CVE-2025-47293

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to version 6.7.2, in certain places, powsybl-core XML parsing is vulnerable to an XML external entity XXE attack and to a server-side request forgery SSRF attack. This allows an attacker to elevate their...

Path Traversal

DotVVM is vulnerable to Path Traversal. The vulnerability is due to insufficient input validation allowing the attacker to access the arbitrary files when a FileResourceLocation is used and the application is running in Debug mode...

Path Traversal

pythona2a is vulnerable to Path traversal. The vulnerability is due to improper validation or sanitization of user-supplied file paths in the createworkflow function, allows an attacker to access arbitrary files on the server by crafting malicious input that traverses directories...

sslh 后置链接漏洞

sslh is an application protocol multiplexer by the individual developer Yves Rutschle. A backlink vulnerability exists in versions prior to sslh 2.2.2, which stems from improper link resolution before file access...

CVE-2025-48026

The CVE-2025-48026 entry applies to Mitel OpenScape Xpressions WebApl component (through V7R1 FR5 HF43 P913). It describes an unauthenticated path traversal due to insufficient input validation, allowing reading of arbitrary files on the underlying OS and exposure of sensitive information. Affect...

Exploit for PHP Remote File Inclusion in Wpplugins Hide_My_Wp_Ghost

CVE-2025-26909 Vulnerability Scanner A Python-based scanner a...

PT-2025-26551 · Unknown · Code-Projects School Fees Payment System

Name of the Vulnerable Software and Affected Versions: code-projects School Fees Payment System version 1.0 Description: A problematic issue was found in the code-projects School Fees Payment System, affecting an unknown part of the file /fees.php. The manipulation of the transcation remark...

CVE-2025-6218

CVE-2025-6218 affects WinRAR and enables directory traversal during archive extraction, allowing code execution in the user context. Public PoCs and exploits (GitHub) demonstrate placing payloads into sensitive locations (e.g., Startup folder) to achieve RCE. Affected versions are WinRAR ≤ 7.11; ...

PT-2025-26510 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: A critical issue was found in the PHPGurukul Art Gallery Management System. The problem is related to an unknown function in the file /admin/edit-art-medium-detail.php, where t...

PT-2025-26507 · Unknown · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /user-login.php. The manipulation of the Username argument leads to SQL injection. It is...

PT-2025-26513 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/changepropic.php. The manipulation of the imageid argument leads to SQL...

PT-2025-26518 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: A critical issue has been found in the PHPGurukul Art Gallery Management System. This issue affects some unknown processing of the file /admin/changeimage3.php. The manipulatio...

CVE-2025-34023 Karel IP Phone IP1211 Path Traversal

A path traversal vulnerability exists in the Karel IP1211 IP Phone's web management panel. The /cgi-bin/cgiServer.exx endpoint fails to properly sanitize user input to the page parameter, allowing remote authenticated attackers to access arbitrary files on the underlying system by using crafted...

CVE-2025-34022 Selea Targa IP OCR-ANPR Camera Path Traversal

A path traversal vulnerability exists in multiple models of Selea Targa IP OCR-ANPR cameras, including iZero, Targa 512, Targa 504, Targa Semplice, Targa 704 TKM, Targa 805, Targa 710 INOX, Targa 750, and Targa 704 ILB. The /common/getfile.php script in the “Download Archive in Storage” page fail...

CVE-2024-53298

Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export. An unauthenticated attacker with remote access could potentially exploit this vulnerability leading to unauthorized filesystem access. The attacker may be able to read,...

CVE-2024-53298

Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export. An unauthenticated attacker with remote access could potentially exploit this vulnerability leading to unauthorized filesystem access. The attacker may be able to read,...

PT-2025-26428 · Sourcecodester · Sourcecodester Advance Charity Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Advance Charity Management System version 1.0 Description: A critical issue was found in the SourceCodester Advance Charity Management System, affecting an unknown part of the file /members/fundDetails.php. The manipulation of...

PT-2025-26442 · Itsourcecode · Itsourcecode Employee Record Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Record Management System version 1.0 Description: A critical issue affects the processing of the file /editprofile.php. The manipulation of the emp1name argument leads to SQL injection. The attack may be initiated...

PT-2025-26466 · Unknown · Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Simple Pizza Ordering System version 1.0 Description: A critical issue was found in the Simple Pizza Ordering System. The manipulation of the userid argument in the file /adds.php leads to SQL injection. This issue can be initiated remotely...

PT-2025-26268 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue was found in the PHPGurukul Employee Record Management System. The problem affects the file /admin/editempeducation.php, where the manipulation of the yopg...