CVE Alert: CVE-2025-30005
Vulnerability Summary: CVE-2025-30005 Xorcom CompletePBX is vulnerable to a path traversal via the Diagnostics reporting module, which will allow reading...
Vulnerability Summary: CVE-2025-30005 Xorcom CompletePBX is vulnerable to a path traversal via the Diagnostics reporting module, which will allow reading...
Vulnerability Summary: CVE-2025-30004 Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to...
Vulnerability Summary: CVE-2025-3001 A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The...
Vulnerability Summary: CVE-2025-30368 Zulip is an open-source team collaboration tool. The API for deleting an organization export is supposed to...
Vulnerability Summary: CVE-2025-30223 Beego is an open-source web framework for the Go programming language. Prior to 2.3.6, a Cross-Site Scripting...
Vulnerability Summary: CVE-2025-31116 Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static...
Vulnerability Summary: CVE-2025-30369 Zulip is an open-source team collaboration tool. The API for deleting an organization custom profile field is...
Vulnerability Summary: CVE-2025-30006 Xorcom CompletePBX is vulnerable to a reflected cross-site scripting (XSS) in the administrative control panel. This issue...
Vulnerability Summary: CVE-2025-3003 A vulnerability, which was classified as critical, was found in ESAFENET CDG 3. Affected is an unknown...
Vulnerability Summary: CVE-2025-3005 A vulnerability was found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this...
Vulnerability Summary: CVE-2025-3006 A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This...
Vulnerability Summary: CVE-2025-31125 Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or...
Vulnerability Summary: CVE-2025-3004 A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by...
Vulnerability Summary: CVE-2025-29908 Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was...
Vulnerability Summary: CVE-2025-21893 In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in key_put() Once a...
Vulnerability Summary: CVE-2025-3007 A vulnerability was found in Novastar CX40 up to 2.44.0. It has been rated as critical. This...
Vulnerability Summary: CVE-2025-3008 A vulnerability classified as critical has been found in Novastar CX40 up to 2.44.0. Affected is the...
Vulnerability Summary: CVE-2025-31129 Jooby is a web framework for Java and Kotlin. The pac4j io.jooby.internal.pac4j.SessionStoreImpl#get module deserializes untrusted data. This...
Vulnerability Summary: CVE-2025-31123 Zitadel is open-source identity infrastructure software. A vulnerability existed where expired keys can be used to retrieve...
Vulnerability Summary: CVE-2025-3009 A vulnerability classified as critical was found in Jinher Network OA C6. Affected by this vulnerability is...
Vulnerability Summary: CVE-2025-3010 A vulnerability, which was classified as problematic, has been found in Khronos Group glslang 15.1.0. Affected by...
Vulnerability Summary: CVE-2025-31124 Zitadel is open-source identity infrastructure software. ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which...
Vulnerability Summary: CVE-2024-24456 An E-RAB Release Command packet containing a malformed NAS PDU will cause the Athonet MME to immediately...
Vulnerability Summary: CVE-2025-3017 A vulnerability, which was classified as critical, has been found in TA-Lib up to 0.6.4. This issue...