CVE-2025-53909

CVE-2025-53909 affects mailcow: dockerized. A Server-Side Template Injection (SSTI) exists in the quota/quarantine notification template rendering system, allowing template expressions to be abused to execute code in certain contexts. The issue requires admin-level access to configure templates, ...

CVE-2025-53909: Improper Neutralization of Special Elements Used in a Template Engine

mailcow: dockerized is an open source groupware/email suite based on docker. A Server-Side Template Injection SSTI vulnerability exists in versions prior to 2025-07 in the notification template system used by mailcow for sending quota and quarantine alerts. The template rendering engine allows...

PT-2025-29910 · Mailcow · Mailcow

Name of the Vulnerable Software and Affected Versions: mailcow: dockerized versions prior to 2025-07 Description: A Server-Side Template Injection SSTI vulnerability exists in the notification template system used for sending quota and quarantine alerts. The template rendering engine allows...

CVE-2025-7574

A vulnerability, which was classified as critical, was found in LB-LINK BL-AC1900, BL-AC2100AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. Affected is the function reboot/restore of the file /cgi-bin/lighttpd.cgi of the component Web Interface. The manipulation leads to...

GHSA-3X8X-79M2-3W2W

creationtimestamp| type| source ---|---|--- 2025-07-16 04:34:54+00:00| seen| https://gist.github.com/safer-bot/65364abe7e289d78f57fa1a0a681a35a 2025-07-16 07:18:43+00:00| seen| https://gist.github.com/safer-bot/5e13e76a11d80f2378b1b43029c98dfc 2025-07-16 08:32:34+00:00| seen|...

The vulnerability of the Windows Notification Service (WNS), a notification service for Windows operating systems, allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Notification Service WNS on Windows operating systems relates to the possibility of memory exploitation after deallocation. Exploiting this vulnerability can allow an attacker to increase their privileges...

MINI-M7M2-W8H9-X632

Bulletin has no description...

Malicious code in ringcentral-google-drive-notification-add-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis afbe2fb4071ec030a6a51319f5f0b9d45664bf8caba681cfac58bb60bd001cf0 The OpenSSF Package Analysis project identified 'ringcentral-google-drive-notification-add-in' @ 2.2.2 npm as malicious. It is considered...

The vulnerability of the Windows Notification Service (WNS) on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Notification Service WNS on Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

BELL-CVE-2025-38275

Bulletin has no description...

sch_htb: make htb_qlen_notify() idempotent

...

PT-2025-33577

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The netfs copy-to-cache mechanism, used by Ceph with local caching, incorrectly handles asynchronous Direct I/O DIO write completion notifications. Specifically, when a request is...

CVE-2025-28245

Cross-site scripting XSS vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbitrary web script or HTML via the notification body...

CVE-2025-49726

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...

CVE-2025-49725

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...

PT-2025-29130 · Alteryx · Alteryx Server

Name of the Vulnerable Software and Affected Versions: Alteryx Server version 2023.1.1.460 Description: A cross-site scripting XSS issue exists in Alteryx Server. This allows remote attackers to inject arbitrary web script or HTML through the notification body. Recommendations: Update Alteryx...

CVE-2025-28245

A Cross-site scripting (XSS) vulnerability exists in Alteryx Server version 2023.1.1.460 . The flaw originates in the notification body , where remote attackers can inject arbitrary web scripts or HTML. This could lead to unauthorized actions or content manipulation in the context of the user's s...

PT-2025-29088 · Undefined · Undefined

CVE-2025-53747 Rejected reason https://t.co/df3bzZmSsr Vulnerability Notification: https://t.co/xhLrNnfyrO...

Alteryx Server 跨站脚本漏洞

Alteryx Server is a cloud-hosted or self-hosted application from Alteryx, Inc. for publishing, sharing and executing workflows. A security vulnerability exists in Alteryx Server version 2023.1.1.460, which originates in the body of the notification and could allow a remote attacker to inject...

CVE-2025-28245: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbitrary web script or HTML via the notification body...