CVE-2025-11243: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM before v1.6 allows Excessive Allocation via network...

CVE-2025-12056: Out-of-bounds Read

Out-of-bounds Read in Shelly Pro 3EM before v1.4.4 allows Overread Buffers...

CVE-2025-13225: Files or Directories Accessible to External Parties

Tanium addressed an arbitrary file deletion vulnerability in TanOS...

Photon OS 4.0: Linux PHSA-2025-4.0-0910

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0910. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Postgresql14 PHSA-2025-5.0-0683

An update of the postgresql14 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0683. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2025-5.0-0682

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0682. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Snitch__Scan

PoC exploit for XSS Vulnerability Scanner. This tool is designed...

Snitch-Scan

PoC exploit for XSS vulnerability scanner. The target product/se...

cve-exploit-chain-analyzer

🔐 CVE Exploit Chain Analyzer Automated vulnerability scanner...

CVE-2025-54972: Improper Neutralization of CRLF Sequences

An improper neutralization of crlf sequences 'crlf injection' vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2 all versions, FortiMail 7.0 all versions may allow an attacker to inject headers in the response via convincing a user to click on a...

CVE-2025-41735: Unrestricted Upload of File with Dangerous Type

A low privileged remote attacker can upload any file to an arbitrary location due to missing file check resulting in remote code execution...

CVE-2025-46215: Improper Isolation or Compartmentalization

An Improper Isolation or Compartmentalization vulnerability CWE-653 in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to evade the sandboxing scan via a crafted file...

CVE-2025-41737: Improper Access Control

Due to webserver misconfiguration an unauthenticated remote attacker is able to read the source of php modules...

Structured Extraction of Vulnerabilities in OpenVAS and Tenable WAS Reports Using LLMs

This paper proposes an automated LLM-based method to extract and structure vulnerabilities from OpenVAS and Tenable WAS scanner reports, converting unstructured data into a standardized format for risk management. In an evaluation using a report with 34 vulnerabilities, GPT-4.1 and DeepSeek...

CVE-2025-41733: Authentication Bypass by Primary Weakness

The commissioning wizard on the affected devices does not validate if the device is already initialized. An unauthenticated remote attacker can construct POST requests to set root credentials...

CVE-2025-41736: Path Traversal: '.../...//'

A low privileged remote attacker can upload a new or overwrite an existing python script by using a path traversal of the target filename in php resulting in a remote code execution...

CVE-2025-41734: Improper Control of Filename for Include/Require Statement in PHP Program

An unauthenticated remote attacker can execute arbitrary php files and gain full access of the affected devices...

CVE-2025-54971: Exposure of Sensitive Information to an Unauthorized Actor

An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all versions, FortiADC 7.0 all versions, FortiADC 6.2 all versions may allow an admin with read-only permission to get the external resources password vi...

CVE-2025-58413: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute...

CVE-2025-53360: Improper Access Control

pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. In versions prior to 1.0.3, any authenticated user could send requests to agents. This issue has been patched in version 1.0.3...