PT-2025-34758 · Unknown +1 · Invoice Ninja +1

Name of the Vulnerable Software and Affected Versions: Invoice Ninja versions prior to 5.0.175 Description: Invoice Ninja on macOS is susceptible to a local privilege escalation issue. The presence of the “com.apple.security.get-task-allow” entitlement allows local attackers with unprivileged...

PT-2025-34757 · Macvim · Macvim

Name of the Vulnerable Software and Affected Versions: MacVim affected versions not specified Description: MacVim’s configuration on macOS, specifically the presence of the “com.apple.security.get-task-allow” entitlement, allows local attackers with unprivileged access to attach a debugger, read ...

MAL-2025-42030 Malicious code in msmg-frontend-task (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in msmg-frontend-task (npm)

The package communicates with a domain associated with malicious activity...

PT-2025-37976

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc2-virtme 134 Description The fbnic driver had an issue where phylink resume was invoked as part of the fbnic up path while not holding the RTNL lock. This could lead to locking assertions during PM resum...

CVE-2025-55622

Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience...

Linux Distros Unpatched Vulnerability : CVE-2024-26750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: afunix: Drop oobskb ref before purging queue in GC. syzbot reported another task hung in...

CVE-2025-55622

Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience...

CVE-2025-55622

Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience...

CVE-2025-55622: Public cloneable() Method Without Final

Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience...

Reolink App security vulnerability

Reolink App is a mobile application from Reolink USA. A security vulnerability exists in Reolink App version v4.54.0.4.20250526, which stems from an improper setting of taskAffinity, which could lead to task hijacking...

PT-2025-34453

Name of the Vulnerable Software and Affected Versions: Reolink version 4.54.0.4.20250526 Description: The software contains a task hijacking issue due to inappropriate taskAffinity settings. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-2025-55622

Reolink v4.54.0.4.20250526 contains a task hijacking vulnerability caused by inappropriate taskAffinity settings. While the supplier disputes this claim, stating it is intentional behavior for a predictable user experience, security records identify it as a potential security flaw. No remediation...

CVE-2025-55622

Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience...

CVE-2025-55622

Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience...

CVE-2025-9135

A vulnerability was detected in Verkehrsauskunft Österreich SmartRide, cleVVVer, BusBahnBim and Salzburg Verkehr up to 12.1.1258 on Android. The impacted element is an unknown function of the file AndroidManifest.xml. The manipulation results in improper export of android application components...

Authorization Bypass Through User-Controlled Key

Overview com.xuxueli:xxl-job is a distributed task scheduling framework. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the remove function. An attacker can delete unauthorized resources by manipulating the ID parameter remotely. Remediatio...

XXL-JOB security vulnerabilities

XXL-JOB is a distributed task scheduling platform by the individual developer Xu Xueli xuxueli. A security vulnerability exists in XXL-JOB 3.1.1 and earlier versions, which stems from incorrect manipulation of parameter IDs, resulting in improper control of resource identifiers...

CVE-2025-9135

A vulnerability was detected in Verkehrsauskunft Österreich SmartRide, cleVVVer, BusBahnBim and Salzburg Verkehr up to 12.1.1258 on Android. The impacted element is an unknown function of the file AndroidManifest.xml. The manipulation results in improper export of android application components...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gffilterpidinstswapdeletetask function in the MP4Box multimedia platform GPAC utility is related to its use after release. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...