PT-2026-123319

Interpretation Conflict vulnerability in hackney url in benoitc hackney allows Server Side Request Forgery via a percent-encoded bracketed IPv6 literal or an IP literal with a trailing dot. A host such as %5B%3A%3Affff%3A127%2E0%2E0%2E1%5D decoding to ::ffff:127.0.0.1 or 127.0.0.1. is not an IP...

PT-2026-123620

TuxCare rebuilt send to address 1 CVE. Fixed in 0.1.1-tuxcare.1...

PT-2026-121727

TuxCare rebuilt send to address 1 CVE. Fixed in 0.17.2-tuxcare.1...

PT-2026-121716

TuxCare rebuilt send to address 1 CVE. Fixed in 0.18.0-tuxcare.1...

PT-2026-75511

TuxCare rebuilt connect to address 1 CVE. Fixed in 2.12.0-tuxcare.1...

Car Rental Script Cross-site Script Vulnerability

Car Rental Script is an open source vehicle rental script from GZ Script. GZ Script Car Rental Script version 1.8 cross-site scripting vulnerability , the vulnerability stems from the parameter firstname/secondname/phone/address1/country cross-site scripting XSS vulnerability...

GZ Scripts Event Booking Calendar Cross-Site Script Vulnerability

GZ Scripts Event Booking Calendar is an event booking calendar application from GZ Scripts. A cross-site scripting vulnerability exists in GZ Scripts Event Booking Calendar version 1.8, which stems from cross-site scripting due to incorrect manipulation of the parameters firstname, secondname,...

GZScripts PHP GZ Hotel Booking Script – Cross-site Script Vulnerability

GZScripts is a script from GZScripts Inc. A cross-site scripting vulnerability exists in GZScripts PHP GZ Hotel Booking Script version 1.8, which stems from cross-site scripting due to incorrect manipulation of the parameters firstname, secondname, phone, address1, and country...

Time Slot Booking Calendar PHP Cross-Site Script Vulnerability

Time Slot Booking Calendar PHP is a GZ Scripts open source time booking calendar system . GZ Scripts Time Slot Booking Calendar PHP version 1.8 cross-site scripting vulnerability , the vulnerability stems from the file /load.php parameters firstname/secondname/phone/address1/country will lead to...

can override a marketplace

Lines of code Vulnerability details Impact There is no check if there is a market place in the m address and we can override all of the exist market places. Proof of Concept function setMarketPlaceaddress m external authorizedadmin returns bool if marketPlace != address0 revert ExistsmarketPlace;...

PT-2022-28695

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue concerns the reliability of builtin frame address1 in the riscv architecture. It was introduced in version v5.13 and fixed in version v5.15.24. The actual impact and attack...

PT-2022-28772

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.9 Description The issue concerns the reliability of builtin frame address1 in the riscv architecture. It was introduced in version v5.13 and fixed in version v5.16.10. The actual impact and attack...

PT-2018-12572

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Basic B2B Script version 2.0.0 Description The issue concerns Reflected and Stored XSS that can be triggered via specific fields, including First name, Last name, Address 1, City, State, and Company name. Recommendations For P...

CVE-2018-14541: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields...

ntp: drop packets with source address ::1

It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by spoofing ::1 addresses...