CGA-F7MR-58RR-GG27

Bulletin has no description...

WordPress DX Sales CRM plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin DX Sales CRM versions = 1.1...

WordPress visualslider Sldier plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin visualslider Sldier versions = 1.1.1...

CISA and Partners Release Call to Action to Close the National Software Understanding Gap

Today, CISA—in partnership with the Defense Advanced Research Projects Agency DARPA, the Office of the Under Secretary of Defense for Research and Engineering OUSD R&E, and the National Security Agency NSA—published Closing the Software Understanding Gap. This report urgently implores the U.S...

BIT-PYTHON-MIN-2022-48566

An issue was discovered in comparedigest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.comparedigest...

BELL-CVE-2024-57899

Bulletin has no description...

BELL-CVE-2024-57897

Bulletin has no description...

BELL-CVE-2024-57887

Bulletin has no description...

BELL-CVE-2024-57802

Bulletin has no description...

BELL-CVE-2024-36476

Bulletin has no description...

BELL-CVE-2024-57898

Bulletin has no description...

BELL-CVE-2024-57893

Bulletin has no description...

BELL-CVE-2024-57888

Bulletin has no description...

BELL-CVE-2024-57795

Bulletin has no description...

BELL-CVE-2024-52005

Bulletin has no description...

GHSA-6FX8-H7JM-663J parse-uri Regular expression Denial of Service (ReDoS)

An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL. PoC js async function exploit const parseuri = require"parse-uri"; // This input is designed to cause excessive backtracking in the regex const craftedInput = 'http://example.com...

OSV-2025-33 UNKNOWN READ in pcpp::RawPacket::insertData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=390004170 Crash type: UNKNOWN READ Crash state: pcpp::RawPacket::insertData pcpp::Packet::extendLayer pcpp::BgpUpdateMessageLayer::setNetworkLayerReachabilityInfo...

The vulnerability of software for automating the creation, publication, and distribution of reports and documents in IBM Engineering Lifecycle Optimization – Publishing (PUB) lies in the use of a regular expression with inefficient computational complexity, allowing an attacker to trigger a service failure.

The vulnerability of software for automating the creation, publication, and distribution of reports and documents in IBM Engineering Lifecycle Optimization – Publishing PUB is related to the use of regular expressions with inefficient computational complexity. Exploiting this vulnerability can...

ALSA-2025:0382 Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.102 and .NET Runtime 9.0.1...

PT-2025-3566 · Jfinaloa · Jfinaloa

Name of the Vulnerable Software and Affected Versions: JFinalOA versions prior to 2025.01.01 Description: A cross-site scripting XSS issue in the "/bumph/getDraftListPage?type" interface allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For versions...