CVE-2025-12853

The CVE-2025-12853 issue affects SourceCodester Best House Rental Management System version 1.0, specifically the delete_house function in /admin_class.php. A manipulation of the ID parameter enables SQL injection, with remote exploitability and publicly disclosed exploits. Multiple feeds corrobo...

PT-2025-45425

Name of the Vulnerable Software and Affected Versions DedeBIZ versions up to 6.3.2 Description A flaw exists in DedeBIZ that allows for remote SQL injection. The issue is located in the /admin/freelist main.php file, within an unknown function. Manipulating the orderby argument can trigger the...

PT-2025-45423

Name of the Vulnerable Software and Affected Versions code-projects Responsive Hotel Site version 1.0 Description A security issue exists in code-projects Responsive Hotel Site 1.0. Manipulation of the rid argument in an unknown function within the /admin/roombook.php file can lead to SQL...

PT-2025-45476

Name of the Vulnerable Software and Affected Versions Campcodes School File Management version 1.0 Description A security flaw exists in Campcodes School File Management 1.0. The issue is related to SQL injection, which can be triggered by manipulating the user id argument in the /admin/update...

PT-2025-45421

Name of the Vulnerable Software and Affected Versions code-projects Responsive Hotel Site version 1.0 Description A security flaw exists in code-projects Responsive Hotel Site version 1.0, specifically within the processing of the /admin/newsletterdel.php file. Manipulation of the eid argument ca...

CVE-2025-11205

Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

The vulnerability of the vdec_h264SliceDecode() function in the drivers/media/platform/mediatek/vcodec/decoder/vdec/vdec_h264_req_if.c file of the Linux kernel-based multimedia device support driver allows a remote attacker to trigger a service denial.

The vulnerability of the vdech264sliceDecode function in the drivers/media/platform/mediatek/vcodec/decoder/vdec/vdech264reqif.c file of the Linux kernel-based multimedia device support driver is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service...

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

rack: Rack memory exhaustion denial of service

A denial of service flaw has been found in the rubygems rack package. Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line CRLFCRLF. The parser keeps appending incoming bytes to memory without a size cap, allowing...

CVE-2025-12626

A security flaw has been discovered in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This affects the function getImgUrl of the file WxActGoldeneggsPrizesController.java. Performing manipulation of the argument imgurl results in path traversal. Remote exploitation of the...

CVE-2025-12623

A vulnerability was identified in fushengqian fuint up to 41e26be8a2c609413a0feaa69bdad33a71ae8032. Affected by this issue is some unknown functionality of the file fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientSignController.java of the component Authentication Toke...

CVE-2025-12619

A vulnerability was found in Tenda A15 15.13.07.13. Affected is the function fromSetWirelessRepeat of the file /goform/openNetworkGateway. The manipulation of the argument wpapskcrypto24g results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could b...

CVE-2025-20725

CVE-2025-20725 affects MediaTek IMS service with an out-of-bounds write due to a missing bounds check. The issue enables remote escalation of privilege when a user equipment connects to a rogue base station; exploitation does not require user interaction. Patch MOLY01671924 (MSV-4620) is referenc...

CVE-2025-12611

A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIp leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly...

CVE-2025-12606

A vulnerability was determined in itsourcecode Online Loan Management System 1.0. This issue affects some unknown processing of the file /manageborrower.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

CVE-2025-12626

A security flaw has been discovered in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This affects the function getImgUrl of the file WxActGoldeneggsPrizesController.java. Performing manipulation of the argument imgurl results in path traversal. Remote exploitation of the...

CVE-2025-12626 jeecgboot jeewx-boot WxActGoldeneggsPrizesController.java getImgUrl path traversal

A security flaw has been discovered in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This affects the function getImgUrl of the file WxActGoldeneggsPrizesController.java. Performing manipulation of the argument imgurl results in path traversal. Remote exploitation of the...

CVE-2025-12626

CVE-2025-12626 affects jeecgboot jeewx-boot prior to 641ab52c3e1845fec39996d7794c33fb40dad1dd, specifically the getImgUrl function in WxActGoldeneggsPrizesController.java. The vulnerability arises from path traversal via manipulation of the imgurl argument, enabling remote exploitation. Public ex...

CVE-2025-12626 jeecgboot jeewx-boot WxActGoldeneggsPrizesController.java getImgUrl path traversal

A security flaw has been discovered in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This affects the function getImgUrl of the file WxActGoldeneggsPrizesController.java. Performing manipulation of the argument imgurl results in path traversal. Remote exploitation of the...