BELL-CVE-2025-40107

Bulletin has no description...

MINI-8GGH-4R98-RGVQ

Bulletin has no description...

MINI-V8C7-MRHX-P5FH

Bulletin has no description...

MINI-HQCP-JHRR-QWFW

Bulletin has no description...

MINI-6F6G-7XP4-3M56

Bulletin has no description...

MINI-5X3Q-3WXR-F35V

Bulletin has no description...

CVE-2025-64180 Manager-io/Manager: Complete Bypass of SSRF Protection via Time-of-Check Time-of-Use (TOCTOU)

Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical vulnerability permits unauthorized access to internal network resources. The flaw lies in the fundamental design of the DNS validation mechanism. A Time-of-Check Time-of-Use TOCTOU...

AI SDK 安全漏洞

AI SDK is a TypeScript AI toolkit open-sourced by Vercel. A security vulnerability exists in AI SDK versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta, which stems from the possibility that a user could bypass the file type whitelist to upload a file...

GE Vernova Smallworld 安全漏洞

GE Vernova Smallworld is an asset and network management software from GE Vernova, USA. A security vulnerability exists in GE Vernova Smallworld version 5.3.5 and prior versions, which stems from improper pathname restrictions that could lead to file manipulation...

DLA-4367-1 keystone - security update

Bulletin has no description...

Dosage 路径遍历漏洞

Dosage is a serial comic download tool from the Dosage open source. A path traversal vulnerability exists in Dosage version 3.1 and earlier versions, which stems from improper handling of the HTTP Content-Type header, and could lead to arbitrary file writes...

PT-2025-45479

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0 Description The application lacks sufficient anti-CSRF protections, such as anti-CSRF tokens or same-site cookie restrictions. This allows attackers to potentially trick authenticated...

PT-2025-45400

Name of the Vulnerable Software and Affected Versions Manager-io/Manager versions 25.11.1.3085 and below Description Manager-io/Manager accounting software contains a critical flaw in its DNS validation mechanism. This flaw results in a Time-of-Check Time-of-Use TOCTOU condition, allowing attacke...

Linux Distros Unpatched Vulnerability : CVE-2025-12728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific...

Chasing One-Day Vulnerabilities across Open Source Forks

Tracking vulnerabilities inherited from third-party open-source components is a well-known challenge, often addressed by tracing the threads of dependency information. However, vulnerabilities can also propagate through forking: a repository forked after the introduction of a vulnerability, but...

CVE-2025-63717

The change password functionality at /petgrooming/admin/changepass.php in SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross-Site Request Forgery CSRF attacks. The application does not implement adequate anti-CSRF tokens or same-site cookie restrictions, allowing attackers...

DLA-4366-1 swift - security update

Bulletin has no description...

DEBIAN-CVE-2025-11458

Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2025-11756

Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2025-12036

Out of bounds memory access in V8 in Google Chrome prior to 141.0.7390.122 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...