PT-2025-14780 · Projeqtor · Projeqtor

Name of the Vulnerable Software and Affected Versions: Projeqtor versions up to 12.0.2 Description: A critical issue affects some unknown functionality of the file /tool/saveAttachment.php, where the manipulation of the attachmentFiles argument leads to unrestricted upload. The attack can be...

Netwrix Password Secure 安全漏洞

Netwrix Password Secure is an enterprise-class password management solution from Netwrix designed to help organizations securely store, manage and share passwords and other sensitive information. A security vulnerability exists in Netwrix Password Secure 9.2 and earlier versions that stems from a...

CVE-2025-26818

Netwrix Password Secure through 9.2 allows command injection...

CVE-2025-26817

Netwrix Password Secure 9.2.0.32454 allows OS command injection...

Ivanti Connect Secure 安全漏洞

Ivanti Connect Secure ICS is a secure remote network connection tool from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Connect Secure that stems from a stack buffer overflow that could lead to remote code execution...

The vulnerability of the Network Access Manager module of the Cisco Secure Client (formerly Cisco AnyConnect Secure Mobility Client) security solution allows a hacker to increase their privileges.

The vulnerability of the Network Access Manager module of the Cisco Secure Client formerly Cisco AnyConnect Secure Mobility Client security solution lies in the lack of authentication checks for a critical function. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2025-26817

Netwrix Password Secure 9.2.0.32454 allows OS command injection...

Netwrix Password Secure 安全漏洞

Netwrix Password Secure is an enterprise-class password management solution from Netwrix designed to help organizations securely store, manage and share passwords and other sensitive information. A security vulnerability exists in Netwrix Password Secure version 9.2.0.32454, which stems from an O...

PT-2025-14794 · Netwrix · Netwrix Password Secure

Name of the Vulnerable Software and Affected Versions: Netwrix Password Secure versions 9.2 and earlier Description: The issue allows command injection. This means that an attacker could potentially execute system commands, which could lead to unauthorized access or control of the system...

CVE-2025-26818

Netwrix Password Secure through 9.2 allows command injection...

PT-2025-14768

Name of the Vulnerable Software and Affected Versions Ivanti Connect Secure versions prior to 22.7R2.6 Ivanti Policy Secure versions prior to 22.7R1.4 Ivanti ZTA Gateways versions prior to 22.8R2.2 Pulse Connect Secure versions 9.x Description A stack-based buffer overflow in the HTTPS web server...

CVE-2025-22457

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution. Recent assessments: sfewer-r7 at April 10, 2025...

Ivanti Connect Secure Unauthenticated Remote Code Execution via Stack-based Buffer Overflow

This module exploits a Stack-based Buffer Overflow vulnerability in Ivanti Connect Secure to achieve remote code execution CVE-2025-22457. Versions 22.7R2.5 and earlier are vulnerable. Note that Ivanti Pulse Connect Secure, Ivanti Policy Secure and ZTA gateways are also vulnerable but this module...

io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

A flaw was found in Netty's SslHandler. This vulnerability allows a native crash via a specially crafted packet that bypasses proper validation...

[R1] Nessus Agent Version 10.7.4 Fixes One Vulnerability

R1 Nessus Agent Version 10.7.4 Fixes One Vulnerability Arnie Cabral Wed, 04/02/2025 - 11:12 When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.7.4 did not enforce secure permissions for sub-directories. This could allow for local privilege...

CVE-2025-30905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through =...

CVE-2025-30905 WordPress Secure Copy Content Protection and Content Locking plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through =...

CVE-2025-30905

CVE-2025-30905 corresponds to a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Secure Copy Content Protection and Content Locking. Public description notes improper Neutralization of Input During Web Page Generation, allowing stored XSS. Affected software is Secure Copy C...

PT-2025-14399 · Unknown · Secure Copy Content Protection/Content Locking

Name of the Vulnerable Software and Affected Versions: Ays Pro Secure Copy Content Protection and Content Locking versions n/a through 4.4.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored...

Huawei EulerOS: Security Advisory for llvm (EulerOS-SA-2025-1336)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...