17029 matches found
CVE-2025-52926
In scan.rs in spytrap-adb before 0.3.5, matches for known stalkerware are not rendered in the interactive user interface...
PT-2025-26645 · Convoy · Convoy
Name of the Vulnerable Software and Affected Versions: Convoy versions 3.9.0-rc3 through 4.4.0 Description: Convoy is a KVM server management panel for hosting businesses. A directory traversal vulnerability exists in the LocaleController component, allowing an unauthenticated remote attacker to...
WordPress Sala Theme <= 1.1.3 is vulnerable to PHP Object Injection
Software Sala Type Theme Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-52826 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 745dde376637 Credits Ann Required privilege Subscriber Published 23 June,...
PT-2025-26585 · Dragonfly · Dragonfly
Name of the Vulnerable Software and Affected Versions: dragonfly versions 1.28.18 through 1.30.1 Description: The issue is related to an Integer Overflow or Wraparound vulnerability in the dragonflydb dragonfly, specifically in the src/redis/lua/struct modules, associated with program files lua...
DLA-4224-1 node-send - security update
Bulletin has no description...
CVE-2025-52920
Innoshop through 0.4.1 allows Insecure Direct Object Reference IDOR at multiple places within the frontend shop. Anyone can create a customer account and easily exploit these. Successful exploitation results in disclosure of the PII of other customers and the deletion of their reviews of products...
PT-2025-26644
Name of the Vulnerable Software and Affected Versions: changedetection.io versions prior to 0.50.4 Description: The issue is related to a cross-site scripting XSS vulnerability due to errors in filters from website page change detection watches not being properly filtered. This vulnerability has...
LB-LINK Router WebGetVar Function Heap Buffer Overflow
The vulnerability of the websGetVar function in the /goform/setblacklist file of the LB-LINK router microprogramming system exists due to the lack of measures to neutralize special elements used in the operating system command. Exploiting this vulnerability can allow a remote attacker to gain ful...
PT-2025-26636 · Mitel · Mitel Openscape Xpressions
Name of the Vulnerable Software and Affected Versions: Mitel OpenScape Xpressions versions through V7R1 FR5 HF43 P913 Description: A vulnerability in the WebApl component could allow an unauthenticated attacker to conduct a path traversal attack due to insufficient input validation. A successful...
BELL-CVE-2025-38069
Bulletin has no description...
BELL-CVE-2025-38074
Bulletin has no description...
BELL-CVE-2025-38060
Bulletin has no description...
BELL-CVE-2025-38068
Bulletin has no description...
BELL-CVE-2025-38058
Bulletin has no description...
BELL-CVE-2025-38062
Bulletin has no description...
BELL-CVE-2025-38039
Bulletin has no description...
BELL-CVE-2025-38045
Bulletin has no description...
BELL-CVE-2025-38043
Bulletin has no description...