PT-2025-27634 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase versions prior to 2.10.11 Description: DataEase is an open source business intelligence and data visualization tool. The issue lies in parameters like sslfactory and sslfactoryarg, which have similar functionality to socketfactory an...

PT-2025-27005

Name of the Vulnerable Software and Affected Versions: Himmelblau versions 0.9.10 through 0.9.16 Description: A vulnerability in Himmelblau allows a user to authenticate to a Linux host using an invalid Linux Hello PIN when the host is offline. This issue arises from an incorrect assumption in th...

PT-2025-26981 · Unknown · Labredescefetrj Wegia

Name of the Vulnerable Software and Affected Versions: LabRedesCefetRJ WeGIA version 3.4.0 Description: A vulnerability was found in the Cadastro de Atendio component, specifically in the file /html/atendido/Cadastro Atendido.php. The manipulation of the Nome/Sobrenome argument leads to cross-sit...

PT-2025-26988 · Unknown · Labredescefetrj Wegia

Name of the Vulnerable Software and Affected Versions: LabRedesCefetRJ WeGIA version 3.4.0 Description: A problematic vulnerability has been found in the Cadastro de Funcionário component, specifically affecting the /html/funcionario/cadastro funcionario.php file. The issue is related to the...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation via the machine init process. An attacker can intercept or manipulate data in transit by performing a man-in-the-middle attack during the download of VM images from an OCI registry. Workaround This...

CVE-2025-52894 OpenBao Vulnerable to Unauthenticated Rekey Operation Cancellation

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 allowed an attacker to perform unauthenticated, unaudited cancellation of root rekey and recovery rekey operations, effecting a denial of...

CVE-2025-52894

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 allowed an attacker to perform unauthenticated, unaudited cancellation of root rekey and recovery rekey operations, effecting a denial of...

CVE-2025-52569 GitHub.jl lacks validation for user-provided fields

GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 5.9.1 lack input validation of input validation for user-provided values in certain functions. In the GitHub.repo function, the user can provide any string for the reponame field. These inputs are not validate...

PT-2025-28084 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical vulnerability has been found in the function formConnectionSetting of the file /goform/formConnectionSetting of the component webs. The manipulation of the argument max Conn/timeOut leads...

PT-2025-26880 · Unknown +1 · Berkeley-Abc +1

Name of the Vulnerable Software and Affected Versions: berkeley-abc version 1.1 Description: The issue is related to a Null Pointer Dereference NPD vulnerability in the Abc NtkCecFraigPart function of the data processing module. This leads to unpredictable program behavior, causing segmentation...

PT-2025-28076 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical issue was found, affecting the function formBSSetSitesurvey of the file /goform/formBSSetSitesurvey in the component webs. The manipulation of the arguments wan ipaddr, wan netmask, wan...

PT-2025-28079 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical issue affects the function formiNICWpsStart of the file /goform/formiNICWpsStart in the webs component. The manipulation of the pinCode argument leads to a stack-based buffer overflow. Th...

PT-2025-28074 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical issue has been found, affecting the function formSetWanStatic of the file /goform/formSetWanStatic in the component webs. The manipulation of the arguments m wan ipaddr, m wan netmask, m...

PT-2025-28088 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical issue affects the function formBSSetSitesurvey of the file /goform/formBSSetSitesurvey in the component webs. The manipulation of the argument submit-url-ok leads to a stack-based buffer...

PT-2025-28087 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical vulnerability has been found, affecting the function formSetLanguage of the file /goform/formSetLanguage in the component webs. The manipulation of the argument webpage leads to a...

PT-2025-28085 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical issue has been found in the function formWlanMP of the file /goform/formWlanMP of the component webs. The manipulation of the arguments ateFunc, ateGain, ateTxCount, ateChan, ateRate,...

PT-2025-28082 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical vulnerability was found in the formPPPoESetup function of the webs component. The manipulation of the pppUserName argument leads to a stack-based buffer overflow. This issue can be...

PT-2025-26838 · Unknown · Gitforge.Jl

Name of the Vulnerable Software and Affected Versions: GitForge.jl versions prior to 0.4.3 Description: The issue is related to a lack of input validation for user-provided values in certain functions. Specifically, in the GitForge.get repo function for GitHub, the owner and repo fields can be...

PT-2025-26864 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical vulnerability has been found in the D-Link DIR-619L, affecting the function formSetWAN Wizard51 of the file /goform/formSetWAN Wizard51. The manipulation of the argument curTime leads to...

PT-2025-28077 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical issue has been found in the Belkin F9K1122, affecting the function mp of the file /goform/mp of the component webs. The manipulation of the argument command leads to os command injection...