Odoo Community Edition Authentication Bypass

The vulnerability of the CRM system Odoo Community Edition and the ERP system Odoo Enterprise Edition is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

ENTEK Authentication Bypass Info Disclosure

The vulnerability of the SCADA system “ENTEK” is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Framework Android Disclosure

The vulnerability of the Framework component in Android operating systems is related to the absence of authentication procedures. Exploiting this vulnerability can allow attackers to disclose protected information...

CVE-2025-10880: Insufficiently Protected Credentials

All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the proprietary "Dingtian Binary" protocol password by sending an unauthenticated GET request...

CVE-2025-10879: Insufficiently Protected Credentials

All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to retrieve the current user's username without authentication...

PT-2025-39418

Name of the Vulnerable Software and Affected Versions Flag Forge versions 2.2.0 through 2.3.0 Description Flag Forge improperly manages session invalidation. After a user logs out, they can still access protected endpoints, such as /api/profile, and CSRF tokens remain valid. This allows continued...

ROS-20250925-02

Vulnerability of TarFile.extractall and TarFile.extract functions of tarfile module of Python programming language interpreter CPython is related to incorrect restriction of path name of restricted directory. Python programming language interpreter CPython functions TarFile.extractall and...

Android Access Control Disclosure

The vulnerability of the Android operating system is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability can allow a perpetrator to disclose protected information...

Android Information Disclosure

The vulnerability of the Android operating system is related to errors in information processing. Exploiting this vulnerability can allow a perpetrator to disclose protected information...

PERCo-Web access control system Unauthorized Access

The vulnerability of the PERCo-Web access control system is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Ghostscript OCR Buffer Overflow

The vulnerability of the ocrbeginpage function in software for processing, transforming, and generating Ghostscript documents is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

XPS GhostXPS Function Heap Buffer Overflow

The vulnerability of the xpsunpredicttiff function in the interpreter for XPS GhostXPS files is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Android Access Control Disclosure

The vulnerability of the Android operating system is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability can allow a perpetrator to disclose protected information...

CVE-2025-10360: Insufficiently Protected Credentials

In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterprise Advanced license and has enabled t...

Ghostscript pdf_write_cmap Buffer Overflow

The vulnerability of the pdfwritecmap function in the software for processing, transforming, and generating Ghostscript documents is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

American Archive of Public Broadcasting allowed access to restricted media for years

A security flaw in the American Archive of Public Broadcasting AAPB website allowed unauthorized access to protected and private media, according to BleepingComputer. The American Archive of Public Broadcasting AAPB is a collaborative initiative between the Library of Congress and WGBH Educationa...

Adobe After Effects Buffer Overflow Info Disclosure

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer memory boundary. Exploiting this vulnerability can allow attackers to disclose protected information by sending a specially created malicious file...

pgAdmin 4 Source Verification Unauthorized Access

The vulnerability of the pgAdmin 4 database management tool is related to a lack of mechanisms for verifying the source of the connection. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

ROS-20250923-06

A vulnerability in the Apache Cassandra distributed database management system is related to improper privilege handling. Exploitation of the vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information. impact the...

SafeConnect Software Suite Disclosure

The vulnerability of the SafeConnect software suite is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...