Linux Distros Unpatched Vulnerability : CVE-2025-68248

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vmwballoon: indicate success when effectively deflating during migration When migrating a balloon page, we first deflate the old page to then inflate the new...

Photon OS 5.0: Imagemagick PHSA-2025-5.0-0714

An update of the ImageMagick package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0714. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Iptraf PHSA-2025-5.0-0712

An update of the iptraf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0712. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Kubernetes PHSA-2025-5.0-0698

An update of the kubernetes package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0698. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-67787: Improper Neutralization of Input During Web Page Generation

An issue was discovered in 25.1.2 before 25.1.5. A Cross Site Scripting XSS issue in DriveLock Operations Center allows for session takeover over a network...

CVE-2025-53398: Incorrect Default Permissions

The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions,...

CVE-2022-23851: Improper Neutralization of Special Elements Used in a Template Engine

Netaxis API Orchestrator APIO before 0.19.3 allows server side template injection SSTI...

CVE-2025-26381: Direct Request

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information...

CVE-2025-61736: Improper Validation of Certificate Expiration

Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires...

CVE-2025-66953: Cross-Site Request Forgery (CSRF)

CSRF vulnerability in narda miteq Uplink Power Contril Unit UPC2 v.1.17 allows a remote attacker to execute arbitrary code via the Web-based management interface and specifically the /systemsetup.htm, /setclock.htm, /receiversetup.htm, /cal.htm?..., and /channelsetup.htm endpoints...

CVE-2025-43873: Improper Neutralization of Special Elements used in an OS Command

Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device...

Exploit for Deserialization of Untrusted Data in Facebook React

🔍 Next.js RCE Scanner - CVE-2025-55182 & CVE-2025-66478...

Nuclei 3.6.1

Nuclei is a modern, high-performance vulnerability scanner that leverages simple YAML-based templates. It empowers you to design custom vulnerability detection scenarios that mimic real-world conditions, leading to zero false positives...

CVE-2025-68065: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in LiquidThemes Hub Core allows PHP Local File Inclusion. This issue affects Hub Core: from n/a before 6.0.2...

Linux Distros Unpatched Vulnerability : CVE-2025-68170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/radeon: Do not kfree devres managed rdev Since the allocation of the drivers main structure was changed to devmdrmdevalloc rdev is managed by devres and we...

📄 Craft CMS 5.0 Twig Template Injection Scanner

This is a mass scanning script for the Craft CMS version 5.0 Twig template injection vulnerability. ============================================================================================================================================= | Title : Craft CMS 5.0 Twig Template Injection – Mass...

CVE-2025-68164: Observable Discrepancy

In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test...

CVE-2025-67989: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in LMPixels Kerge kerge allows Server Side Request Forgery.This issue affects Kerge: from n/a through = 4.1.3...

CVE-2025-67999: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Stefano Lissa Newsletter newsletter allows Blind SQL Injection.This issue affects Newsletter: from n/a through = 9.0.9...

CVE-2025-68056: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LBG Zoominoutslider lbgzoominoutslider allows SQL Injection.This issue affects LBG Zoominoutslider: from n/a through = 5.4.4...