CVE-2025-9691

CVE-2025-9691 affects Campcodes Online Shopping System 1.0; in /login.php, manipulating the Password argument enables SQL injection. This remote flaw is supported by multiple sources (NVD/Red Hat and others) and, per PT-2025-35361, a temporary mitigation is to restrict access to /login.php. Explo...

CVE-2025-9688

CVE-2025-9688 affects Mupen64Plus up to version 2.6.0. The issue is in the function write_is_viewer() within src/device/cart/is_viewer.c, where an integer overflow is triggered, enabling a remote attack. Documents indicate the exploitability is high complexity with network access; exploitation ha...

CVE-2025-9686

A security flaw has been discovered in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /module/AreaConhecimento/edit of the component Listagem de áreas de conhecimento Page. Performing manipulation of the argument ID results in sql injection. The attack is...

CVE-2025-9685 Portabilis i-Educar Listagem de áreas de conhecimento view sql injection

A vulnerability was identified in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/AreaConhecimento/view of the component Listagem de áreas de conhecimento Page. Such manipulation of the argument ID leads to sql injection. The attack can be executed...

CVE-2025-9684 Portabilis i-Educar Formula de Cálculo de Média edit sql injection

A vulnerability was determined in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/FormulaMedia/edit of the component Formula de Cálculo de Média Page. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The...

CVE-2025-9682

A vulnerability has been found in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file /xcmsassemblecontrol/jaxrs/design/appdict of the component Personal Profile Page. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2025-9683 O2OA Personal Profile form cross site scripting

A vulnerability was found in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /xcmsassemblecontrol/jaxrs/form of the component Personal Profile Page. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has been ma...

CVE-2025-9683

CVE-2025-9683 affects O2OA (up to 10.0-410), specifically the Personal Profile Page component’s file /x_cms_assemble_control/jaxrs/form. The issue enables cross-site scripting due to parameter manipulation. The vulnerability can be exploited remotely; the exploit has been publicly disclosed. The ...

CVE-2025-9681

A flaw has been found in O2OA up to 10.0-410. Affected is an unknown function of the file /xprogramcenter/jaxrs/agent of the component Personal Profile Page. Executing manipulation can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be use...

CVE-2025-9680

A vulnerability was detected in O2OA up to 10.0-410. This impacts an unknown function of the file /xportalassembledesigner/jaxrs/page of the component Personal Profile Page. Performing manipulation results in cross site scripting. The attack can be initiated remotely. The exploit is now public an...

CVE-2025-9680

A vulnerability was detected in O2OA up to 10.0-410. This impacts an unknown function of the file /xportalassembledesigner/jaxrs/page of the component Personal Profile Page. Performing manipulation results in cross site scripting. The attack can be initiated remotely. The exploit is now public an...

PT-2025-35353

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A vulnerability exists in Portabilis i-Educar up to version 2.10, specifically within the /module/FormulaMedia/edit file of the Formula de Cálculo de Média Page component. Manipulation of t...

Linux Distros Unpatched Vulnerability : CVE-2024-31208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Synapse is an open-source Matrix homeserver. A remote Matrix user with malicious intent, sharing a room with Synapse instances before 1.105.1, can dispatch...

Linux Distros Unpatched Vulnerability : CVE-2019-11027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ruby OpenID aka ruby-openid through 2.8.0 has a remotely exploitable flaw. This library is used by Rails web applications to integrate with OpenID Providers...

PT-2025-35352

Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A cross site scripting issue exists in O2OA up to version 10.0-410. The issue is related to an unknown functionality within the file /x cms assemble control/jaxrs/form of the Personal Profile Page...

PT-2025-35382

Name of the Vulnerable Software and Affected Versions: SourceCodester Water Billing System version 1.0 Description: A security issue exists in SourceCodester Water Billing System 1.0. The vulnerability is related to SQL injection within an unknown functionality of the file /edit.php. Manipulation...

PT-2025-35377

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Book Store version 1.0 Description: A SQL injection issue exists due to the manipulation of the pubid parameter when processing the /publisher list.php file. This allows for remote attacks. The exploit has been published...

PT-2025-35381

Name of the Vulnerable Software and Affected Versions: SourceCodester Water Billing System version 1.0 Description: A SQL injection weakness exists in the /paybill.php file due to manipulation of the ID argument. Remote exploitation is possible. The exploit has been made publicly available...

Linux Distros Unpatched Vulnerability : CVE-2025-1352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function libdwthreadtail in the library...

CVE-2025-9669

A vulnerability has been found in Jinher OA 1.0. This issue affects some unknown processing of the file GetTreeDate.aspx. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used...