PT-2025-33441 · Itsourcecode · Itsourcecode Online Tour/Travel Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection vulnerability exists in itsourcecode Online Tour and Travel Management System 1.0. The vulnerability is located in an unknown function within the...

Linux Distros Unpatched Vulnerability : CVE-2025-37778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krbauthenticate krbauthenticate frees sess-user and does not...

Linux Distros Unpatched Vulnerability : CVE-2023-0122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmetsetupauth, allows an attacker to perform a Pre-Auth Denial of Service D...

Malicious code in setup-foreman (npm)

The package setup-foreman was found to contain malicious code...

Malicious code in setup-docker (npm)

The package setup-docker was found to contain malicious code...

Malicious code in setup-jsonnet (npm)

The package setup-jsonnet was found to contain malicious code...

MAL-2025-33024 Malicious code in setup-docker (npm)

The package setup-docker was found to contain malicious code...

MAL-2025-33025 Malicious code in setup-foreman (npm)

The package setup-foreman was found to contain malicious code...

Malicious code in @digital-wealth-web/cwp-service-setup (npm)

The package @digital-wealth-web/cwp-service-setup was found to contain malicious code...

MAL-2025-33026 Malicious code in setup-grunt (npm)

The package setup-grunt was found to contain malicious code...

MAL-2025-26123 Malicious code in mean_setup (npm)

The package meansetup was found to contain malicious code...

MAL-2025-7747 Malicious code in @digital-wealth-web/cwp-service-setup (npm)

The package @digital-wealth-web/cwp-service-setup was found to contain malicious code...

Malicious code in setup-grunt (npm)

The package setup-grunt was found to contain malicious code...

MAL-2025-33027 Malicious code in setup-jsonnet (npm)

The package setup-jsonnet was found to contain malicious code...

MAL-2025-7746 Malicious code in @digital-wealth-web/cwp-service-setu (npm)

The package @digital-wealth-web/cwp-service-setu was found to contain malicious code...

CVE-2025-30033

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component...

CVE-2025-48861

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...

CVE-2025-48862

Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set. However, only the private key - if available in the backup - is encrypted, while the backup file itself remains unencrypted...

CVE-2025-48860

A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated low privileged attacker to gain remote access to backup archives created by a user with elevated permissions. Depending on the content of the backup archive, the attacker may have been able to acce...

CVE-2025-48862

The CVE affects ctrlX OS (Bosch) where ambiguous wording in the web interface of the setup/backup mechanism could mislead users into thinking the backup is encrypted when a password is set. In reality, only the private key in the backup (if present) is encrypted; the backup file itself remains un...