes functions such as yara yyparse, yr lex...

CVE-2024-9077

A vulnerability classified as problematic has been found in dingfangzu up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. Affected is an unknown function of the file scripts/order.js of the component Order Checkout. The manipulation of the argument address-name leads to cross site scripting. It is...

PT-2024-39014 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate security issue was withdrawn due to functional expectation. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2024-25095 · Qualcomm · 205 Mobile Firmware +228

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption when a user provides data for FM HCI command control operations. This can potentially lead to security risks. The...

PT-2024-29699 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to an access control vulnerability in the security verification module. Successful exploitation of this vulnerability will affect integrity and confidentiality...

PT-2024-19832 · Qualcomm · 205 Mobile Platform Firmware +225

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a transient Denial of Service DOS that occurs while decoding an attach reject message received by a UE User Equipment, specifically...

PT-2024-23842 · Plug&Track +1 · Sensor Net Connect V2 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A CWE-79 issue allows malicious users to permanently inject arbitrary Javascript code, enabling cross-site scripting. This issue permits malicious users to inject code into web page...

PT-2024-29515 · Cybonet · Cybonet

Name of the Vulnerable Software and Affected Versions: Cybonet affected versions not specified Description: The issue concerns exposure of sensitive information to an unauthorized actor, classified as CWE-200. There is no information provided about the estimated number of potentially affected...

CVE-2024-7115

A vulnerability was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. It has been declared as critical. This vulnerability affects unknown code of the file /designationviewmore.php. The manipulation of the argument id leads to sql injection. The attack can be initiated...

PT-2024-28610 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A privilege escalation vulnerability exists in the account synchronisation module. Successful exploitation of this issue will affect availability. Recommendations: At the moment,...