2025

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value,

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-c

An issue in the component /models/config.py of Whoogle search v0.9.0 allows attackers to execute arbitrary code via supp

An issue in LRQA Nettitude PoshC2 after commit 09ee2cf allows unauthenticated attackers to connect to the C2 server and

A remote code execution (RCE) vulnerability in the upload_file function of LRQA Nettitude PoshC2 after commit 123db87 al

Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page: *.*.

Vulnerability in Drupal Google Optimize.This issue affects Google Optimize: *.*.

Vulnerability in Drupal Google Maps: Store Locator.This issue affects Google Maps: Store Locator: *.*.

Vulnerability in Drupal Simple GTM.This issue affects Simple GTM: *.*.

Vulnerability in Drupal Panelizer (obsolete).This issue affects Panelizer (obsolete): *.*.

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal baguetteBox

Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to properly enforce the 'Allow users to vi

A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generat

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template p

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id paramet

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_ge

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_ge

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generat

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id paramet

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that c

A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, re

A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts

In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL.

Server-Side Request Forgery (SSRF) vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat (incubating):

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Managemen

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Thi

A vulnerability classified as critical has been found in SourceCodester Web-based Pharmacy Product Management System 1.0

In the Linux kernel, the following vulnerability has been resolved: watch_queue: fix pipe accounting mismatch Currentl

In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: Add missing NULL ptr check in a

In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Teardown riscv specific bits after kvm

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Don't take register_mutex with copy_fr

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: update channel list in reg notifier i

In the Linux kernel, the following vulnerability has been resolved: f2fs: quota: fix to avoid warning in dquot_writebac

In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to e