CGA-QQ3W-V44C-7PXF

Bulletin has no description...

BELL-CVE-2025-37864

Bulletin has no description...

BELL-CVE-2025-37862

Bulletin has no description...

BELL-CVE-2025-37833

Bulletin has no description...

WordPress RS WP Book Showcase plugin <= 6.7.57 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin RS WP Book Showcase versions = 6.7.57...

BELL-CVE-2023-53060

Bulletin has no description...

PT-2025-19879 · Qualcomm · 215 Mobile Firmware +93

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs when reading the FW response from the shared queue. This corruption happens due to a problem in handling the response, leading to potential...

@misskey-dev/summaly Redirect Filter Bypass

Summary A logic error in the main summaly function causes the allowRedirects option to never be passed to any plugins, and as a result, isn't enforced. Details In the main summaly function, a new scrapingOptions object is created and passed to either the matched plugin, if any, or the default...

PT-2025-19776 · Xinguan · Xinguan

Name of the Vulnerable Software and Affected Versions: Xinguan version 0.0.1-SNAPSHOT Description: The issue is related to incorrect access control in the "/system/user/findUserList" API endpoint, which allows attackers to access sensitive information by sending a crafted payload. Recommendations...

BELL-CVE-2025-37745

Bulletin has no description...

GHSA-V2P5-Q653-9J99 obfstr Type Confusion vulnerability

In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value...

CVE-2023-53124 scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sastransportportadd Port is allocated by sasportallocnum and rphy is allocated by either sasenddevicealloc or sasexpanderalloc, all of which may return NULL. So we need to check the...

CVE-2025-47154

LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that argumentslist references, leading to a use-after-free, and allowing remote attackers to execute arbitrary code via a crafted .js file. NOTE: the GitHub README says "Ladybird is in a pre-alpha state, and only suitable for u...

PT-2025-18574 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the prestera rxtx switch init function. This occurs when prestera sdma switch init fails, resulting in the...

Director: Dashboard not showing correct session count data

Director dashboard showing wrong data Session count in Studio and Director Dashboard is incorrect...

PT-2025-18150 · Code Projects · Code-Projects Clothing Store Management System

Name of the Vulnerable Software and Affected Versions: code-projects Clothing Store Management System version 1.0 Description: A critical vulnerability was found in the code-projects Clothing Store Management System. The issue affects the add item function, where manipulation of the st.productnam...

"Cannot Complete your request" during enumeration for DUO OAuth in 2 factor setup

Getting " Cannot complete your request" after duo push is successfully sent. In the url tab, we could see the client connection being pointed to storefront successfully...

Black area's when launching Horizon app on VDA 2402 CU1

After upgrading our VDA to 2402 cu1 we are presented with black artifacts on launch of Horizon app...

Apereo CAS has inefficient regular expression complexity

A vulnerability was found in Apereo CAS 5.2.6. It has been declared as problematic. This vulnerability affects unknown code of the file cas-5.2.6\core\cas-server-core-configuration-metadata-repository\src\main\java\org\apereo\cas\metadata\rest\CasConfigurationMetadataServerController.java. The...

PT-2025-18009 · Wowjoy 浙江湖州华卓信息科技有限公司 · Internet Doctor Workstation System

Name of the Vulnerable Software and Affected Versions: wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System version 1.0 Description: A problematic issue has been found in the system, affecting some unknown processing of the file "/v1/prescription/details/". This leads to improper authorizatio...