What needs attention now.

NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request

• netbox-community devicetype-library
• Insecure deserialization
• CWE-829

SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth)

• HappySeaFox sail
• Memory corruption

SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)

• HappySeaFox sail
• Memory corruption

Obsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user

• jimprosser obsidian-web-mcp
• Authentication bypass
• Hard-coded credentials

Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python

• AWSIoTPythonSDK
• Weak cryptography or TLS

Many Notes: Path Traversal via ZIP import allows arbitrary file write and stored XSS in other users' vaults

• brufdev many-notes
• Path traversal

RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr

• CWE-754

<1.13.0 · fixed in 1.13.0

RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow

• Memory corruption

<1.13.0 · fixed in 1.13.0

RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

• Weak cryptography or TLS
• CWE-316

<1.13.0 · fixed in 1.13.0

xfrm: Fix skb double-free in xfrm_dev_direct_output()

• Linux kernel

IB/isert: reject PDUs declaring more data than was received

• Linux kernel

IB/isert: reject login PDUs declaring more data than was received

• Linux kernel

sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE

• Linux kernel

nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()

• Linux kernel

smb: smbdirect: free completion queues with ib_free_cq()

• Linux kernel

NFSv4: remove callback IDR entry on client allocation failure

• Linux kernel

inetpeer: randomize RB-tree node comparison using SipHash

• Linux kernel

NFSv4.1: zero referring call lists before decoding

• Linux kernel

pgAdmin 4: Authentication bypass via a client-controlled identity header in Webserver authentication mode

• pgadmin.org pgAdmin 4
• Authentication bypass
• CWE-807

dynamic_oidc identities are not namespaced by connection in ash_authentication, allowing cross-connection account takeover

• Authentication bypass

>=5.0.0-rc.10, <5.0.0-rc.14 · fixed in 5.0.0-rc.14

b2evolution CMS 6.7.8 through 7.2.5 Object Injection via Negative Integer Array Key

• b2evolution CMS
• Insecure deserialization

Marten's LINQ provider has SQL injection via unescaped string literals

• SQL injection

>=7.0.0, <8.37.4 || >=9.0.0, <9.13.0 · fixed in 8.37.4, 9.13.0

Vendure affected by external-authentication account takeover: external login linked to a pre-existing account by email without verification

• Authentication bypass

<3.7.0 · fixed in 3.7.0

OAuth2 sign-in attached to an existing account without an email comparison in AshAuthentication

• Authentication bypass

>=4.14.0, <4.15.0 || >=5.0.0-rc.10, <5.0.0-rc.14 · fixed in 4.15.0, 5.0.0-rc.14

WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability

• miniOrange Headless Single Sign On
• Authentication bypass

WordPress Migratico Lite plugin <= 2.6.8 - Remote Code Execution (RCE) vulnerability

• superweby Migratico Lite
• Code injection

WordPress EduAdmin Booking plugin <= 5.4.2 - Broken Authentication vulnerability

• Chris Åkerfeldt Wendel EduAdmin Booking
• Authentication bypass

`require_confirmed_with` is not enforced on the action and fails open on an unreadable attribute in AshAuthentication

• CWE-305

>=4.3.8, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14 · fixed in 4.15.0, 5.0.0-rc.14

Revoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication Phoenix

• Authentication bypass

>=4.9.1, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14 · fixed in 4.15.0, 5.0.0-rc.14

Magic link single-use tokens replayable via TOCTOU race in AshAuthentication

• Race condition

>=3.9.0, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14 · fixed in 4.15.0, 5.0.0-rc.14

rcourtman Pulse Quick Security Setup quick-setup fmt.Sprintf input validation

• rcourtman Pulse
• CWE-20

Stack-based buffer overflow in FatPipe Networks MPVPN and others

• FatPipe Networks MPVPN
• FatPipe Networks WARP
• Memory corruption

OS command injection in FatPipe Networks MPVPN and others

• FatPipe Networks MPVPN
• FatPipe Networks WARP
• Command injection

AVideo Weak PRNG Activation Code Authentication Bypass

• WWBN AVideo
• Weak cryptography or TLS

Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting

• Mitsubishi Electric Corporation GX Works3
• Mitsubishi Electric Corporation Motion Control Setting
• Authentication bypass

wpShopGermany IT-RECHT KANZLEI < 2.4 - Unauthenticated RCE via Predictable API Token

• wpShopGermany IT-RECHT KANZLEI
• Code injection

Login with QR <= 1.0.0 - Unauthenticated Authentication Bypass via 'autologin_code' Parameter

• Login with QR
• Authentication bypass

The Pressengine <= 1.0 - Unauthenticated Authentication Bypass

• The Pressengine
• Authentication bypass

Private Feed Key <= 0.1 - Unauthenticated Authentication Bypass via 'feedkey' Parameter

• Private Feed Key
• Authentication bypass

Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload

• sh1zen Multi Uploader for Gravity Forms
• Unrestricted file upload

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.

• SQL injection

djust has an authorization bypass on the WebSocket/SSE mount path

• Authentication bypass
• Broken access control

<1.0.7 · fixed in 1.0.7

WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash

• WWBN AVideo
• Authentication bypass

HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool

• HKUDS nanobot
• Server-side request forgery (SSRF)

Decap CMS < 3.11.0 Path Traversal via Sibling Directory Prefix Matching

• decaporg decap-cms
• Path traversal

UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard

• uvdesk community-skeleton
• Authentication bypass

Feast through 0.66.0 Authentication Bypass via Unverified Token

• feast
• Hard-coded credentials

Angel through 3.3.0 Unauthenticated Kryo Deserialization of Arbitrary Classes

• angel
• Insecure deserialization

SafeLine through 9.4.1 Authentication Bypass via Weak Session Secret

• chaitin SafeLine
• Weak cryptography or TLS

Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability

• Cisco Identity Services Engine Software
• Other injection

Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities

• Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
• Cisco Secure Firewall Management Center (FMC)
• Broken access control

Cisco Identity Services Engine Authentication Bypass Vulnerability

• Cisco Identity Services Engine Software
• Cisco ISE Passive Identity Connector
• CWE-648

Cisco Identity Services Engine Remote Code Execution Vulnerability

• Cisco Identity Services Engine Software
• Command injection

Cisco Secure Firewall Management Center Software sftunnel Deserialization Root Command Execution Vulnerability

• Cisco Secure Firewall Management Center (FMC)
• Insecure deserialization

Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

• Cisco Secure Firewall Management Center (FMC)
• Insecure deserialization

Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities

• Cisco Identity Services Engine Software
• Cisco ISE Passive Identity Connector
• CWE-20

Cisco ISE API Authentication Bypass Vulnerability

• Cisco Identity Services Engine Software
• Cisco ISE Passive Identity Connector
• Authentication bypass

Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities

• Cisco Identity Services Engine Software
• Cisco ISE Passive Identity Connector
• Other injection

Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities

• Cisco Identity Services Engine Software
• Cisco ISE Passive Identity Connector
• Broken access control

Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerability

• Cisco Secure Firewall Management Center (FMC)
• Broken access control