UBUNTU-CVE-2025-8736

A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclose...

CVE-2025-8735 GNU cflow Lexer c.c yylex null pointer dereference

A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to th...

CVE-2025-8735

A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to th...

CVE-2025-8734

A vulnerability has been found in GNU Bison up to 3.8.2. This impacts the function codefree of the file src/scan-code.c. The manipulation leads to double free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The actual existence of this...

CVE-2025-8665

A vulnerability, which was classified as critical, has been found in agno-agi agno up to 1.7.5. This issue affects the function MCPTools/MultiMCPTools in the library libs/agno/agno/tools/mcp.py of the component Model Context Protocol Handler. The manipulation of the argument command leads to os...

PT-2025-32418 · Unknown · Cesiumlab Web

Name of the Vulnerable Software and Affected Versions: CesiumLab Web versions prior to 4.1 Description: A critical vulnerability exists in CesiumLab Web. The issue affects unknown code within the /lodmodels/ file and allows for SQL injection through manipulation of the ID argument. This attack ca...

PT-2025-32409 · Unknown · Spring Actuator Interface +1

Name of the Vulnerable Software and Affected Versions: zlt2000 microservices-platform versions through 6.0.0 Description: A vulnerability exists in zlt2000 microservices-platform. The issue affects unknown code within the /actuator file of the Spring Actuator Interface component, leading to...

UBUNTU-CVE-2025-8586

A vulnerability, which was classified as problematic, was found in libav up to 12.3. This affects the function ffseekframebinary of the file /libavformat/utils.c of the component MPEG File Parser. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local...

CVE-2025-8584

A vulnerability in libav up to 12.3 affects av_buffer_unref in libavutil/buffer.c (AVI File Parser), causing a NULL pointer dereference. Local access is required. The exploit is publicly disclosed and has PROOF-OF-CONCEPT maturity. The bug affects products no longer maintained; no remediation det...

CVE-2025-8522

CVE-2025-8522 affects givanz Vvvebjs up to version 2.0.4, where a vulnerability in the node.js component allows path traversal via the File argument in the file /save.php. Remote exploitation is possible with high attack complexity; exploitability is reported as difficult, and a public exploit ex...

PT-2025-31773 · Code Projects · Human Resource Integrated System

Name of the Vulnerable Software and Affected Versions: code-projects Human Resource Integrated System version 1.0 Description: A critical vulnerability exists in code-projects Human Resource Integrated System 1.0, affecting some unknown processing of the file /insert-and-view/action.php...

CVE-2025-8494 code-projects Intern Membership Management System delete_student.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /admin/deletestudent.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

CVE-2025-8471

A vulnerability, which was classified as critical, has been found in projectworlds Online Admission System 1.0. This issue affects some unknown processing of the file /adminlogin.php. The manipulation of the argument aid leads to sql injection. The attack may be initiated remotely. The exploit ha...

PT-2025-32484 · Tenda · Tenda Ac20

Name of the Vulnerable Software and Affected Versions: Tenda AC20 version 16.03.08.05 Description: A critical vulnerability exists in Tenda AC20 version 16.03.08.05. The strcpy function within the /goform/SetFirewallCfg file is susceptible to a stack-based buffer overflow. This occurs through the...

CVE-2025-8436

A vulnerability was found in projectworlds Online Admission System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /viewdoc.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has be...

PT-2025-32494 · Linksys · Linksys Ea6500 +5

Name of the Vulnerable Software and Affected Versions: Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 versions up to 20250801 Description: A stack-based buffer overflow exists in the setLan function of the /goform/setLan file. The vulnerability is triggered by manipulating the...

PT-2025-32498 · Linksys · Linksys Re6250 +5

Name of the Vulnerable Software and Affected Versions: Linksys RE6250 versions prior to 20250801 Linksys RE6300 versions prior to 20250801 Linksys RE6350 versions prior to 20250801 Linksys RE6500 versions prior to 20250801 Linksys RE7000 versions prior to 20250801 Linksys RE9000 versions prior to...

CVE-2025-8407

A vulnerability, which was classified as critical, has been found in code-projects Vehicle Management 1.0. This issue affects some unknown processing of the file /filter2.php. The manipulation of the argument from leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-8343

A vulnerability was found in openviglet shio up to 0.3.8. It has been rated as critical. This issue affects the function shStaticFilePreUpload of the file shio-app/src/main/java/com/viglet/shio/api/staticfile/ShStaticFileAPI.java. The manipulation of the argument fileName leads to path traversal...

CVE-2025-8258

A vulnerability, which was classified as problematic, has been found in Cool Mo Maigcal Number App up to 1.0.3 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.sdmagic.number. The manipulation leads to improper export of android...