CVE-2019-16792

Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would header fold a double Content-Length header and due to being unable to cast the now comma separated value to an integer would set the Content-Length to 0 internally. If two...

CVE-2019-16672

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Sensitive Credentials data is transmitted in cleartext...

CVE-2019-12834

In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATHINFO to the dashboards/ URI...

CVE-2024-2878

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible for an attacker to cause a denial of service by crafting unusual search terms for branch names...

PT-2026-1646

Name of the Vulnerable Software and Affected Versions Hope versions through 3.0.0 Description The software contains an Improper Control of Filename for Include/Require Statement issue, specifically a PHP Local File Inclusion. The vulnerable component allows for the inclusion of local files...

CVE-2025-15461

CVE-2025-15461 affects UTT 进取 520W, version 1.7.7-180627. The vulnerability is in the function that uses strcpy in the file /goform/formTaskEdit, where manipulating the selDateType argument can trigger a buffer overflow. The attack can be executed remotely and an exploit has been published. Vendo...

PT-2026-1337

Name of the Vulnerable Software and Affected Versions Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 Description The software contains a regular expression denial of service ReDoS issue within the UriTemplate class when handling RFC 6570 exploded array patterns. The dynamicall...

EUVD-2025-206226

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

CVE-2025-62148

Cross-Site Request Forgery CSRF vulnerability in Eugen Bobrowski Robots.txt rewrite robotstxt-rewrite allows Cross Site Request Forgery.This issue affects Robots.txt rewrite: from n/a through = 1.6.1...

CVE-2023-54325

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix out-of-bounds read When preparing an AER-CTR request, the driver copies the key provided by the user into a data structure that is accessible by the firmware. If the target device is QAT GEN4, the key size is...

CVE-2025-67623

Server-Side Request Forgery SSRF vulnerability in 6Storage 6Storage Rentals 6storage-rentals allows Server Side Request Forgery.This issue affects 6Storage Rentals: from n/a through = 2.22.0...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a race condition in the polling function that could lead to a null pointer dereference...

PT-2025-53290

Name of the Vulnerable Software and Affected Versions Scott Paterson Accept Donations with PayPal versions prior to 1.5.1 Description The software contains a URL redirection issue that could allow for phishing attacks. The issue involves redirection to untrusted sites. Recommendations Update Scot...

EUVD-2023-60241

MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbitrary code. Attackers can modify upload path settings, upload a malicious PHP-embedded image file, and execute commands through the language configuration...

PDFsam Enhanced 缓冲区错误漏洞

PDFsam Enhanced is a PDF editing and management tool from PDFsam, Inc. PDFsam Enhanced suffers from a buffer error vulnerability that stems from a lack of validation of user-supplied data when processing App objects, which could lead to out-of-bounds reads and remote code execution...

Senstar Symphony 信息泄露漏洞

Senstar Symphony is an intelligent video management software from Senstar Canada. An information disclosure vulnerability exists in Senstar Symphony that stems from an improper implementation of the FetchStoredLicense method leading to an information disclosure that could reveal sensitive...

PT-2025-52771

Name of the Vulnerable Software and Affected Versions Home Assistant Core versions prior to 2025.8.0 Description The Downloader integration does not completely validate file paths when combining them, which creates a directory traversal issue. This allows unauthorized access to files outside the...

EUVD-2025-204091

Incorrect Privilege Assignment vulnerability in PenciDesign Soledad soledad allows Privilege Escalation.This issue affects Soledad: from n/a through = 8.6.9...

CVE-2025-68463

Bio.Entrez in Biopython through 186 allows doctype XXE...

PT-2025-52081

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes FitFlex fitflex allows PHP Local File Inclusion.This issue affects FitFlex: from n/a through = 1.6...