Intel Clock Jitter Tool 代码问题漏洞

Intel Clock Jitter Tool is a clock jitter analysis tool developed by Intel based on mathematical physics methodology. Intel Clock Jitter Tool suffers from an elevation of privilege vulnerability that stems from an uncontrolled search path, which can be exploited by an attacker to cause an elevati...

Linux Distros Unpatched Vulnerability : CVE-2025-21962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount...

Clock Jitter Tool Software Advisory

Summary: A potential security vulnerability for some Clock Jitter Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20092 Description: Uncontrolled search path for some Clock Jitter...

Linux Distros Unpatched Vulnerability : CVE-2024-41148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A code injection vulnerability has been discovered in the Robot Operating System ROS 'rostopic' command- line tool, affecting ROS distributions Noetic Ninjemys...

PT-2025-32756 · Intel · Intel Sgx Sdk +1

Name of the Vulnerable Software and Affected Versions: Intel Edger8r Tool for some IntelR SGX SDK affected versions not specified Description: Improper input validation in the Intel Edger8r Tool for some IntelR SGX SDK may allow an authenticated user to potentially escalate privileges via local...

Intel Edger8r Tool 输入验证错误漏洞

Intel Edger8r Tool is a code generation tool from Intel Corporation USA. Intel Edger8r Tool suffers from an input validation error vulnerability that stems from improper input validation, which could lead to elevation of privilege...

📄 WebsiteBaker 2.13.7 r164 Command Injection

WebsiteBaker version 2.13.7 r164 suffers from an authenticated command injection vulnerability. Exploit Title: WebsiteBaker 2.13.7 r164 Command Injection Authenticated Exploit Author: tmrswrr /Hulya KARABAG Vendor Homepage: https://forum.websitebaker.org/ Software Link:...

PT-2025-32703 · Unknown · Clock Jitter Tool

Name of the Vulnerable Software and Affected Versions: Clock Jitter Tool versions prior to 6.0.1 Description: An uncontrolled search path issue exists in some Clock Jitter Tool software. This issue may allow an authenticated user to potentially escalate privileges via local access. Recommendation...

PT-2025-32727 · Intel · Intel Pcie Switch

Name of the Vulnerable Software and Affected Versions: IntelR PCIe Switch software versions prior to MR4 1.0b1 Description: An improper access control issue exists in the firmware package and LED mode toggle tool for some IntelR PCIe Switch software. A privileged user may be able to escalate...

SAP Landscape Transformation 代码注入漏洞

SAP Landscape Transformation is a tool for system data migration and integration from SAP, Germany. A code injection vulnerability exists in SAP Landscape Transformation SLT that originates from the ability to inject arbitrary ABAP code via RFC...

Linux Distros Unpatched Vulnerability : CVE-2023-53117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs: prevent out-of-bounds array speculation when closing a file descriptor Google-Bug-Id: 114199369 CVE-2023-53117 Note that Nessus relies on the presence of th...

Intel® Software Guard Extensions SDK (Intel® SGX SDK) Edger8r Tool Advisory

Summary: A potential security vulnerability in the Intel Edger8r Tool for the Intel® Software Guard Extensions SDK Intel® SGX SDK may allow escalation of privilege. Intel is releasing prescriptive guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-32004...

CVE-2025-55161

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security...

CVE-2025-55161 Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security...

CVE-2025-55161 Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security...

CVE-2025-55151

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, the "convert file to pdf" functionality /api/v1/convert/file/pdf uses LibreOffice's unoconvert tool for conversion, and SSRF vulnerabilities exist during the conversion process...

CVE-2025-55150

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/html/pdf endpoint to convert HTML to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security sanitization...

CVE-2025-55150 Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/html/pdf endpoint to convert HTML to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security sanitization...

CVE-2025-55150 Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/html/pdf endpoint to convert HTML to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security sanitization...

CVE-2025-55151

Stirling-PDF prior to version 1.1.0 is affected by a Server-Side Request Forgery (SSRF) in the /api/v1/convert/file/pdf path, where LibreOffice’s unoconvert tool is used during file-to-PDF conversion. The vulnerability arises in the conversion process and has been patched in version 1.1.0. Affect...