CVE-2025-1640

A vulnerability was found in Benner ModernaNet up to 1.1.0 and classified as critical. Affected by this issue is some unknown functionality of the file...

CVE-2025-1641 Benner ModernaNet GetHorariosDoDia sql injection

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been classified as critical. This affects an unknown part of the file...

CVE-2025-1641 Benner ModernaNet GetHorariosDoDia sql injection

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been classified as critical. This affects an unknown part of the file...

CVE-2025-1641

CVE-2025-1641 affects Benner ModernaNet up to version 1.1.0. The vulnerability is a SQL injection in an endpoint under /AGE0000700/GetHorariosDoDia (with parameters such as idespec, idproced, data, agserv, convenio, localatend, idplano, pesfis, idprofissional, target). It is exploitable remotely ...

CVE-2025-1640

CVE-2025-1640 affects Benner ModernaNet (versions up to 1.1.0). The issue is described as an SQL injection vulnerability in the endpoint path “/Home/JS_CarregaCombo?formName=DADOS_PESSOAIS_PLANO&...&elementToReturn=DADOS_PESSOAIS_PLANO&ordenarPelaDescricao=true&direcaoOrdenacao=asc&_=173929004729...

CVE-2025-1640 Benner ModernaNet JS_CarregaCombo sql injection

A vulnerability was found in Benner ModernaNet up to 1.1.0 and classified as critical. Affected by this issue is some unknown functionality of the file...

Debian dla-4067 : libnode-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4067 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4067-1 [email protected] https://www.debian.org/lts/security/...

Siemens SIMATIC Devices Linux Kernel Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2022-3565)

A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function deltimer of the file drivers/isdn/mISDN/l1oipcore.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue...

PT-2025-7824

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Application and Appliance versions prior to 5.28 Description The issue is due to improper neutralization of special elements used in an SQL command, leading to a SQL injection vulnerability. This can be exploite...

PT-2025-7849 · Pickplugins · Pickplugins Wishlist

Name of the Vulnerable Software and Affected Versions: PickPlugins Wishlist versions 1.0.0 through 1.0.41 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-7828 · Unknown · Videowhisper Live Streaming Integration

Name of the Vulnerable Software and Affected Versions: VideoWhisper Live Streaming Integration versions n/a through 6.2 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows unauthorized access to files and...

PT-2025-7848 · WordPress · Ar For Wordpress

Name of the Vulnerable Software and Affected Versions: AR For WordPress versions n/a through 7.7 Description: The issue affects the webandprint AR For WordPress plugin, allowing for DOM-Based XSS due to improper neutralization of input during web page generation. This can lead to Cross-site...

Siemens SIMATIC Devices Linux Kernel Missing Release of Memory after Effective Lifetime (CVE-2022-3633)

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939sessiondestroy of the file net/can/j1939/transport.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is...

Siemens SIMATIC Devices Linux Kernel Improper Resource Shutdown or Release (CVE-2022-3646)

A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function nilfsattachlogwriter of the file fs/nilfs2/segment.c of the component BPF. The manipulation leads to memory leak. The attack may be initiated remotely. It is recommended to apply ...

Siemens SIMATIC S7-1500 TM MFP BIOS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2022-3435)

A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fibnhmatch of the file net/ipv4/fibsemantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to appl...

KLA80321 SB vulnerability in LibreOffice

Security vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2025-0514: Executable hyperlink Windows path targets executed unconditionally on activation Related products LibreOffice CVE list CVE-2025-0514...

Debian dla-4068 : php-nesbot-carbon - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4068 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4068-1 [email protected] https://www.debian.org/lts/security/...

PT-2025-7757 · Unknown · F12-Profiler

Name of the Vulnerable Software and Affected Versions: F12-Profiler versions 1.3.9 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized requests. Recommendations: For versions 1.3.9 and earlier, update to a version that contains a fix for th...

Siemens SIMATIC and SCALANCE Devices Use After Free (CVE-2023-4623)

A use-after-free vulnerability in the Linux kernel's net/sched: schhfsc HFSC qdisc traffic control component can be exploited to achieve local privilege escalation. If a class with a link-sharing curve i.e. with the HFSCFSC flag set has a parent without a link- sharing curve, then initvf will cal...

Siemens SIMATIC and SCALANCE Devices Use After Free (CVE-2023-4921)

A use-after-free vulnerability in the Linux kernel's net/sched: schqfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfqdequeue due to the incorrect .peek handler of...