CVE-2025-7063

CVE-2025-7063 affects PAD CMS file upload: due to a client-controlled permission check parameter, an unauthenticated attacker can upload arbitrary files, which can then be executed to achieve Remote Code Execution. Impacts all three templates (www, bip, ww+bip). The product is End-Of-Life and pat...

PT-2025-39971

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The issue involves improper neutralization of input provided by an authorized user in the article positioning functionality, leading to Blind SQL Injection...

PT-2025-39963

Name of the Vulnerable Software and Affected Versions PAD CMS affected versions not specified Description The file upload functionality in PAD CMS allows an unauthenticated remote attacker to upload files of any type and extension without restriction. This is due to a client-controlled permission...

PT-2025-39964

Name of the Vulnerable Software and Affected Versions PAD CMS affected versions not specified Description The software’s photo upload functionality allows a remote attacker to upload files of any type and extension without restriction due to a client-controlled permission check parameter. This ca...

PT-2025-39967

Name of the Vulnerable Software and Affected Versions PAD CMS affected versions not specified Description The software utilizes weak client-side brute-force protection relying on cookies, specifically login count and login timeout. The attempt count and timeout information are not stored...

PT-2025-39966

Name of the Vulnerable Software and Affected Versions PAD CMS affected versions not specified Description The software improperly initializes a parameter used during the password recovery process. This allows an attacker to change the password for any user who has not utilized the password reset...

PT-2025-39968

Name of the Vulnerable Software and Affected Versions PAD CMS affected versions not specified Description The software is susceptible to a Cross-Site Request Forgery CSRF issue within the password reset functionality. A malicious actor could create a specially crafted website that, when visited b...

PT-2025-39965

Name of the Vulnerable Software and Affected Versions PAD CMS affected versions not specified Description PAD CMS is susceptible to Reflected Cross-Site Scripting XSS in the printing and save to PDF features. An attacker can create a specially crafted URL that, when opened by a user, leads to the...

Code-Projects Simple Scheduling System SQL注入漏洞

Simple Scheduling System is a simple scheduling system. Simple Scheduling System has a SQL injection vulnerability that originates from the starttime/endtime parameters in the /addtime.php file not being securely filtered. An attacker can exploit this vulnerability to execute malicious SQL comman...

Malicious code in e2e-test-server (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47654 Malicious code in e2e-test-server (npm)

--- -= Per source details. Do not edit below this line.=-...

ThreatsDay Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More

Welcome to this week’s Threatsday Bulletin —your Thursday check-in on the latest twists and turns in cybersecurity and hacking. The digital threat landscape never stands still. One week it’s a critical zero-day, the next it’s a wave of phishing lures or a state-backed disinformation push. Each...

ThreatsDay Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More

Welcome to this week's Threatsday Bulletin —your Thursday check-in on the latest twists and turns in cybersecurity and hacking. The digital threat landscape never stands still. One week it's a critical zero-day, the next it's a wave of phishing lures or a state-backed disinformation push. Each...

CVE-2025-47314

Memory corruption while processing data sent by FE driver...

Improper Access Control

contao/contao is vulnerable to Improper Access Control. The vulnerability is due to protected content elements rendered as fragments being indexed in the front-end search, which allows an attacker to access sensitive content publicly...

September 25, 2025—KB5066198 (OS Build 19045.6396) Preview

None None...

USN-7772-1 python-eventlet vulnerability

It was discovered that Eventlet incorrectly handled certain requests. An attacker could possibly use this issue to bypass front-end security controls, launch targeted attacks against active site users, and poison web caches...

CVE-2025-47314

Memory corruption while processing data sent by FE driver...

CVE-2025-47314 Improper Input Validation in Automotive Software platform based on QNX

Memory corruption while processing data sent by FE driver...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when processing data sent by the FE driver...