BIT-MATTERMOST-2025-27715

Mattermost versions 9.11.x = 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel, which team admins to joining private channels via crafted permalink links without explicit consent from them...

BELL-CVE-2025-21892

Bulletin has no description...

BELL-CVE-2023-52982

Bulletin has no description...

BELL-CVE-2023-53006

Bulletin has no description...

BELL-CVE-2023-52995

Bulletin has no description...

BELL-CVE-2023-53002

Bulletin has no description...

BELL-CVE-2023-53024

Bulletin has no description...

BELL-CVE-2025-21883

Bulletin has no description...

BELL-CVE-2023-53016

Bulletin has no description...

BELL-CVE-2023-53000

Bulletin has no description...

BELL-CVE-2023-52999

Bulletin has no description...

BELL-CVE-2023-52928

Bulletin has no description...

BELL-CVE-2023-52976

Bulletin has no description...

BELL-CVE-2023-52993

Bulletin has no description...

BELL-CVE-2023-52988

Bulletin has no description...

Denial Of Service (DoS)

litellm is vulnerable to Denial of Service DoS. The vulnerability is due to the use of ast.literaleval to parse user input, allowing an attacker to send specially crafted input that crashes the litellm Python server...

Denial Of Service (DoS)

Aim is vulnerable to Denial Of Service DoS. The vulnerability is due to improper thread management due to the ScheduledStatusReporter object running on the main thread of the tracking server, blocking it indefinitely and preventing it from responding to requests...

MAL-2025-2739 Malicious code in @takamol/ets-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f82dcc5edf4748a4186895186924ee28e0f55fe782fe6b7e4d4f6ffe895195d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2741 Malicious code in @takamol/qiwa-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a7c1ac0d47b523e1de684384da892f0683a8d543b56659127eb98ea88c1466a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-13429 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions 5.4 and prior Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection'. This could allow a low-privileged attacker with local access to...