CVE-2025-53111 GLPI exposes data to non-allowed users

GLPI is a Free Asset and IT Management Software package. In versions 0.80 through 10.0.18, a lack of permission checks can result in unauthorized access to some resources. This is fixed in version 10.0.19...

CVE-2025-31278

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iPadOS 17.7.9, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-53541

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1751892857 and Tuleap Enterprise Edition prior to 16.8-5 and 16.9-3, malicious users with some control over certain artifacts could inser...

CVE-2025-52899 Tuleap vulnerable to user enumeration via the lost password form

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1750843170 and Tuleap Enterprise Edition prior to 16.8-4 and 16.9-2, the forgot password form allows for user enumeration. This is fixed ...

BELL-CVE-2025-38490

Bulletin has no description...

GO-2025-3773 Ackites KillWxapkg vulnerable to OS Command Injection in github.com/Ackites/KillWxapkg

Ackites KillWxapkg vulnerable to OS Command Injection in github.com/Ackites/KillWxapkg...

BELL-CVE-2025-38462

Bulletin has no description...

BELL-CVE-2025-38428

Bulletin has no description...

BELL-CVE-2025-38365

Bulletin has no description...

BELL-CVE-2025-38354

Bulletin has no description...

BELL-CVE-2025-38364

Bulletin has no description...

CVE-2025-52448

creationtimestamp| type| source ---|---|--- 2025-07-25 19:17:35+00:00| seen| https://bsky.app/profile/potato.software/post/3lusr7pomqq2r...

CVE-2025-38445 md/raid1: Fix stack memory use after return in raid1_reshape

In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix stack memory use after return in raid1reshape In the raid1reshape function, newpool is allocated on the stack and assigned to conf-r1biopool. This results in conf-r1biopool.wait.head pointing to a stack address...

SQL Injection

github.com/uptrace/bun is vulnerable to SQL injection. The vulnerability is due to improper handling of SQL arguments in the appendArg function in /pgdriver/format.go, which allows an attacker to inject arbitrary SQL commands...

files-bucket-server vulnerable to Directory Traversal

All versions of the package files-bucket-server are vulnerable to Directory Traversal, where an attacker can traverse the file system and access files outside of the intended directory...

BELL-CVE-2025-38352

Bulletin has no description...

CVE-2025-46267

creationtimestamp| type| source ---|---|--- 2025-07-22 11:28:42+00:00| seen| https://bsky.app/profile/potato.software/post/3lukfmj5wea2g 2025-07-22 15:10:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lukrzkcnav2h...

GO-2025-3765 SQL injection vulnerability in github.com/uptrace/bun/driver/pgdriver

SQL injection vulnerability in github.com/uptrace/bun/driver/pgdriver...

GHSA-MQCP-P2HV-VW6X Withdrawn Advisory: Thor can construct an unsafe shell command from library input.

Withdrawn Advisory This advisory has been withdrawn because the method described can only be used with arguments that are controlled by Thor, and an external attacker cannot access the functionality described in the body of the CVE. This link is maintained to preserve external references. Origina...

CVE-2025-7865 thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting

A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been declared as problematic. This vulnerability affects the function xssFilter of the file src/main/java/com/jeesite/common/codec/EncodeUtils.java of the component XSS Filter. The manipulation of the argument text leads to cross...