CVE-2025-54346

A Reflected Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...

EUVD-2025-197626

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote access to content despite lack of the correct permission through a Broken Authorization Schema...

CVE-2025-54559

An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote Path Traversal for loading arbitrary external content...

Desktop Alert PingAlert security vulnerability

Desktop Alert PingAlert is a network status monitoring tool developed by Desktop Alert, Inc. and is mainly used to monitor the status of network devices in real time and send alerts. Desktop Alert PingAlert suffers from an Improper Access Control vulnerability that stems from improper access...

CVE-2025-54342

The Application Server of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 is vulnerable to an information disclosure flaw. The root cause is identified as incompatible policies , which can be exploited by attackers to expose sensitive information . To remediate this vulnerability, it is...

CVE-2025-54345

An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. Sensitive Information is exposed to an Unauthorized Actor...

CVE-2025-54559

An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote Path Traversal for loading arbitrary external content...

CVE-2025-54345

An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. Sensitive Information is exposed to an Unauthorized Actor...

CVE-2025-54342

A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is Exposure of Sensitive Information because of Incompatible Policies...

CVE-2025-54562

The Application Server of Desktop Alert PingAlert (versions 6.1.0.11 through 6.1.1.2 ) is vulnerable to a flaw that allows for the disclosure of technical information via stack traces . An attacker could exploit this vulnerability to compromise confidentiality . To remediate this issue, it is rec...

CVE-2025-54560

Desktop Alert PingAlert (versions 6.1.0.11 through 6.1.1.2 ) contains a Server-side Request Forgery (SSRF) vulnerability in its Application Server component. The root cause is the server's failure to implement sufficient authentication mechanisms to verify the origin of requests. An attacker can ...

CVE-2025-54346

A Reflected Cross Site Scripting (XSS) vulnerability exists in the Application Server of Desktop Alert PingAlert versions 6.1.0.11 to 6.1.1.2 . The flaw allows an attacker to inject malicious scripts through a specially crafted request, potentially leading to browser hijacking and the capture of ...

CVE-2025-54346

A Reflected Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...

directus (>=11.13.0, <=11.13.1) potentially affected by CVE-2025-64746 via @directus/api (>=32.0.0, <=32.0.1)

@directus/api NPM version =32.0.0, =11.13.0, =11.13.1 Source cves: CVE-2025-64746 Source advisory: SNYK:JS-DIRECTUSAPI-13985179...

CVE-2025-64745

Astro is a web framework. Starting in version 5.2.0 and prior to version 5.15.6, a Reflected Cross-Site Scripting XSS vulnerability exists in Astro's development server error pages when the trailingSlash configuration option is used. An attacker can inject arbitrary JavaScript code that executes ...

ZITADEL Authorization Issue Vulnerability

ZITADEL is a modern open source alternative to Auth0, Firebase Auth, AWS Cognito, and Keycloak built for the container and serverless era from the Swiss ZITADEL open source. An authorization issue vulnerability exists in ZITADEL versions 2.50.0 through 2.71.19, 3.4.4, and prior to 4.6.6, which...

Astro code issues and vulnerabilities

Astro is an Astro open source web framework for content-driven websites. A code issue vulnerability exists in Astro versions 2.16.0 through prior to 5.15.5, which stems from the unsafe use of the x-forwarded-proto and x-forwarded-port request headers, which could lead to middleware protection rou...

PrivateBin security vulnerability

PrivateBin is a minimalist open source online pastebin from the PrivateBin project. A security vulnerability exists in PrivateBin version 1.7.7 up to and including version 2.0.3, which stems from the presence of a local file inclusion in the template switching feature that could lead to the readi...

PrivateBin security vulnerability

PrivateBin is a minimalist open source online pastebin from the PrivateBin project. A security vulnerability exists in PrivateBin version 1.7.7 up to and including version 2.0.3, which originates from a reflection to a page when HTML is included in a drag-and-drop filename, and could lead to a...

Siemens SIMATIC S7-1500 Exposure of Sensitive Information to an Unauthorized Actor (CVE-2020-8169)

The libcurl library versions 7.62.0 to and including 7.70.0 are vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS servers. This plugin only works with Tenable.ot. Please visit...