BELL-CVE-2025-66865 CVE-2025-66865 does not affect BellSoft software

Bulletin has no description...

CVE-2025-15219

creationtimestamp| type| source ---|---|--- 2025-12-30 04:34:01+00:00| seen| https://bsky.app/profile/potato.software/post/3mb6jja2qud22 2025-12-30 08:32:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb6wueeqju2c...

CVE-2025-15213

creationtimestamp| type| source ---|---|--- 2025-12-30 01:32:44+00:00| seen| https://bsky.app/profile/potato.software/post/3mb67f2ns6n2k 2025-12-30 03:16:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb6f6cm3rq2y...

PT-2025-53874

Name of the Vulnerable Software and Affected Versions thembay Puca versions through 2.6.39 Description The software contains a flaw related to improper control of filename handling for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local File...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992363 advisory. In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Use pmruntimeresumeandget to prevent refcnt leak In arizonaclk32kenable, we should...

PT-2025-53897

Name of the Vulnerable Software and Affected Versions averta Shortcodes and extra features for Phlox theme auxin-elements versions through 2.17.12 Description An authorization issue exists in averta Shortcodes and extra features for Phlox theme auxin-elements, allowing exploitation due to...

CVE-2025-66723

inMusic Brands Engine DJ before 4.3.4 suffers from Insecure Permissions due to exposed HTTP service in the Remote Library, which allows attackers to access all files and network paths...

Linux Distros Unpatched Vulnerability : CVE-2023-54280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: fix potential race when tree connecting ipc Protect access of TCPServerInfo::hostname when building the ipc tree name as it might get freed in cifsd threa...

PT-2025-53988

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s powerpc/rtas component where the rtas os term function, called during kernel panic, could potentially hang the system if devtree lock is held. This...

EUVD-2025-205597

hemmelig allows SSRF Filter bypass via Secret Request functionality...

[SECURITY] Fedora 42 Update: fluidsynth-2.5.2-1.fc42

FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI even ts from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a...

CVE-2025-69211 Nest has a Fastify URL Encoding Middleware Bypass (TOCTOU)

Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a Fastify URL encoding middleware bypass. A NestJS application is vulnerable if it uses @nestjs/platform-fastify; relies on NestMiddleware via MiddlewareConsumer for security checks...

CVE-2025-15141

A vulnerability was determined in Halo up to 2.21.10. This issue affects some unknown processing of the file /actuator of the component Configuration Handler. Executing a manipulation can lead to information disclosure. The attack may be performed from remote. This attack is characterized by high...

CVE-2025-15178

creationtimestamp| type| source ---|---|--- 2025-12-29 07:46:15+00:00| seen| https://bsky.app/profile/potato.software/post/3mb4ds2iskw2p 2025-12-29 08:19:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4foboscc2q...

CVE-2025-15226

creationtimestamp| type| source ---|---|--- 2025-12-29 07:30:49+00:00| seen| https://bsky.app/profile/potato.software/post/3mb4cwhag7t24 2025-12-29 08:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb4elcciov2t 2025-12-29 08:00:41+00:00| seen|...

Security Bulletin: Vulnerability in ACE affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in ACE has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

CVE-2025-15226 Sunnet｜WMPro - Arbitrary File Upload

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2025-68952

Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution RCE vulnerability has been identified in Eigent. This vulnerability allows an attacker to execute arbitrary code on the victim's machine or server through a specific interaction 1-click. This issue has been...

Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.

Summary IBM Maximo Application Suite uses "tomcat-embed-core-10.1.46.jar, js-yaml-4.1.0.tgz, keras-2.14.0-py3-none-any.whl, logback-core-1.5.18.jar, werkzeug-3.0.6-py3-none-any.whl" which are vulnerable to "CVE-2025-61795, CVE-2025-64718, CVE-2025-12058, CVE-2025-11226, CVE-2025-66221". This...

EUVD-2025-205547

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available ...