AZL-72851 CVE-2025-59529 affecting package avahi 0.8-5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc2, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although CLIENTSMAX ...

Exploit for CVE-2025-1337

CVE-2025-13377 – 10Web Booster ≤ 2.32.7 – Authenticated Arbitr...

Linux Distros Unpatched Vulnerability : CVE-2022-50479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd: fix potential memory leak This patch fix potential memory leak clksrc when function run into last return NULL. s/free/kfree/ - Alex CVE-2022-50479 Note...

Linux Distros Unpatched Vulnerability : CVE-2023-53371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: fix memory leak in mlx5efsttredirectanycreate The memory pointed to by the fs-any pointer is not freed in the error path of mlx5efsttredirectanycreat...

Linux Distros Unpatched Vulnerability : CVE-2022-50390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/ttm: fix undefined behavior in bit shift for TTMTTFLAGPRIVPOPULATED Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to...

Linux Distros Unpatched Vulnerability : CVE-2025-21853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freezemutex during mmap operation We use map-freezemutex to prevent races...

PT-2025-33065 · Code Projects · Job Diary

Name of the Vulnerable Software and Affected Versions: code-projects Job Diary version 1.0 Description: A SQL injection issue exists due to the manipulation of the ID argument in the /admin-inbox.php file. This allows for remote exploitation. The exploit has been publicly disclosed...

SUSE CVE-2025-6494

A vulnerability was found in sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833. It has been classified as problematic. This affects the function hashmapgetwithhash of the file gumbo-parser/src/hashmap.c. The manipulation leads to heap-based buffer overflow. An attack has to be...

PT-2025-24426 · Tp Link · Tp-Link Tl-Ipc544Ep-W4

Name of the Vulnerable Software and Affected Versions: TP-Link TL-IPC544EP-W4 version 1.0.9 Build 240428 Rel 69493n Description: A critical vulnerability has been found in the TP-Link TL-IPC544EP-W4 camera. The issue affects the sub 69064 function of the /bin/main file. The manipulation of the te...

PT-2025-22876 · Unknown · Perfreeblog

Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 4.0.11 Description: A vulnerability has been found in the function JwtUtil of the component JWT Handler, which leads to the use of a hard-coded cryptographic key. The attack can be initiated remotely, and the complexity of...

PT-2025-22314 · Unknown · Project Worlds Online Time Table Generator

Name of the Vulnerable Software and Affected Versions: projectworlds Online Time Table Generator version 1.0 Description: A critical issue affects the processing of the file "/admin/add course.php". The manipulation of the argument c/subname leads to SQL injection. This issue may be exploited...

PT-2025-15238 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the postID parameter in the edit method. Recommendations: For RUoYi version 4.8.0, consider disabling the edit method until a patch is...

PT-2025-14702 · Unknown · Code-Projects Matrimonial Site

Name of the Vulnerable Software and Affected Versions: Code-Projects Matrimonial Site version V1.0 Description: The issue concerns SQL Injection. It affects the /view profile.php API endpoint, specifically the id variable. There is no information provided about the estimated number of potentially...

PT-2025-12052

Name of the Vulnerable Software and Affected Versions: gaizhenbiao/chuanhuchatgpt version git d4ec6a3 Description: The issue is related to a local file inclusion vulnerability due to the use of the gradio component gr.JSON. This vulnerability allows unauthenticated users to access arbitrary files...

PT-2025-8946 · Hkcms · Hkcms

Name of the Vulnerable Software and Affected Versions: HkCms version 2.3.2.240702 Description: The issue is related to an arbitrary file write vulnerability in the Appcenter.php component. This vulnerability allows for the writing of files to arbitrary locations, potentially leading to security...

CVE-2024-47181

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementations of the Contiki-NG operating system. The problem can occur when either one of these RPL implementations is enabled and connected to an RPL...

PT-2025-5797 · Ibm · Ibm Security Verify Directory

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Directory versions 10.0.0 through 10.0.3 Description: The issue allows a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. Recommendations: For IBM Security...

PT-2025-5693 · Ibm · Ibm Cloud Pak For Business Automation

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Business Automation versions 18.0.0 through 22.0.2 Description: The issue allows restricting access to organizational data to valid contexts. However, tasks of type comment can be reassigned via API, which implicitly grants...

PT-2025-3364 · Beijing Sogou Technology Development Co. · Sogou Input

Name of the Vulnerable Software and Affected Versions: Beijing Sogou Technology Development Co., Ltd Sogou Input version 12.2.0 Description: An issue in the software allows attackers to access sensitive user information via supplying a crafted link. This is achieved by providing a manipulated lin...

PT-2025-3355 · Hangzhou Bobo Technology Co · Uu Game Booster

Name of the Vulnerable Software and Affected Versions: Hangzhou Bobo Technology Co Ltd UU Game Booster version 10.6.13 Description: An issue in Hangzhou Bobo Technology Co Ltd UU Game Booster allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For...