PT-2025-22911 · Sigb Pmb · Sigb Pmb

Name of the Vulnerable Software and Affected Versions: SIGB PMB version 8.0.1.2 and earlier Description: The issue allows attackers to achieve Local File Inclusion and remote code execution. Recommendations: For SIGB PMB version 8.0.1.2 and earlier, update to version 8.0.1.2 or later to resolve t...

PT-2025-22988

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 139 Firefox ESR versions prior to 115.24 Firefox ESR versions prior to 128.11 Description The issue arises from incorrect isolation of error handling for script execution from web content, potentially allowing...

PT-2025-23035 · Unknown +1 · Net-Cidr-Lite +2

Name of the Vulnerable Software and Affected Versions: Net::CIDR::Set versions 0.10 through 0.13 Description: The issue arises from the improper handling of leading zero characters in IP CIDR address strings, potentially allowing attackers to bypass access control based on IP addresses. This is d...

PT-2025-22910 · Sigb Pmb · Sigb Pmb

Name of the Vulnerable Software and Affected Versions: SIGB PMB versions prior to 8.0.1.2 Description: The issue allows SQL injection. Recommendations: For versions prior to 8.0.1.2, update to version 8.0.1.2 or later to resolve the issue...

PT-2025-22992

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 139 Firefox ESR versions prior to 128.11 Description A clickjacking issue could be exploited to trick a user into leaking saved payment card details to a malicious page. Recommendations For Firefox versions prior to...

PT-2025-22986

Name of the Vulnerable Software and Affected Versions Icinga 2 versions prior to 2.12.12 Icinga 2 versions prior to 2.13.12 Icinga 2 versions prior to 2.14.6 Description The issue affects Icinga 2, a monitoring system that checks network resource availability and generates performance data. It...

PT-2025-22984 · Viscosity · Viscosity

Name of the Vulnerable Software and Affected Versions: Viscosity versions prior to 1.11.5 Description: The issue allows loading a dynamic library with Viscosity's TCC identity on macOS systems by utilizing a Launch Agent and loading the viscosity openvpn process from the application bundle. The...

PT-2025-22960 · Radashi · Radashi

Name of the Vulnerable Software and Affected Versions: Radashi versions prior to 12.5.1 Description: Radashi is a TypeScript utility toolkit. The set function within the Radashi library is vulnerable to prototype pollution. If an attacker can control parts of the path argument to the set function...

ABB M2M Gateway HTTP Request Smuggling in embedded Apache HTTP Server (CVE-2023-25690)

Some modproxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when modproxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern matches some portion of the...

PT-2025-22969 · Nagvis +1 · Nagvis +1

Name of the Vulnerable Software and Affected Versions: Nagvis versions prior to 1.9.47 Description: The issue is related to the improper neutralization of input in Nagvis, which can lead to livestatus injection. This can potentially allow for unauthorized access or control. Recommendations: For...

PT-2025-23006

Name of the Vulnerable Software and Affected Versions Django-Select2 versions prior to 8.4.1 Description The issue affects instances of HeavySelect2Mixin subclasses, such as the ModelSelect2MultipleWidget and ModelSelect2Widget, allowing secret access tokens to leak across requests. This can enab...

RHEL 9 : Satellite 6.17.0.1 Async Update (Important) (RHSA-2025:7604)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:7604 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide...

PT-2025-23005 · Opentext · Opentext Advance Authentication

Name of the Vulnerable Software and Affected Versions: OpenText Advanced Authentication versions prior to 6.5 Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, potentially revealing sensitive information during the management and configurati...

ABB M2M Gateway Use-After-Free in embedded Linux Kernel (CVE-2023-3609)

A use-after-free vulnerability in the Linux kernel's net/sched: clsu32 component can be exploited to achieve local privilege escalation. If tcfchangeindev fails, u32setparms will immediately return an error after incrementing or decrementing the reference counter in tcfbindfilter. If an attacker...

CVE-2025-5184

A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been classified as problematic. Affected is an unknown function of the component HTTP Response Header Handler. The manipulation leads to information disclosure. It is possible to launch the...

PYSEC-2025-46

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

CVE-2025-5175 erdogant pypickle pypickle.py save improper authorization

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

CVE-2025-5175

CVE-2025-5175 affects erdogant pypickle up to 1.1.5. The issue is in Save (pypickle/pypickle.py) leading to improper authorization. Exploitation is described as local and publicly disclosed. Remediation: upgrade to 2.0.0; patch 14b4cae704a0bb4eb6723e238f25382d847a1917.

CVE-2025-5174 erdogant pypickle pypickle.py load deserialization

A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the function load of the file pypickle/pypickle.py. The manipulation leads to deserialization. Local access is required to approach this attack. The exploit has been disclosed to th...

PT-2025-22913 · Llisoft · Llisoft Mta Maita Training System

Name of the Vulnerable Software and Affected Versions: llisoft MTA Maita Training System version 4.5 Description: A critical issue has been found in the this.fileService.download function of the file comllisoftcontrollerOpenController.java. The manipulation of the url argument leads to unrestrict...