7846 matches found
PT-2025-34915 · Aftership · Aftership Tracking
Name of the Vulnerable Software and Affected Versions: AfterShip Tracking versions n/a through 1.17.17 Description: A missing authorization flaw exists in AfterShip Tracking, allowing access to functionality not properly restricted by Access Control Lists ACLs. Recommendations: Update AfterShip...
Linux Distros Unpatched Vulnerability : CVE-2022-3060
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper control of a resource identifier in Error Tracking in GitLab CE/EE affecting all versions from 12.7 allows an authenticated attacker to generate conten...
traQ 日志信息泄露漏洞
traq is a PHP-based project management and issue tracking system by Jack Polgar, a personal developer. A log information disclosure vulnerability exists in versions of traQ prior to 3.25.0, which stems from recording sensitive information in SQL error logs, which could lead to information...
Linux Distros Unpatched Vulnerability : CVE-2016-6615
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XSS issues were discovered in phpMyAdmin. This affects navigation pane and database/table hiding feature a specially-crafted database name can be used to trigg...
Automation Is Redefining Pentest Delivery
Pentesting remains one of the most effective ways to identify real-world security weaknesses before adversaries do. But as the threat landscape has evolved, the way we deliver pentest results hasn't kept pace. Most organizations still rely on traditional reporting methods—static PDFs, emailed...
CVE-2025-50891
The server-side backend for Adform Site Tracking before 2025-08-28 allows attackers to inject HTML or execute arbitrary code via cookie hijacking. NOTE: a customer does not need to take any action to update locally installed software such as Adform Site Tracking 1.1...
CVE-2025-50891
The server-side backend for Adform Site Tracking before 2025-08-28 allows attackers to inject HTML or execute arbitrary code via cookie hijacking. NOTE: a customer does not need to take any action to update locally installed software such as Adform Site Tracking 1.1...
CVE-2025-38596
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF in panthorgemcreatewithhandle debugfs code The object is potentially already gone after the drmgemobjectput. In general the object should be fully constructed before calling drmgemhandlecreate, except the...
[SECURITY] Fedora 41 Update: uv-0.8.8-1.fc41
An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...
PT-2025-33850
Name of the Vulnerable Software and Affected Versions: Adform Site Tracking version 1.1 Description: Adform Site Tracking version 1.1 is susceptible to HTML injection and arbitrary code execution through cookie hijacking. Recommendations: At the moment, there is no information about a newer versi...
CVE-2025-50891
CVE-2025-50891 affects Adform Site Tracking (backend) and specifically Adform Site Tracking version 1.1. It describes HTML injection and arbitrary code execution via cookie hijacking in the server-side backend, with CVSSv3.1 base score 7.2 (HIGH) and network attack vector with low attack complexi...
CVE-2025-50891: Improper Neutralization of Input During Web Page Generation
The server-side backend for Adform Site Tracking before 2025-08-28 allows attackers to inject HTML or execute arbitrary code via cookie hijacking. NOTE: a customer does not need to take any action to update locally installed software such as Adform Site Tracking 1.1...
Adform Site Tracking 跨站脚本漏洞
Adform Site Tracking is a functional software for mobile user programs on websites and applications from Danish company Adform. A cross-site scripting vulnerability exists in Adform Site Tracking version 1.1 that originates from HTML injection or arbitrary code execution...
CVE-2025-50891
The server-side backend for Adform Site Tracking before 2025-08-28 allows attackers to inject HTML or execute arbitrary code via cookie hijacking. NOTE: a customer does not need to take any action to update locally installed software such as Adform Site Tracking 1.1...
Linux Distros Unpatched Vulnerability : CVE-2024-10026
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot...
CVE-2025-38511
In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM buffer objects are not cleared by default on alloc and during VF provisioning we only setup LMTT PTEs for the actually provisioned LMEM range. But beyond that valid range we might...
GHSA-77H3-W9RX-HJ3Q User-defined implementations of the safe trait scratchpad::Tracking can cause heap buffer overflows
The get and set methods of the public trait scratchpad::Tracking interact with unsafe code regions in the crate, and they influence the computation of addresses returned as raw pointers. However, the trait itself is not marked as unsafe, meaning users may provide custom implementations under the...
User-defined implementations of the safe trait scratchpad::Tracking can cause heap buffer overflows
The get and set methods of the public trait scratchpad::Tracking interact with unsafe code regions in the crate, and they influence the computation of addresses returned as raw pointers. However, the trait itself is not marked as unsafe, meaning users may provide custom implementations under the...
