CVE-2025-49148 ClipShare Server Allows Local Privilege Escalation via DLL Hijacking

ClipShare is a lightweight and cross-platform tool for clipboard sharing. Prior to 3.8.5, ClipShare Server for Windows uses the default Windows DLL search order and loads system libraries like CRYPTBASE.dll and WindowsCodecs.dll from its own directory before the system path. A local, non-privileg...

GHSA-JM79-7XHW-6F6F GWC Home Page communicate version and revision information

Summary The GeoWebCache home page includes version and revision information about the software in use. This information is sensitive from a security point of view because it allows software used by the server to be easily identified. Details...

BIT-MARIADB-MIN-2021-46658

savewindowfunctionvalues in MariaDB before 10.6.3 allows an application crash because of incorrect handling of withwindowfunc=true for a subquery...

PT-2025-24932 · Unknown · Code-Projects School Fees Payment System

Name of the Vulnerable Software and Affected Versions: code-projects School Fees Payment System version 1.0 Description: A critical issue affects the processing of the file "/datatable.php". The manipulation of the sSortDir 0 argument leads to SQL injection. The attack may be initiated remotely...

PT-2025-24930

Name of the Vulnerable Software and Affected Versions Jetimob Plataforma Imobiliaria version 20240627-0 Description The issue concerns Cross Site Scripting XSS in the "Pessoas" persons section, specifically via the field "Profisso" professor. Recommendations For Jetimob Plataforma Imobiliaria...

PT-2025-24925

Name of the Vulnerable Software and Affected Versions Jetimob Plataforma Imobiliaria version 20240627-0 Description The issue concerns a Cross Site Scripting XSS problem. In the "Oportunidades" section of the application, when creating or editing an "Atividade", the form field "Descrico" allows...

PT-2025-24653 · Unknown · Loftocean Tinysalt

Name of the Vulnerable Software and Affected Versions: LoftOcean TinySalt versions prior to 3.10.0 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

CVE-2025-48141

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Alex Zaytseff Multi CryptoCurrency Payments multi-crypto-currency-payment allows SQL Injection.This issue affects Multi CryptoCurrency Payments: from n/a through = 2.0.7...

CVE-2025-48122

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows SQL Injection.This issue affects...

CVE-2025-48141

CVE-2025-48141 concerns a SQL Injection in the WordPress plugin Multi CryptoCurrency Payments (vulnerable from unknown n/a up to 2.0.3). The issue is described as an improper neutralization of special elements used in an SQL command, enabling unauthenticated network-based access with potential im...

PT-2025-24395 · Unknown · Phpgurukul Maid Hiring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Maid Hiring Management System version 1.0 Description: A critical issue was found in the PHPGurukul Maid Hiring Management System. This issue affects an unknown part of the file /admin/search-booking-request.php. The manipulation o...

CVE-2025-30953

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Phishing.This issue affects WP Gravity Forms Salesforce: from n/a through = 1.4.7...

CVE-2025-49238

Cross-Site Request Forgery CSRF vulnerability in everestthemes Everest Backup everest-backup allows Cross Site Request Forgery.This issue affects Everest Backup: from n/a through = 2.3.3...

CVE-2025-28981

Cross-Site Request Forgery CSRF vulnerability in Soli WP Mail Options wp-mail-options allows Stored XSS.This issue affects WP Mail Options: from n/a through = 0.2.3...

CVE-2025-29877 File Station 5

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

CVE-2025-49286

Cross-Site Request Forgery CSRF vulnerability in WP Table Builder WP Table Builder wp-table-builder allows Cross Site Request Forgery.This issue affects WP Table Builder: from n/a through = 2.0.6...

CVE-2025-49235

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rometheme RTMKit rometheme-for-elementor allows Stored XSS.This issue affects RTMKit: from n/a through = 1.6.0...

CVE-2025-30980

Cross-Site Request Forgery CSRF vulnerability in Alessandro Piconi Simple Keyword to Link simple-keyword-to-link allows Cross Site Request Forgery.This issue affects Simple Keyword to Link: from n/a through = 1.5...

CVE-2025-30956

Cross-Site Request Forgery CSRF vulnerability in Booqable Rental Software Booqable Rental booqable-rental-reservations allows Cross Site Request Forgery.This issue affects Booqable Rental: from n/a through = 2.4.25...

CVE-2025-49446

CVE-2025-49446 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Admin Notes (minhlaobao). Affected range: Admin Notes 1.1 and earlier (n/a through 1.1). According to the initial description, the CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N wit...