CVE-2025-67488 SiYuan: ZipSlip -> Arbitrary File Overwrite -> RCE

SiYuan is self-hosted, open source personal knowledge management software. Versions 0.0.0-20251202123337-6ef83b42c7ce and below contain function importZipMd which is vulnerable to ZipSlips, allowing an authenticated user to overwrite files on the system. An authenticated user with access to the...

CVE-2025-66508

1Panel (GitHub/Governance: 1Panel) contains a vulnerability where Gin’s default proxy trust config (TrustedProxies = 0.0.0.0/0) causes X-Forwarded-For headers to be trusted, letting attackers bypass IP-based access controls (AllowIPs, API whitelists, localhost checks) by sending X-Forwarded-For: ...

PT-2025-50293

Name of the Vulnerable Software and Affected Versions WeGIA versions 3.5.4 and below Description WeGIA is a web manager for institutions, primarily for Portuguese language users. The application does not properly validate and sanitize user inputs in the id categoria parameter of the...

PT-2025-49760

Name of the Vulnerable Software and Affected Versions 1Panel versions 2.0.14 and below Description 1Panel is a web-based control panel for Linux server management. Versions 2.0.14 and below are configured to trust all IP addresses as proxies, allowing attackers to spoof the X-Forwarded-For header...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. A security vulnerability exists in the Linux kernel that stems from improper locking of pcmmutex, which could lead to a kernel panic...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an FCLK p-state change underflow issue...

PT-2025-50295

Name of the Vulnerable Software and Affected Versions Taguette versions prior to 1.5.2 Description Taguette is a qualitative research tool susceptible to an open redirect issue. Attackers can create malicious URLs that redirect authenticated users to arbitrary external websites. The application...

Memos security vulnerabilities

Memos is a Memos open source open source hosted meme center with knowledge management and social features. A security vulnerability exists in Memos version v0.25.2, which stems from improper access control of the Identity Provider service and could lead to account takeover or denial of service...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from the American company Google. Google Android suffers from a security vulnerability that stems from resource exhaustion and could lead to a permanent denial of service...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from the American company Google. Google Android suffers from a security vulnerability that stems from a code logic error that could lead to local elevation of privilege...

Vulnerability-Lookup security vulnerabilities

Vulnerability-Lookup is an open source Vulnerability-Lookup platform for managing disclosure of vulnerabilities. A security vulnerability exists in Vulnerability-Lookup versions prior to 2.18.0 that stems from not securely handling user-controlled content and could lead to a stored cross-site...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from the American company Google. Google Android suffers from a security vulnerability that stems from a lack of permission checking, which could lead to cross-user media reading...

[SECURITY] Fedora 42 Update: chromium-143.0.7499.40-1.fc42

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 43 Update: chromium-143.0.7499.40-1.fc43

Chromium is an open-source web browser, powered by WebKit Blink...

OmniSafeBench-MM: A Unified Benchmark and Toolbox for Multimodal Jailbreak Attack-Defense Evaluation

Recent advances in multi-modal large language models MLLMs have enabled unified perception-reasoning capabilities, yet these systems remain highly vulnerable to jailbreak attacks that bypass safety alignment and induce harmful behaviors. Existing benchmarks such as JailBreakV-28K, MM-SafetyBench,...

GHSA-CMP6-M4WJ-Q63Q

creationtimestamp| type| source ---|---|--- 2025-12-05 16:53:55+00:00| seen| https://seclists.org/oss-sec/2025/q4/248...

[SECURITY] Fedora 42 Update: alexvsbus-2025.06.16.0-3.fc42

Alex vs Bus: The Race is a free and open source platform runner game in which a man who depends on public transportation in a developing country needs to run in order to catch the bus, or else he will have to wait an eternity for the next bus to come...

Sift or Get off the PoC: Applying Information Retrieval to Vulnerability Research with SiftRank

Security research is fundamentally a problem of resource constraint and consequent prioritization. There is simply too much attack surface and too little time and energy to spend analyzing it all. The most effective security researchers are often those who are most skilled at intuitively deciding...

CVE-2025-66489

Cal.com is open-source scheduling software. Prior to 5.9.8, A flaw in the login credentials provider allows an attacker to bypass password verification when a TOTP code is provided, potentially gaining unauthorized access to user accounts. This issue exists due to problematic conditional logic in...

[SECURITY] Fedora 43 Update: ubertooth-2020.12.R1-24.fc43

Project Ubertooth is an open source wireless development platform suitable for Bluetooth experimentation. Ubertooth ships with a capable BLE Bluetooth Smart sniffer and can sniff some data from Basic Rate BR Bluetooth Classic connections...