Ubuntu: Security Advisory (USN-7761-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7761-1 pam vulnerability

It was discovered that the PAM pamaccess module incorrectly parsed certain rules as hostnames. An attacker could possibly use this issue to spoof hostnames and bypass access restrictions...

PT-2025-38320

Name of the Vulnerable Software and Affected Versions kidaze CourseSelectionSystem versions prior to 42cd892b40a18d50bd4ed1905fa89f939173a464 Description A vulnerability exists in kidaze CourseSelectionSystem. The manipulation of the argument csem in an unknown function of the file...

HPESBNW04940 rev.1 - HPE Telco Intelligent Assurance, Multiple Vulnerabilities

Potential Security Impact: Local: Multiple Vulnerabilities; Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Intelligent Assurance 5.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-47621 |...

PT-2025-38239

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Discussion Forum version 1.0 Description: A vulnerability exists in PHPGurukul Online Discussion Forum that may allow remote attackers to inject SQL code. The issue is located in the /admin/edit member.php file, where...

PT-2025-38276

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Polling System version 1.0 Description: A weakness exists in SourceCodester Online Polling System 1.0 related to SQL injection within the /admin/positions.php file. Manipulation of the ID argument can trigger this issue,...

PT-2025-38225

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A SQL injection issue exists due to the manipulation of the email parameter within an unknown function of the /admin/index.php file. This allows for remote exploitation. The...

PT-2025-38224

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A flaw exists in SourceCodester Online Exam Form Submission that allows for unrestricted file upload. The issue is related to the manipulation of the img argument within the...

PT-2025-38154

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student File Management System version 1.0 Description: A SQL injection flaw exists in the /admin/delete student.php file due to manipulation of the stud id argument. This issue is remotely exploitable. The exploit has...

PT-2025-38070

Name of the Vulnerable Software and Affected Versions: Campcodes Grocery Sales and Inventory System version 1.0 Description: A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. The manipulation of the ID argument in the /ajax.php?action=save product file causes SQL injectio...

PT-2025-38084

Name of the Vulnerable Software and Affected Versions: Campcodes Grocery Sales and Inventory System version 1.0 Description: A cross site scripting issue exists in Campcodes Grocery Sales and Inventory System 1.0. The page argument in the /index.php?page=users file is susceptible to manipulation,...

PT-2025-38082

Name of the Vulnerable Software and Affected Versions: Campcodes Grocery Sales and Inventory System version 1.0 Description: A SQL injection issue exists in Campcodes Grocery Sales and Inventory System 1.0. Manipulation of the ID argument in the /ajax.php?action=delete receiving API endpoint can...

Linux Distros Unpatched Vulnerability : CVE-2021-32477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability site...

PT-2025-36526

Name of the Vulnerable Software and Affected Versions: itsourcecode Student Information Management System version 1.0 Description: A security flaw exists in itsourcecode Student Information Management System 1.0. The issue involves SQL injection stemming from the manipulation of the ID argument...

Akinsoft TaskPano 安全漏洞

Akinsoft TaskPano is a team task and project management platform from Akinsoft Turkey. A security vulnerability exists in Akinsoft TaskPano versions prior to s1.06.06, which stems from an improperly restricted authentication attempt that could lead to authentication bypass...

Linux Distros Unpatched Vulnerability : CVE-2025-26526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities. CVE-2025-265...

PT-2025-35903

Name of the Vulnerable Software and Affected Versions: appRain CMF version 4.0.5 Description: An SQL injection flaw exists in appRain CMF version 4.0.5. This flaw allows an attacker to retrieve, create, update, and delete the database through the data%5BAdmin%5D%5Busername%5D parameter in the...

CVE-2025-58202

Cross-Site Request Forgery CSRF vulnerability in Plugins and Snippets Simple Page Access Restriction simple-page-access-restriction allows Cross Site Request Forgery.This issue affects Simple Page Access Restriction: from n/a through = 1.0.32...

PT-2025-35299

Name of the Vulnerable Software and Affected Versions: code-projects Simple Grading System version 1.0 Description: A weakness exists in the Admin Panel component of code-projects Simple Grading System. The manipulation of the ID argument in the /edit student.php file causes SQL injection. This...

CVE-2025-58202 WordPress Simple Page Access Restriction Plugin <= 1.0.32 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Plugins and Snippets Simple Page Access Restriction simple-page-access-restriction allows Cross Site Request Forgery.This issue affects Simple Page Access Restriction: from n/a through = 1.0.32...