PT-2025-36941

Name of the Vulnerable Software and Affected Versions: pfSense CE affected versions not specified Description: The start-day parameter in /usr/local/www/status traffic totals.php does not undergo proper validation to ensure it is a numeric value or sanitized of HTML-related characters before bein...

Netgate pfSense CE 安全漏洞

Netgate pfSense CE is a FreeBSD-based open source firewall and routing platform from Netgate, Inc. that supports enterprise-class network security and network management features. A security vulnerability exists in Netgate pfSense CE that stems from the start-day parameter not validating as a...

CVE-2025-34174: Improper Neutralization of Input During Web Page Generation

In pfSense CE /usr/local/www/statustraffictotals.php, the value of the start-day parameter is not ensured to be a numeric value or sanitized of HTML-related characters/strings before being directly displayed in the input box. This value can be saved as the default value to be displayed to all use...

CVE-2025-10099 Portabilis i-Educar Editar usuário educar_usuario_cad.php cross site scripting

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educarusuariocad.php of the component Editar usuário Page. This manipulation of the argument email/datainicial/dataexpiracao causes cross site...

CVE-2025-32333

In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-6785

Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle. Testing completed on Tesla Model 3 vehicles with software version v11.1 2023.20.9 ee6de92ddac5...

Malicious code in geodynamo-start-umbra-abiogenesis (npm)

The package geodynamo-start-umbra-abiogenesis was found to contain malicious code...

MAL-2025-46141 Malicious code in start-string-mensa-mocha (npm)

The package start-string-mensa-mocha was found to contain malicious code...

Malicious code in start-string-mensa-mocha (npm)

The package start-string-mensa-mocha was found to contain malicious code...

MAL-2025-44395 Malicious code in geodynamo-start-umbra-abiogenesis (npm)

The package geodynamo-start-umbra-abiogenesis was found to contain malicious code...

Malicious code in start-less-loader-got-sirius (npm)

The package start-less-loader-got-sirius was found to contain malicious code...

Malicious code in cygnus-uninstall-prettier-stylelint-start (npm)

The package cygnus-uninstall-prettier-stylelint-start was found to contain malicious code...

MAL-2025-43922 Malicious code in cygnus-uninstall-prettier-stylelint-start (npm)

The package cygnus-uninstall-prettier-stylelint-start was found to contain malicious code...

MAL-2025-46140 Malicious code in start-less-loader-got-sirius (npm)

The package start-less-loader-got-sirius was found to contain malicious code...

MAL-2025-44755 Malicious code in janus-planetology-neutronstar-start (npm)

The package janus-planetology-neutronstar-start was found to contain malicious code...

CVE-2025-58641

Server-Side Request Forgery SSRF vulnerability in kamleshyadav Exit Intent Popup exitintentpopup allows Server Side Request Forgery.This issue affects Exit Intent Popup: from n/a through = 1.0.1...

Linux Distros Unpatched Vulnerability : CVE-2023-23923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability was found Moodle which exists due to insufficient limitations on the start page preference. A remote attacker can set that preference for...

CVE-2025-32333

In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-32333

In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22425

In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...