CVE-2025-27148

CVE-2025-27148 affects Gradle’s native-platform library used by Gradle builds. Vulnerability arises when Native.get(Class) is called without prior Native.init(File) and a non-null working path is supplied, causing initialization to occur in the system temporary directory on Unix-like systems. Ver...

CVE-2025-27148

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. On Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. This library initialization could be...

CVE-2025-27148 Gradle vulnerable to local privilege escalation through system temporary directory

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. On Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. This library initialization could be...

Gradle 安全漏洞

Gradle is a set of JVM-based project building tools from Gradle, Inc. that supports maven, Ivy repositories, and more. A security vulnerability exists in Gradle that stems from improper permissions on the system's temporary directory. An attacker can elevate privileges by exploiting the...

USN-7284-1 netty vulnerabilities

Jonathan Leitschuh discovered that Netty did not correctly handle file permissions when writing temporary files. An attacker could possibly use this issue to leak sensitive information. CVE-2022-24823 It was discovered that Netty did not correctly handle limiting the number of fields when decodin...

PT-2025-7700

Name of the Vulnerable Software and Affected Versions vTiger CRM version 6.4.0 Description A problematic issue has been identified, affecting the /modules/Mobile/index.php file. The manipulation of the operation argument leads to cross-site scripting. This issue can be exploited remotely...

PT-2025-7682 · Sourcecodester · Sourcecodester Telecom Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Telecom Billing Management System version 1.0 Description: A critical issue affects some unknown processing of the file main.cpp of the component Add New Record. The manipulation of the name argument leads to buffer overflow...

PT-2025-7673 · Sourcecodester · Sourcecodester Best Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Employee Management System version 1.0 Description: A vulnerability has been found in the processing of the file /admin/salary slip.php. The manipulation of the id argument leads to authorization bypass. The attack may be...

PT-2025-7580 · Itsourcecode · Itsourcecode Simple Chatbox

Name of the Vulnerable Software and Affected Versions: ITSourcecode Simple ChatBox versions up to 1.0 Description: A vulnerability was found in the ITSourcecode Simple ChatBox, affecting unknown code of the file /admin.php. The attack can use SQL injection to obtain sensitive data. Recommendation...

hornetq-core-client: Arbitrarily overwrite files or access sensitive information

A flaw was found in the createTempFile method of hornetq. Affected version of hornetq allows attackers to arbitrarily overwrite files or access sensitive information...

PT-2025-6881

Name of the Vulnerable Software and Affected Versions NUUO Camera versions prior to 20250203 Description A critical issue exists in NUUO Camera that allows for remote command injection. The issue affects the print file function within the /handle config.php file. Manipulation of the log argument...

CVE-2023-43123

On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method...

SUSE CVE-2023-43123

On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method...

PT-2025-6590 · WordPress · The Return Refund/Exchange For Woocommerce – Return Management System

Name of the Vulnerable Software and Affected Versions: The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress versions up to, and including, 4.4.5 Description: The issue allows unauthenticated attackers to...

The vulnerability of the web service for transmitting information through temporary links, Password Pusher, is related to incorrect session duration. This allows attackers to gain unauthorized access and disclose the protected information.

The vulnerability of the web service for transmitting information through temporary links, Password Pusher, is related to incorrect session duration. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access and disclose the protected information...

CVE-2025-21162

Photoshop Elements versions 2025.0 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus...

PT-2025-7052 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.18 Description: A low-privileged user can enable debug mode and access sensitive information. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents...

PT-2025-6775 · Palo Alto Networks · Pan-Os Openconfig Plugin

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS affected versions not specified Description: A command injection vulnerability in the Palo Alto Networks PAN-OS OpenConfig plugin enables an authenticated administrator to make gNMI requests to the PAN-OS management...

PT-2025-6694 · Samsung · Exynos +1

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions 1480 through 2400 Description: The issue is related to the absence of a null check, which leads to a Denial of Service at amdgpu cs parser bos in the Xclipse Driver. This problem can cause a service...

PT-2025-7079 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version V15.03.05.16 Description: The issue is a buffer overflow vulnerability in the formexeCommand function. This vulnerability can be exploited, potentially leading to unauthorized access or control. There is no information...