EUVD-2025-6090

Malicious code in bioql PyPI...

EUVD-2023-1803

Malicious code in bioql PyPI...

CVE-2025-57205

iNiLabs School Express SMS Express 6.2 is affected by a Stored Cross-Site Scripting XSS vulnerability in the content-management features available to authenticated admin users. The vulnerability resides in POSTed editor parameters submitted to the /posts/edit/id endpoint and similarly in Notice a...

Selleo Mentingo 代码问题漏洞

Selleo Mentingo is an in-house training and employee development platform from Selleo Poland. A code issue vulnerability exists in Selleo Mentingo version 2025.08.27, which stems from an insufficient restriction of the parameter userAvatar in the Content-Type Handler component, which could lead t...

Linux Distros Unpatched Vulnerability : CVE-2017-11671

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under certain circumstances, the ix86expandbuiltin function in i386.c in GNU Compiler Collection GCC version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4...

Linux Distros Unpatched Vulnerability : CVE-2024-45993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb. CVE-2024-45993 Note that Nessus relies on the presence of the package as reported by...

CVE-2025-8551

A vulnerability was found in atjiu pybbs up to 6.0.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/comment/list. The manipulation of the argument Username leads to cross site scripting. The attack may be launched remotely. The exploit h...

CVE-2025-8535

A vulnerability, which was classified as problematic, has been found in cronoh NanoVault up to 1.2.1. This issue affects the function executeJavaScript of the file /main.js of the component xrb URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...

PT-2025-32128 · Unknown · Virtual Cd

Name of the Vulnerable Software and Affected Versions: Virtual cdm Camera Data Mover affected versions not specified Description: A memory corruption issue exists when utilizing Virtual cdm Camera Data Mover to write registers. Recommendations: At the moment, there is no information about a newer...

PT-2025-32028 · Wantagent · Wantagent

Name of the Vulnerable Software and Affected Versions: WantAgent affected versions not specified Description: An iterator failure issue exists within the WantAgent module, potentially leading to memory release failures upon successful exploitation. Recommendations: At the moment, there is no...

Linux Distros Unpatched Vulnerability : CVE-2024-35798

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race in readextentbufferpages There are reports from tree-checker that detects...

PT-2025-31325 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 Description: A path handling issue was addressed with improved validation. An application may be able to break out of its sandbox. Recommendations:...

PT-2025-31303 · Apple · Macos Sequoia +5

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.6 tvOS versions prior to 18.6 macOS Sequoia versions prior to 15.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 Description: An out-of-bounds access issue exists due to insufficient bounds checking...

PT-2025-31300

Name of the Vulnerable Software and Affected Versions Safari affected versions not specified watchOS versions prior to 11.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 iPadOS version 17.7.9 tvOS versions prior to 18.6 macOS versions prior to Sequoia 15.6 visionOS versions prior to 2....

PT-2025-31159 · Apache · Apache Perl

Name of the Vulnerable Software and Affected Versions: Apache PERL affected versions not specified Description: An authenticated, read-only user can upload a file and perform a directory traversal to place the uploaded file in a location of their choosing. This can be used to overwrite existing...

PT-2025-31045 · Code Projects · Online Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Online Ordering System version 1.0 Description: A critical issue exists in code-projects Online Ordering System 1.0, specifically within the /admin/product.php file. The manipulation of the image argument allows for unrestricted...

PT-2025-31132 · Phpgurukul · Phpgurukul Online Library Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Library Management System version 3.0 Description: The software contains an improper session invalidation issue in the /library/change-password.php component. This allows attackers to execute a session hijacking attack...

BELL-CVE-2025-38362

Bulletin has no description...

CVE-2025-7001

GitLab CE/EE is affected by CVE-2025-7001: versions 15.0–before 18.0.5, 18.1–before 18.1.3, and 18.2–before 18.2.1 expose a vulnerability where privileged users can access certain resource_group information via the API that should be unavailable. Root cause: insufficient access control granularit...

PT-2025-30666 · 2Fauth · 2Fauth

Name of the Vulnerable Software and Affected Versions: 2FAuth version 5.5.0 Description: A group deletion race condition can lead to data inconsistencies and orphaned accounts when a group is deleted while other operations are in progress. Recommendations: At the moment, there is no information...