Cert CC: CVE-2025-3052 InsydeH2O Secure Boot Bypass

Untrusted pointer dereference in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

GeoServer 安全漏洞

GeoServer is GeoServer open source an open source software server written in Java. It allows users to share and edit geospatial data. A security vulnerability exists in GeoServer that stems from a REST API security bypass that could lead to information disclosure...

PT-2025-24689 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier Description: The issue is related to an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this...

Adobe Commerce 授权问题漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a kind of merchants and brands for the world's leading digital commerce solutions. Adobe Commerce suffers from an authorization issue vulnerability that stems from an improper authorization issue that could be exploited by an...

KLA84757 SB vulnerability in Mozilla Thunderbird

Security vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories mfsa2025-50 Related products Mozilla-Thunderbird CVE list CVE-2025-5986 high Solution Update to the latest version Download Thunderbird...

PT-2025-24694 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier Description: The issue is related to an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this...

PT-2025-26870 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier Description: The issue is related to an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker coul...

PT-2025-26871 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier Description: The issue is related to an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this...

KLA84848 Multiple vulnerabilities in Apache Tomcat

Multiple vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability can be exploited remotely to...

KLA84756 SB vulnerability in Mozilla Thunderbird

Security vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories mfsa2025-49 Related products Mozilla-Thunderbird CVE list CVE-2025-5986 high Solution Update to the latest version Download Thunderbird...

PT-2025-24854 · Microsoft · App Control For Business +1

Name of the Vulnerable Software and Affected Versions: App Control for Business WDAC affected versions not specified Description: The issue is related to the improper verification of cryptographic signatures, allowing an unauthorized attacker to bypass a security feature locally. This could...

The vulnerability of the library for implementing navigation in Android Jetpack Navigation Library lies in the improper definition of symbolic links before accessing a file. This allows attackers to bypass existing security restrictions, gain unauthorized access to the application, and inject arbitrary parameters into it.

The vulnerability of the Android Jetpack Navigation Library, which is used for navigation in applications, is related to incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow attackers to bypass existing security restrictions, gain unauthorized...

RT-Thread 输入验证错误漏洞

RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from an input validation error vulnerability that originates from the operation of the parameter how in the file rt-thread/components/lwp/lwpsyscall.c, which can be exploited by an attacke...

CVE-2024-50406

A cross-site scripting XSS vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version:...

FreeScout Security Bypass Vulnerability

FreeScout is an ultra-lightweight and powerful free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability that can be exploited by an attacker to gain initial access to an account by leveraging an invitation li...

FreeScout Security Bypass Vulnerability (CNVD-2025-20784)

FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability, which is due to a competitive conditions flaw. An attacker could exploit the vulnerability to perform concurrent...

FreeScout Security Bypass Vulnerability (CNVD-2025-20798)

FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability that is caused by improper input validation of the laravel translation manager package. An attacker can exploit the...

QNAP License Center 跨站脚本漏洞

QNAP License Center is a certificate center of Qualicom Technology QNAP Inc. in Taiwan, China. QNAP License Center suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data. An attacker could exploit this...

FreeScout Security Bypass Vulnerability (CNVD-2025-20796)

FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability that is caused by incorrect configuration of the root folder of the object Storage. An attacker could exploit the...

The vulnerability of the dtale library, related to the use of strictly encrypted credentials during the processing of the SECRET_KEY parameter, allows a hacker to bypass existing security restrictions and execute arbitrary code on the server.

The vulnerability of the dtale library lies in the use of strictly encrypted user credentials during the processing of the SECRETKEY parameter. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code on the server...