CVE-2025-10968

CVE-2025-10968 concerns a SQL Injection in GG Soft PaperWork (versions 6.1.0.9390–6.1.0.9397) due to improper neutralization of special elements in SQL commands through the Hibernate layer. The vulnerability could enable Blind SQL Injection and standard SQL Injection. A fixed release is 6.1.0.939...

RHSA-2025:19914 Red Hat Security Advisory: webkit2gtk3 security update

Bulletin has no description...

RHSA-2025:19909 Red Hat Security Advisory: tigervnc security update

Bulletin has no description...

RHSA-2025:19851 Red Hat Security Advisory: sssd security update

Bulletin has no description...

CGA-VMQM-5WC5-7M8X

Bulletin has no description...

CGA-XFCP-W5JV-5V25

Bulletin has no description...

CGA-8GGX-55H4-H6VM

Bulletin has no description...

CGA-V7FR-4C6H-V59V

Bulletin has no description...

CGA-F3FF-956J-QVF8

Bulletin has no description...

CGA-2H76-6R7P-RG63

Bulletin has no description...

RLSA-2025:19835 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

BELL-CVE-2025-40107

Bulletin has no description...

MINI-8GGH-4R98-RGVQ

Bulletin has no description...

MINI-V8C7-MRHX-P5FH

Bulletin has no description...

MINI-HQCP-JHRR-QWFW

Bulletin has no description...

MINI-6F6G-7XP4-3M56

Bulletin has no description...

MINI-5X3Q-3WXR-F35V

Bulletin has no description...

CVE-2025-64180 Manager-io/Manager: Complete Bypass of SSRF Protection via Time-of-Check Time-of-Use (TOCTOU)

Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical vulnerability permits unauthorized access to internal network resources. The flaw lies in the fundamental design of the DNS validation mechanism. A Time-of-Check Time-of-Use TOCTOU...

AI SDK 安全漏洞

AI SDK is a TypeScript AI toolkit open-sourced by Vercel. A security vulnerability exists in AI SDK versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta, which stems from the possibility that a user could bypass the file type whitelist to upload a file...

GE Vernova Smallworld 安全漏洞

GE Vernova Smallworld is an asset and network management software from GE Vernova, USA. A security vulnerability exists in GE Vernova Smallworld version 5.3.5 and prior versions, which stems from improper pathname restrictions that could lead to file manipulation...