PT-2025-9510 · Unknown +1 · Tuleap Community Edition +2

Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 16.4.99.1740067916 Tuleap Enterprise Edition versions prior to 16.4-5 and 16.3-10 Description: Tuleap is an Open Source Suite to improve management of software developments and collaboration. It allows cross-site...

PT-2025-9273

Name of the Vulnerable Software and Affected Versions Prism aka PrismJS versions prior to 1.29.0 Description The issue allows DOM Clobbering, which can result in XSS for untrusted input that contains HTML but does not directly contain JavaScript. This occurs because the document.currentScript...

PT-2025-9270 · Unknown · Oxidized-Web

Name of the Vulnerable Software and Affected Versions: oxidized-web versions prior to 0.15.0 Description: The RANCID migration page in oxidized-web allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web. This issue can lead to remote code execution...

[SECURITY] [DLA 4077-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4077-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès March 02, 2025 https://wiki.debian.org/LTS -...

CVE-2025-1816

A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This affects the function audioelementobu of the file libavformat/iamfparse.c of the component IAMF File Handler. The manipulation of the argument numparameters leads to memory leak...

CVE-2025-1816

FFmpeg-2025-1816 affects IAMF File Handler: audio_element_obu in libavformat/iamf_parse.c suffers a memory leak when num_parameters is manipulated. This enables remote initiation of an attack; the vulnerability has public disclosure. A patch is identified: 0526535cd58444dd264e810b2f3348b4d96cff3b...

CVE-2025-1811

A vulnerability was found in AT Software Solutions ATSVD up to 3.4.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.aspx of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attac...

PT-2025-10636

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 134.0.6998.88 Description A type confusion issue exists in the V8 JavaScript engine. This flaw allows a remote attacker to potentially cause heap corruption—a condition where memory is incorrectly allocated or...

PT-2025-11214

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.1.1198 Description: The issue concerns potential data loss when using Vim with the zip.vim plugin and specially crafted zip files. The impact is considered medium as it requires a user to view the malicious archive wit...

CVE-2024-9285

A vulnerability was found in Tu Yafeng Via Browser up to 5.9.0 on Android. It has been rated as problematic. This issue affects some unknown processing of the component Javascript Bridge. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

[SECURITY] [DLA 4074-1] mariadb-10.5 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4074-1 [email protected] https://www.debian.org/lts/security/ Otto Kekäläinen March 01, 2025 https://wiki.debian.org/LTS -...

CVE-2025-1786 rizinorg rizin pdb.c msf_stream_directory_free buffer overflow

A vulnerability was found in rizinorg rizin up to 0.7.4. It has been rated as critical. This issue affects the function msfstreamdirectoryfree in the library /librz/bin/pdb/pdb.c. The manipulation of the argument -P leads to buffer overflow. Local access is required to approach this attack. The...

PT-2025-9186 · Blizzard · Blizzard Battle.Net

Name of the Vulnerable Software and Affected Versions: Blizzard Battle.Net versions up to 2.39.0.15212 Description: A critical issue was found in Blizzard Battle.Net, affecting some unknown functionality in the library profapi.dll. The manipulation leads to an uncontrolled search path. The attack...

PT-2025-12535

Name of the Vulnerable Software and Affected Versions: Apache Commons VFS versions prior to 2.10.0 Description: The FileObject API in Commons VFS has a resolveFile method that takes a scope parameter. Specifying NameScope.DESCENDENT promises that an exception is thrown if the resolved file is not...

PT-2025-9192 · Zj1983 Zz · Zj1983 Zz

Name of the Vulnerable Software and Affected Versions: zj1983 zz up to 2024-8 Description: A critical vulnerability has been found in the function getOaWid of the file src/main/java/com/futvan/z/system/zworkflow/ZworkflowAction.java. The manipulation of the argument tableId leads to SQL injection...

PT-2025-9190 · Unknown · Zfileaction

Name of the Vulnerable Software and Affected Versions: zj1983 zz up to 2024-8 Description: A critical vulnerability has been found in zj1983 zz, affecting some unknown processing of the file src/main/java/com/futvan/z/system/zfile/ZfileAction.upload. The manipulation of the file argument leads to...

PT-2025-9162 · WordPress · Authors List

Name of the Vulnerable Software and Affected Versions: The Authors List plugin for WordPress versions up to and including 2.0.6 Description: The issue arises from the software's failure to properly validate a value before executing the do shortcode action, allowing unauthenticated attackers to...

[SECURITY] [DLA 4073-1] ffmpeg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4073-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 01, 2025 https://wiki.debian.org/LTS -...

PT-2025-9062 · Apache · Apache Inlong

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.13.0 through 2.1.0 Description: The issue concerns a deserialization of untrusted data, allowing for an arbitrary file read vulnerability. This can be exploited by bypassing security measures through double writing of...

PT-2025-9136 · Minio · Minio

Name of the Vulnerable Software and Affected Versions: MinIO versions RELEASE.2024-06-06T09-36-42Z through RELEASE.2025-02-28T09-55-16Z Description: A bug in MinIO's evaluation of the trust of the SSH key used in an SFTP connection allows authentication bypass and unauthorized data access. This...