Linux file system Userfaultfd Writeprotect Data Compromise

The vulnerability of the userfaultfdwriteprotect function in the fs/userfaultfd.c module of the Linux file system support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

cpp-httplib write_headers()

The vulnerability of the writeheaders function in the cpp-httplib library is related to the lack of measures taken to neutralize CRLF sequences. Exploiting this vulnerability could allow an attacker, operating remotely, to modify protected information by sending a specially crafted HTTP request...

Incorrect Authorization

Overview actingweb is a The official ActingWeb library Affected versions of this package are vulnerable to Incorrect Authorization due to unsafe permission-override merge semantics in the mergepermissions function in actingweb/trustpermissions.py. When individual trust relationship overrides are...

PT-2026-28510

Name of the Vulnerable Software and Affected Versions Incus versions prior to 6.23.0 Description Incus, a system container and virtual machine manager, has an issue in its API for retrieving VM screenshots. This API uses a temporary file for QEMU to write the screenshot to, which is then sent to...

EUVD-2025-205611

Nest has a Fastify URL Encoding Middleware Bypass TOCTOU...

CVE-2025-69211

Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a Fastify URL encoding middleware bypass. A NestJS application is vulnerable if it uses @nestjs/platform-fastify; relies on NestMiddleware via MiddlewareConsumer for security checks...

CVE-2025-69211 Nest has a Fastify URL Encoding Middleware Bypass (TOCTOU)

Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a Fastify URL encoding middleware bypass. A NestJS application is vulnerable if it uses @nestjs/platform-fastify; relies on NestMiddleware via MiddlewareConsumer for security checks...

CVE-2025-69211 Nest has a Fastify URL Encoding Middleware Bypass (TOCTOU)

Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a Fastify URL encoding middleware bypass. A NestJS application is vulnerable if it uses @nestjs/platform-fastify; relies on NestMiddleware via MiddlewareConsumer for security checks...

D-Link DAP-1325 ExportSettings.sh Script Unauthorized Access

The vulnerability of the ExportSettings.sh /cgi-bin/ExportSettings.sh script of the D-Link DAP-1325 wireless signal booster software is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker to bypass security restrictions and gain...

Sprecher SPRECON-E Automation Module Unauthenticated Access

The vulnerability of the microprogramming software of the automation module Sprecher SPRECON-E is related to insufficiently secure data encryption. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Amiro.CMS Unauthorized Access

The vulnerability of the Amiro.CMS content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

App Router Next.js Vercel CLI compromise Data Compromise

The vulnerability of the App Router router on the Next.js software development platform and the Vercel command-line interface CLI platform is related to shortcomings in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected...

LibreChat Auth Bypass

The vulnerability of the LibreChat artificial intelligence-based platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

IBM OpenPages Info Disclosure

The vulnerability of IBM OpenPages, a risk management platform for enterprises, involves the disclosure of system data that is not accessible to authorized personnel in the controlled area. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose protected informatio...

JetBrains YouTrack Authentication Bypass

The vulnerability of the JetBrains YouTrack project and task management software relates to the bypassing of authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

MariaDB Server Unauthenticated Access

The vulnerability of the tools for interacting with MariaDB MCP MariaDB Server stems from insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Zohocorp ManageEngine Exchange Reporter Plus Unauthorized Access

The vulnerability of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

Elementor Devnex Addons Data Compromise

The vulnerability of the Devnex Addons component of the WordPress Elementor plugin, related to authentication errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Import from Excel Plugin Path Traversal

The vulnerability of the “Import from Excel” plugin is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Export/Import Goods to Excel Path Traversal

The vulnerability of the “Export/Import Goods to Excel” plugin is related to incorrect restrictions on the path name to the catalog. Exploitation of this vulnerability may allow an attacker operating remotely to gain unauthorized access to protected information...