6773 matches found
PT-2025-6278
Name of the Vulnerable Software and Affected Versions FortiOS versions 7.0.0 through 7.0.16 FortiProxy versions 7.0.0 through 7.0.19 FortiProxy versions 7.2.0 through 7.2.12 Description An authentication bypass issue exists in the Node.js WebSocket module and CSF proxy requests. This flaw allows ...
Tackling AI threats. Advanced DFIR methods and tools for deepfake detection
TL; DR AI-generated documents, videos and more pose significant challenges for DFIR DFIR teams can harness innovative detection strategies and tooling Digital fingerprinting and watermarking, AI-powered and behavioural analyses Hardware-based forensics and image-specific forensic techniques...
PT-2025-4601 · Wegia · Wegia
Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.6 Description: WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the Cadastro Atendido.php...
PT-2025-4380 · Unknown · Namelessmc
Name of the Vulnerable Software and Affected Versions: NamelessMC versions prior to 2.1.3 Description: The issue allows an attacker to reset user passwords via the forgot password link. This can be achieved when a user with admincp.core.emails or admincp.users.edit permissions manually validates ...
CISA: Security and Resiliency Guide
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: 2021 ISC Annual Review
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
PT-2025-3880 · Unknown · Liujianview Gymxmjpa
Name of the Vulnerable Software and Affected Versions: liujianview gymxmjpa version 1.0 Description: A critical vulnerability has been found in the function MembertypeDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/MembertypeController.java. The manipulation of the argument...
CGA-6R5W-WWQ4-CX4V
Bulletin has no description...
PT-2025-2625 · Hcl · Hcl Myxalytics
Name of the Vulnerable Software and Affected Versions: HCL MyXalytics version 6.3 Description: The issue is related to weak input validation in the application, which accepts special characters and lacks length validation. This weakness can potentially lead to security issues such as SQL injectio...
PT-2025-2621 · Hcl · Hcl Myxalytics
Name of the Vulnerable Software and Affected Versions: HCL MyXalytics affected versions not specified Description: The issue allows cyber-criminals to exploit a session fixation vulnerability by sending crafted URLs with a session token to access the victim's login session. Recommendations: At th...
PT-2025-4767
Name of the Vulnerable Software and Affected Versions Apache Cassandra versions 3.0.30, 3.11.17, 4.0.15, 4.1.7, 5.0.2 Description A privilege escalation issue exists in Apache Cassandra, where a user with MODIFY permission on all keyspaces can escalate privileges to superuser within a targeted...
PT-2025-2732 · Unknown · Redaxo Cms
Name of the Vulnerable Software and Affected Versions: Redaxo CMS version 5.17.1 Description: An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For Redaxo CMS version 5.17.1,...
GHSA-5XH2-23CC-5JC6 Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution
Vulnerability Summary A type confusion vulnerability exists in Strawberry GraphQL's relay integration that affects multiple ORM integrations Django, SQLAlchemy, Pydantic. The vulnerability occurs when multiple GraphQL types are mapped to the same underlying model while using the relay node...
PT-2025-3068 · Ruoyi · Ruoyi
Name of the Vulnerable Software and Affected Versions: Ruoyi versions 4.7.9 and earlier Description: The issue is related to an authenticated SQL injection risk. This occurs because the filterKeyword method does not fully filter SQL injection keywords, leading to a potential SQL injection risk...
PT-2025-3679 · WordPress · The Greenshift
Name of the Vulnerable Software and Affected Versions: The Greenshift – animation and page builder blocks plugin for WordPress versions prior to 9.0.1 Description: The issue is related to Authenticated Server-Side Request Forgery and Stored Cross Site Scripting due to a missing capability check i...
GitLab 15.7 < 17.5.5 / 17.6 < 17.6.3 / 17.7 < 17.7.1 (CVE-2024-6324)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Inefficient Algorithmic Complexity in GitLab CVE-2024-6324 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...
PT-2025-2061 · Unknown · Kurniaramadhan E-Commerce-Php
Name of the Vulnerable Software and Affected Versions: kurniaramadhan E-Commerce-PHP version 1.0 Description: A vulnerability was found in the software, classified as problematic. It affects an unknown function, leading to cross-site request forgery. The attack can be launched remotely. The vendo...
PT-2025-22169
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue in the Linux kernel has been identified, specifically in the ivpu job submit function. This occurs due to an incorrect locking order when a thread aborts currently...
PT-2025-1086 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 15.7 through 17.5.5 GitLab CE/EE versions 17.6 through 17.6.3 GitLab CE/EE versions 17.7 through 17.7.1 Description: An issue was discovered in GitLab CE/EE that allows a denial of service DoS by creating cyclic referenc...
PT-2025-1901
Name of the Vulnerable Software and Affected Versions Property Hive WordPress plugin versions prior to 2.1.1 Description The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitised and escaped before being outputted back in the page. This could be...