PT-2025-26520 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: A critical vulnerability has been found in the PHPGurukul Art Gallery Management System, affecting an unknown functionality of the file /admin/add-artist.php. The manipulation ...

PT-2025-26532 · Code Projects · Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Simple Online Hotel Reservation System version 1.0 Description: A critical vulnerability was found in the Simple Online Hotel Reservation System. The issue is related to SQL injection, which can be triggered by manipulating the Username or...

rfc3161-client has insufficient verification for timestamp response signatures

Impact rfc3161-client 1.0.2 and earlier contain a flaw in their timestamp response signature verification logic. In particular, it performs chain verification against the TSR's embedded certificates up to the trusted roots, but fails to verify the TSR's own signature against the timestamping leaf...

GHSA-7CJH-XX4R-QH3F sentry-android unmasked sensitive data in Android Session Replays for users of Jetpack Compose 1.8+

Impact Under specific circumstances, text composables may contain unmasked sensitive data in Android session replays. You may be impacted if you meet the following conditions: - Using any sentry-android with versions = 1.8.0-alpha08 - This includes any alpha, beta, release candidate, or general...

BIT-PYTHON-2025-4516 Use-after-free in "unicode_escape" decoder with error handler

There is an issue in CPython when using bytes.decode"unicodeescape", error="ignore|replace". If you are not using the "unicodeescape" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode call in ...

Security Bulletin: Vulnerability in cryptography affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2023-49083]

Summary The cryptography package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVEs CVE-2023-49083 Vulnerability Details CVEID:CVE-2023-49083 DESCRIPTION: Cryptography package for Python is vulnerable to a denial of service, caused b...

PT-2025-26274 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue has been discovered in the code, specifically affecting the /admin/admin index.php file. The manipulation of the Username argument leads to a SQL injection. This issue...

PT-2025-26288 · Unknown · Phpgurukul Pre-School Enrollment System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Pre-School Enrollment System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Pre-School Enrollment System. This issue affects unknown code of the file /admin/check availability.php. The manipulation of...

PT-2025-26265 · Unknown · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hostel Management System version 1.0 Description: A critical issue affects an unknown functionality of the file /empty rooms.php. The manipulation of the search box argument leads to SQL injection. This issue can be exploited...

PT-2025-26318 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue was found in the code-projects Online Shoe Store. The problem affects an unknown function of the file /admin/admin product.php. The manipulation of the pid argument lea...

PT-2025-26300 · Unknown · Phpgurukul Directory Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Directory Management System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Directory Management System. The issue affects an unknown functionality of the file /admin/search-directory.php. The...

PT-2025-26299 · Unknown · Phpgurukul Directory Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Directory Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Directory Management System. The issue affects an unknown function of the file /searchdata.php, where the manipulation o...

PT-2025-26476 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical vulnerability was found in the D-Link DIR-619L, affecting the function formSetWizard1 of the file /goform/formSetWizard1. The manipulation of the argument curTime leads to a stack-based...

PT-2025-26464 · Unknown · Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Simple Pizza Ordering System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /portal.php. The manipulation of the ID argument leads to SQL injection. This issue can be exploited remotely...

PT-2025-26475 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical issue has been found, affecting the function formSetEnableWizard of the file /goform/formSetEnableWizard. The manipulation of the argument curTime leads to a stack-based buffer overflow...

PT-2025-26276 · Unknown · Phpgurukul Emergency Ambulance Hiring Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /admin/bwdates-request-report-details.php. The manipulation of the fromdate and todate...

PT-2025-26470 · Unknown · Hobbesosr Kitten

Name of the Vulnerable Software and Affected Versions: HobbesOSR Kitten versions up to c4f8b7c3158983d1020af432be1b417b28686736 Description: A critical issue was found, affecting the function set pte at in the library /include/arch-arm64/pgtable.h. This issue leads to resource consumption...

PT-2025-26447

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Hotel Reservation System version 1.0 Description: A critical issue has been found, affecting the /admin/execeditroom.php file, where the manipulation of the userid argument leads to SQL injection. This issue can be...

PT-2025-26473 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical vulnerability has been found in the function formdumpeasysetup of the file /goform/formdumpeasysetup. The manipulation of the argument curTime/config.save network enabled leads to a...

CVE-2025-47771

PowSyBl Core versions 6.3.0–6.7.1 contain a deserialization issue in SparseMatrix.read(InputStream) that can lead to privilege escalations under various circumstances. The root cause is a vulnerability in how SparseMatrix is deserialized, enabling untrusted input to affect system state. A fix is ...