CVE-2025-62650: Use of Client-Side Authentication

The Restaurant Brands International RBI assistant platform through 2025-09-06 relies on client-side authentication for use of the diagnostic screen...

CVE-2025-60514: Improper Neutralization of Special Elements used in an SQL Command

Tillywork v0.1.3 and below is vulnerable to SQL Injection in app/common/helpers/query.builder.helper.ts...

CVE-2025-60359: Missing Release of Memory after Effective Lifetime

radare2 v5.9.8 and before contains a memory leak in the function rbinobjectnew...

Poppler Installed (macOS)

Binary data macospopplerinstalled.nbin...

CVE-2025-11900: Improper Neutralization of Special Elements used in an OS Command

The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server...

CVE-2025-60360: Missing Release of Memory after Effective Lifetime

radare2 v5.9.8 and before contains a memory leak in the function r2rsubprocessinit...

Photon OS 5.0: Linux PHSA-2025-5.0-0644

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0644. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-60361: Missing Release of Memory after Effective Lifetime

radare2 v5.9.8 and before contains a memory leak in the function bochsopen...

CVE-2025-62651: Incorrect Authorization

The Restaurant Brands International RBI assistant platform through 2025-09-06 does not implement access control for the bathroom rating interface...

Xmlrpc-scanner

QMLRPC Vulnerability Scanner 🚀 Windows-compatible advanced QM...

Clam AntiVirus Toolkit 1.5.1

Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs ar...

CVE-2025-62579: Stack-based Buffer Overflow

ASDA-Soft Stack-based Buffer Overflow Vulnerability...

CVE-2025-0275: Missing Authentication for Critical Function

HCL BigFix Mobile 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions...

CVE-2025-62580: Stack-based Buffer Overflow

ASDA-Soft Stack-based Buffer Overflow Vulnerability...

CVE-2025-60358: Missing Release of Memory after Effective Lifetime

radare2 v.5.9.8 and before contains a memory leak in the function loadrelocations...

CVE-2025-58075: Missing Authorization

Mattermost versions 10.11.x = 10.11.1, 10.10.x = 10.10.2, 10.5.x = 10.5.10 fail to verify a user has permission to join a Mattermost team using the original invite token which allows any attacked to join any team on a Mattermost server regardless of restrictions via manipulating the RelayState...

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.10.4 - Path Traversal vulnerability

Path Traversal vulnerability discovered by ChuongVN in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.10.4...

CVE-2025-61974: Missing Release of Memory after Effective Lifetime

When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-48008: Use After Free

When a TCP profile with Multipath TCP MPTCP enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS ar...

CVE-2025-53868: Improper Neutralization of Special Elements used in an OS Command

When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP may be able to bypass Appliance mode restrictions using undisclosed commands. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...