PT-2025-4103

Name of the Vulnerable Software and Affected Versions Python affected versions not specified Description The issue concerns the Python standard library functions urllib.parse.urlsplit and urlparse accepting domain names with square brackets, which is not valid according to RFC 3986. Square bracke...

CVE-2025-0290

Removed by vendor...

BIT-GITLAB-2025-0314 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.6.4, 17.7 before 17.7.3, and 17.8 before 17.8.1. Improper rendering of certain file types lead to cross-site scripting...

PT-2025-11550 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.3 macOS versions prior to 14.7.3 macOS versions prior to 15.3 Description: An out-of-bounds write issue was addressed with improved input validation. Parsing a maliciously crafted file may lead to an unexpected ap...

CVE-2025-0708

CVE-2025-0708 affects fumiao opencms 2.2. The vulnerability is in the /admin/model/addOrUpdate endpoint, where manipulating the parameter 模板前缀 can trigger cross-site scripting. Exploitation is possible remotely and publicly disclosed. Connected sources confirm the affected component and the root ...

PT-2025-5529 · Wow Company · Counter Box

Name of the Vulnerable Software and Affected Versions: Wow-Company Counter Box versions 2.0.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's behalf. Recommendations: For versions 2.0.5 and...

CVE-2025-23774

Insertion of Sensitive Information Into Sent Data vulnerability in Niket Joshi WPDB to Sql wpdb-to-sql allows Retrieve Embedded Sensitive Data.This issue affects WPDB to Sql: from n/a through = 1.2...

Magma 代码问题漏洞

Magma is an open source software platform from Magma Open Source. An open, flexible and scalable mobile core network solution for network operators. A code issue vulnerability exists in Magma 1.8.0 and prior versions, which stems from the fact that the absence of the mandatory NASPDU field in the...

PT-2025-27980

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A divide by zero issue has been resolved in the Linux kernel. The problem occurs when dummy values in the populate dummy dml surface cfg function are not updated, leading to a divide b...

PT-2025-13358 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the thermal core in the Linux kernel, where put device is called before device register fails. The function thermal cooling device register does not follow this...

BIT-PHP-MIN-2022-31630 OOB read due to insufficient input validation in imageloadfont()

In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar function, the read outside allocated buffer will be used. This can lead to crashes or...

Vulnerabilities in Permission Issues in Various Apple Products

macOS is a set of operating systems developed by Apple to run on the Macintosh family of computers. iPhone OS is an operating system developed by Apple for the iPhone and iPod touch. watchOS is a set of watch operating systems developed by Apple for use with the Apple Watch based on iOS. iPadOS i...

CVE-2024-13041

Removed by vendor...

PT-2025-1844 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 15.5 through 17.5.5 GitLab CE/EE versions 17.6 through 17.6.3 GitLab CE/EE versions 17.7 through 17.7.1 Description: An issue was discovered in GitLab CE/EE where unauthorized users could manipulate the status of issues ...

CVE-2025-22520

Cross-Site Request Forgery CSRF vulnerability in Tock Tock Widget tock-widget allows Cross Site Request Forgery.This issue affects Tock Widget: from n/a through = 1.1...

CVE-2025-22511

CVE-2025-22511 is an authenticated Stored Cross‑Site Scripting (XSS) vulnerability in the WordPress plugin Slides & Presentations . The CVE entry, and corroborating Red Hat/ENISA material, identify the issue as an input handling problem that allows stored XSS for affected versions up to 0.0.39, w...

CVE-2024-56292

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevelop Email Reminders email-reminders allows Stored XSS.This issue affects Email Reminders: from n/a through = 2.0.5...

BELL-CVE-2024-56574

Bulletin has no description...

BELL-CVE-2024-53173

Bulletin has no description...

PT-2025-7463

Name of the Vulnerable Software and Affected Versions reiserfs affected versions not specified Description The issue is related to an integer overflow when handling symlinks, which may lead to a heap-based out-of-bounds write when reading data. Recommendations At the moment, there is no informati...