PT-2026-3526

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-13 Description ImageMagick is software used for editing and manipulating digital images. A flaw exists in the BilateralBlurImage method where double buffers allocated inside AcquireBilateralTLS are not fully...

PT-2026-1098

Name of the Vulnerable Software and Affected Versions Qfiling versions prior to 3.13.1 Description A path traversal issue exists in Qfiling that could allow remote attackers to read the contents of unexpected files or system data. Approximately 3257k+ instances are potentially exposed. The...

Debian: Security Advisory (DSA-6092-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-34467 ZwiiCMS < 13.7.00 Lock Persistence Authenticated DoS Against Administrative Pages

ZwiiCMS versions prior to 13.7.00 contain a denial-of-service vulnerability in multiple administrative endpoints due to improper authorization checks combined with flawed resource state management. When an authenticated low-privilege user requests an administrative page, the application returns...

ROOT-OS-DEBIAN-13-CVE-2025-66628 CVE-2025-66628 in rootio-imagemagick - Patched by Root

Root has patched CVE-2025-66628 in the rootio-imagemagick package for Root:Debian:13. Multiple fixed versions available...

[SECURITY] [DLA 4420-1] postgresql-13 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-4420-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 26, 2025 https://wiki.debian.org/LTS -...

Debian dla-4420 : libecpg-compat3 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4420 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4420-1 [email protected]...

CVE-2025-68494 WordPress Premium Addons for Elementor plugin <= 4.11.53 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through = 4.11.53...

SUSE CVE-2025-66400

mdast-util-to-hast is an mdast utility to transform to hast. From 13.0.0 to before 13.2.1, multiple unprefixed classnames could be added in markdown source by using character references. This could make rendered user supplied markdown code elements appear like the rest of the page. This...

AlmaLinux 9 : gcc-toolset-13-binutils (ALSA-2025:23336)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:23336 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted the preceding description block directly from the AlmaLinux security...

CVE-2025-15002

A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to...

ROOT-OS-DEBIAN-13-CVE-2023-51596 CVE-2023-51596 in rootio-bluez - Patched by Root

Root has patched CVE-2023-51596 in the rootio-bluez package for Root:Debian:13. Multiple fixed versions available...

Debian: Security Advisory (DSA-6090-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-6091-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-6085-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-6086-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SeaCMS SQL注入漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A SQL injection vulnerability exists in SeaCMS 13.3 and earlier versions, which stems from the mishandling of the parameter page/limit b...

PT-2025-52613

Name of the Vulnerable Software and Affected Versions SeaCMS versions prior to 13.4 Description A flaw exists in SeaCMS that allows for SQL injection. The issue is located in an unknown function within the js/player/dmplayer/dmku/class/mysqli.class.php file. Manipulation of the page/limit argumen...

RHSA-2025:23336 Red Hat Security Advisory: gcc-toolset-13-binutils security update

Bulletin has no description...

gcc-toolset-13-binutils security update

An update is available for gcc-toolset-13-binutils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Binutils is a collection of binary utilities, including ar fo...