CVE-2024-58250

CVE-2024-58250 : The passprompt plugin in the PPP daemon (pppd) of PPP before 2.5.2 mishandles privileges, enabling local impact with high severity (CVSS v3.1: 9.3; Colonial: LOCAL, PRIVILEGES_REQUIRED=NONE, USER_INTERACTION=NONE; C,I,A all HIGH). Multiple advisories (Huawei EulerOS, EulerOS Virt...

PT-2025-17472 · Ppp +1 · Ppp +1

Name of the Vulnerable Software and Affected Versions: ppp versions prior to 2.5.2 Description: The passprompt plugin in pppd mishandles privileges. This issue affects versions of PPP prior to 2.5.2. Recommendations: For versions prior to 2.5.2, update to version 2.5.2 or later to resolve the...

CVE-2024-58250

The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges...

CVE-2024-58250

The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges...

PT-2025-17433 · Unknown · Soffid Console

Name of the Vulnerable Software and Affected Versions: Soffid Console versions 3.5.38 through 3.5.38 Soffid Console versions 3.6.31 through 3.6.31 Description: The issue is related to the mishandling of authorization to use the pam service in Soffid Console. Additionally, necessary checks were no...

LandChat 安全漏洞

LandChat is a simple, open source and lightweight chat system from LandChat Open Source. A security vulnerability exists in LandChat version 3.25.12.18, which stems from mishandling of the core application and could lead to the execution of system code by an unauthenticated attacker...

Personal Management System 安全漏洞

Personal Management System is a web application for managing personal data by Dariusz Personal Developer. A security vulnerability exists in Personal Management System version 1.4.65, which stems from mishandling of the my-contacts-settings component and could allow a remote attacker to obtain...

SourceCodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in SourceCodester Online ID Generator System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter template...

PeerTube 安全漏洞

PeerTube is a decentralized video sharing service platform open-sourced by Chocobozzz. It is used to create video projects. PeerTube suffers from a security vulnerability that stems from mishandling of ActivityPub activities, which could lead to denial of service or blind SSRF...

Oracle MySQL 安全漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation.MySQL Server is one of the database server components. A security vulnerability exists in Oracle MySQL's MySQL Server that stems from mishandling of the InnoDB component, which could lead to a...

My-Blog-layui 代码问题漏洞

My-Blog-layui is a blog system developed by ZHENFENG13. A code issue exists in My-Blog-layui version 1.0, the vulnerability stems from the wrong operation of the parameter File in the file /admin/upload/authorImg/, which leads to the upload of arbitrary files...

CVE-2025-31935

Subnet Solutions PowerSYSTEM Center is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the API may trigger an exception, resulting in a denial-of-service condition...

Juniper Networks Junos OS SRX和Juniper Networks Junos OS MX 安全漏洞

Juniper Networks Junos OS SRX and Juniper Networks Junos OS MX are both products of Juniper Networks, U.S.A. Juniper Networks Junos OS SRX is a network operating system that is specialized for the company's hardware devices. Juniper Networks Junos OS SRX is a network operating system designed for...

CVE-2025-32461

wikipluginincludetpl in lib/wiki-plugins/wikipluginincludetpl.php in Tiki before 28.3 mishandles input to an eval. The fixed versions are 21.12, 24.8, 27.2, and 28.3...

CVE-2025-32461

CVE-2025-32461 affects Tiki Wiki CMS Groupware prior to 28.3, via wikiplugin_includetpl.php in lib/wiki-plugins/wikiplugin_includetpl.php, which mishandles input to an eval and can enable remote code execution. Affected versions include 21.12-, 24.8-, 27.2-, and 28.0–28.3. Fixed versions are 21.1...

CVE-2025-32461

wikipluginincludetpl in lib/wiki-plugins/wikipluginincludetpl.php in Tiki before 28.3 mishandles input to an eval. The fixed versions are 21.12, 24.8, 27.2, and 28.3...

Code-Projects Online Restaurant Management System 安全漏洞

Code-Projects Online Restaurant Management System is a Code-Projects open source online restaurant management system. A security vulnerability exists in Code-Projects Online Restaurant Management System version 1.0, which stems from the mishandling of the parameter last in the /admin/membersave.p...

Consumer Comanda Mobile 安全漏洞

Consumer Comanda Mobile is a mobile ordering system from Consumer. A security vulnerability exists in Consumer Comanda Mobile versions 14.9.3.2 and earlier and 15.0.0.8 and earlier, which stems from mishandling of the parameter Login/Password in the restaurant order processing component, which...

iboot 安全漏洞

iboot is a general-purpose IoT gateway, industrial IoT gateway system by iteaj individual developer. A security vulnerability exists in iboot version 1.1.3, which stems from the mishandling of the parameter File in the file upload component /common/upload/batch, which could lead to a cross-site...

CVE-2025-30401

CVE-2025-30401 affects WhatsApp for Windows prior to version 2.2450.6. The issue is a spoofing vulnerability where attachments are displayed by MIME type but opened using a handler chosen from the attachment’s filename extension, enabling a malicious file to execute arbitrary code when a user man...