EUVD-2025-37472

A vulnerability was detected in PHPGurukul News Portal 1.0. The impacted element is an unknown function of the file /onps/settings.py. Performing manipulation results in insertion of sensitive information into debugging code. It is possible to initiate the attack remotely. The attack's complexity...

CVE-2025-12616

PHPGurukul News Portal 1.0 contains an information disclosure flaw in an unknown function of /onps/settings.py. Manipulation can insert sensitive data into debugging code, enabling remote exploitation. The vulnerability is exploitable remotely, with high attack complexity, and public exploit avai...

PT-2025-50995

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description A flaw exists in how the operating system parses directory paths, potentially allowing an application to access sensitive user data. The issue was resolved through enhanced path validation...

PHPGurukul News Portal 安全漏洞

News Portal is a news portal. News Portal suffers from an information disclosure vulnerability that originates from an unknown function in the /onps/settings.py file that fails to properly handle sensitive data. The vulnerability can be exploited to insert sensitive information into debugging cod...

PHPGurukul News Portal 安全漏洞

News Portal is a news portal. News Portal has a hard-coded vulnerability that stems from the use of a fixed encryption key for the handling of the SECRETKEY parameter in the file /onps/settings.py. An attacker could exploit this vulnerability to obtain sensitive system information...

PT-2025-50988

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description A permissions issue existed that could allow an application to access sensitive user data. This issue was addressed through additional sandbox restrictions. Recommendations Update to macOS version 26.1...

PT-2025-55370

Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.1 Description A logging issue exists where an application may be able to access sensitive user data due to insufficient data redaction. Data redaction is the process of removing or masking sensitive information...

SQL Injection Vulnerability in Changjitong T+ of Changjitong Information Technology Co. Ltd (CNVD-C-2025-778387)

T+ is a dynamic, intelligent and fashionable Internet management software, mainly for small and medium-sized industrial, trade and commerce enterprises with integrated financial and business applications, incorporating elements of socialization, mobility, Internet of Things, e-commerce and Intern...

PT-2025-50989

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description A flaw exists where an application could potentially gain access to sensitive user data due to insufficient restrictions. Recommendations Update to macOS version 26.1 to resolve the issue...

PT-2025-50999

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.1 Description An application could potentially access sensitive user data due to insufficient checks. Recommendations Update to macOS Tahoe 26.1 or later...

PT-2025-44893

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A flaw exists that could allow an application to access sensitive user data on Intel-based Mac computers. This issue is related to a downgrade scenario an...

PT-2025-44827

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.2 Description An issue involving insufficient permissions was identified, potentially allowing an application to access sensitive user data. Additional restrictions have been implemented to address this...

CVE-2025-50735

Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints...

PT-2025-44906

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1 macOS Sequoia versions prior to 15.7.2 macOS Sonoma versions prior to 14.8.2 visionOS versions prior to 26.1 Description An authorization issue exists due to improved state management...

PT-2025-50985

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An injection issue existed due to inadequate validation, potentially allowing an application to access sensitive user data. Recommendations Update to macOS version 26.1...

PT-2025-44830

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A flaw exists in how the operating system parses directory paths. This could allow an application to access sensitive user data due to insufficient path...

PT-2025-55367

Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.1 Description An access issue exists where a malicious application may be able to access sensitive user data. This is addressed by implementing additional sandbox restrictions, which are security mechanisms tha...

CVE-2025-50735

Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints...

PT-2025-44907

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 Description An application may be capable of accessing sensitive user data. The issue was resolved through the implementation of additional entitlement checks. Recommendations Update...

About the security content of macOS Sequoia 15.7.2

About the security content of macOS Sequoia 15.7.2 This document describes the security content of macOS Sequoia 15.7.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...