CVE-2025-5946

Centreon Infra Monitoring has a high-severity OS Command Injection vulnerability (CVE-2025-5946) affecting the poller reload feature. A user with high privileges on the Centreon Web UI can inject commands via the broker engine reload parameter, triggering potential remote code execution. Public d...

CVE-2025-5946 RCE via the poller reload feature available only to user with high privilege

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Centreon Infra Monitoring Poller reload setup in the configuration modules allows OS Command Injection. On the poller parameters page, a user with high privilege is able to concatenate custom...

EUVD-2025-34208

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Centreon Infra Monitoring Poller reload setup in the configuration modules allows OS Command Injection. On the poller parameters page, a user with high privilege is able to concatenate custom...

CVE-2025-5946 RCE via the poller reload feature available only to user with high privilege

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Centreon Infra Monitoring Poller reload setup in the configuration modules allows OS Command Injection. On the poller parameters page, a user with high privilege is able to concatenate custom...

CVE-2025-42909

CVE-2025-42909 (SAP Cloud Appliance Library Appliances) : A high-privilege attacker can exploit an insecure S/4HANA default profile setting in existing SAP CAL appliances to access other appliances. The impact is described as low for confidentiality with no impact on integrity or availability. Th...

Medium: polkit

Issue Overview: A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be triggered. This issue can lead to a crash or other unexpected behavior, and arbitrary code execution is not discarded. To exploit this flaw, a...

PT-2025-41936

Name of the Vulnerable Software and Affected Versions Centreon Infra Monitoring versions 23.10.0 through 23.10.28 Centreon Infra Monitoring versions 24.04.0 through 24.04.18 Centreon Infra Monitoring versions 24.10.0 through 24.10.13 Description A flaw exists in Centreon Infra Monitoring related ...

PT-2025-42200

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript ma...

PT-2025-42198

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.4 through 2.4.9-alpha2 Description A stored Cross-Site Scripting XSS issue exists in Adobe Commerce that could allow a high-privileged attacker to inject malicious scripts into vulnerable form fields. Successful...

EulerOS 2.0 SP11 : polkit (EulerOS-SA-2025-2208)

According to the versions of the polkit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be triggered. This...

CVE-2025-60306

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations...

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...

PT-2025-41577

Name of the Vulnerable Software and Affected Versions code-projects Simple Car Rental System version 1.0 Description A permission bypass issue exists that allows low privilege users to forge high privilege sessions and perform sensitive operations. Recommendations At the moment, there is no...

PT-2025-41574

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0 Description The application has a flaw in access control. This allows users with limited privileges to create sessions with higher privileges and perform actions that should be...

EUVD-2025-33745

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations...

CVE-2025-60306

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations...

CVE-2025-60306

CVE-2025-60306 affects Code-Projects’ Simple Car Rental System 1.0. The issue is a permission bypass where a low-privilege user can forge and obtain high-privilege sessions to perform sensitive operations. Metrics assign a CRITICAL 9.9 CVSS v3.1 score with network exploitability, low attack compl...

EUVD-2025-32909

Malicious code in v0-utils npm...

CVE-2025-36567

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...

EUVD-2025-32902

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain a Stack-based Buffer...