Wireshark SEoL (1.3.x <= x <= 1.4.x)

According to its version, Wireshark is between 1.3.x and 1.4.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVE...

CVE-2024-43657 When uploading new firmware, a shell script inside a firmware file is executed during its processing. This can be used to craft a custom firmware file with a custom script with arbitrary code, which will then be executed on the charging station.

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: High. However, the attacker will need a low privilege account to gai...

CVE-2023-35685

In DevmemIntMapPages of devicememserver.c, there is a possible physical page uaf due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-35685

In DevmemIntMapPages of devicememserver.c, there is a possible physical page uaf due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

Missing Authentication for Critical Function

Overview django-mdeditor is an A simple Django app to edit markdown text. Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint...

CVE-2024-56437

Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect availability...

PT-2025-2044 · Unknown · Minigamecenter

Name of the Vulnerable Software and Affected Versions: MinigameCenter affected versions not specified Description: The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage. Recommendations: At the moment, there is no information about a...

PT-2025-3107 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions are specified. Description: The issue was initially considered but later rejected as it was determined not to be a security issue. Further investigation confirmed this assessment. Recommendations: A...

D-Link DIR-619L Multiple Vulnerabilities (2024 - 2025)

D-Link DIR-619L devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2025-4462 · Rto Gmbh · Dynamictags

Name of the Vulnerable Software and Affected Versions: RTO GmbH DynamicTags versions n/a through 1.4.0 Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to improper neutralization of special elements used in SQL commands. This allows an...

PT-2025-4547 · Greg Whitehead · Norse Rune Oracle Plugin

Name of the Vulnerable Software and Affected Versions: Greg Whitehead Norse Rune Oracle Plugin versions n/a through 1.4.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing...

PT-2025-4543 · Unknown · Affiliate Disclosure Statement

Name of the Vulnerable Software and Affected Versions: Affiliate Disclosure Statement versions n/a through 0.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This is a type of attack where an attacker tricks a user into performing...

PT-2025-4516 · Unknown · Instaform.Ir

Name of the Vulnerable Software and Affected Versions: instaform.ir فرم ساز فرم افزار versions n/a through 2.0 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS. Recommendations: For...

PT-2025-4560 · Instabot · Instabot

Name of the Vulnerable Software and Affected Versions: Instabot versions n/a through 1.10 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended actions on a web...

DEBIAN-CVE-2024-56760

In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Handle lack of irqdomain gracefully Alexandre observed a warning emitted from pcimsisetupmsiirqs on a RISCV platform which does not provide PCI/MSI support: WARNING: CPU: 1 PID: 1 at drivers/pci/msi/msi.h:121...

Improper Authentication

Overview nicegui is a Create web-based user interfaces with Python. The nice way. Affected versions of this package are vulnerable to Improper Authentication due to improper clearing of cookies through the handlehttp function of the air.py component. An attacker can gain unauthorized access to th...

CVE-2024-20154

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Pat...

PT-2025-1983 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A vulnerability has been identified, but details are not provided in the given input. No information is available about the estimated number of potentially affected devices or real-worl...

CVE-2024-53839

In GetCellInfoList of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation...

CVE-2024-53837

In prepareresponse of lwisperiodicio.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...