PT-2025-24326 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.09 Description: A critical issue has been identified, affecting the fromSetWirelessRepeat function of the file /goform/WifiExtraSet. The manipulation of the wpapsk crypto argument leads to a stack-based buffer...

PT-2025-24016 · Unknown · Sourcecodester Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Result Management System version 1.0 Description: A vulnerability was found in the Grading System Page component, specifically in the /script/academic/grading-system file. The manipulation of the Remark argument leads t...

PT-2025-24316 · Spicedb · Spicedb

Name of the Vulnerable Software and Affected Versions: SpiceDB versions prior to 1.44.2 Description: The issue affects SpiceDB, an open source database for storing and querying fine-grained authorization data. On schemas involving arrows with caveats on the arrow'ed relation, when the path to...

PT-2025-24309 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue has been discovered, affecting the file /myexp.php. The manipulation of the emp3ctc argument leads to SQL injection. This issue can be exploited remotely...

PT-2025-24318 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical vulnerability was found in the HTTP POST Request Handler component, specifically affecting the file /boafrm/formIpQoS. The manipulation of the mac argument leads to a buffer...

PT-2025-23990 · Unknown · Phpgurukul Human Metapneumovirus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description: A critical issue has been identified in the system, affecting an unknown functionality of the file /new-user-testing.php. The manipulation of the state argume...

users may append `root` to group listings

Affected versions append root to group listings, unless the correct listing has exactly 1024 groups. This affects both: - The supplementary groups of a user - The group access list of the current process If the caller uses this information for access control, this may lead to privilege escalation...

PT-2025-23893 · Unknown · Phpgurukul Notice Board System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Notice Board System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Notice Board System, affecting an unknown functionality of the file /admin-profile.php. The manipulation of the mobilenumber...

PT-2025-23936 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue was found in the XCWD Command Handler component, which can lead to a buffer overflow. This issue can be exploited remotely. Recommendations: For FreeFloat FTP Server version 1.0, ...

PT-2025-24061 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical issue affects some unknown functionality of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the submit-url argument leads to buffer...

PT-2025-23905 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: Radare2 version 5.9.9 Description: A vulnerability was found in Radare2 and classified as problematic. This issue affects the function r cons context break pop in the library /libr/cons/cons.c of the component radiff2. The manipulation of the...

PT-2025-23954 · Unknown · Campcodes Online Teacher Record Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Teacher Record Management System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /trms/admin/bwdates-reports-details.php. The manipulation of the fromdate and todate arguments...

PT-2025-23941 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Medical Card Generation System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /admin/readenq.php. The manipulation of the ID argument leads to SQL injection. This issue can be...

PT-2025-23982 · Unknown · Brilliance Golden Link Secondary System

Name of the Vulnerable Software and Affected Versions: Brilliance Golden Link Secondary System up to 20250424 Description: A critical issue has been found in the Brilliance Golden Link Secondary System. This issue affects some unknown processing of the file...

PT-2025-23986 · Code Projects · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue was found in the code-projects Real Estate Property Management System. The problem affects an unknown function of the file /Admin/Property.php...

PT-2025-23978 · Unknown · Phpgurukul Human Metapneumovirus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description: A critical issue has been discovered, affecting some unknown functionality of the file /search-report-result.php. The manipulation of the serachdata argument...

PT-2025-23880 · Code Projects · Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue was found in the Patient Record Management System. The problem is related to the manipulation of the itr no argument in the /sputum form.php file, which...

PT-2025-23918 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 2.0 Description: A critical issue has been discovered, affecting the file /admin/edit-category.php. The manipulation of the description argument leads to SQL injection. This issue can be exploite...

PT-2025-23900 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: Radare2 version 5.9.9 Description: A problematic vulnerability has been found in Radare2, affecting the function r cons pal init in the library /libr/cons/pal.c of the component radiff2. The manipulation leads to memory corruption. The attack...

CVE-2025-48495

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. By renaming the friendly name of an API key, an authenticated user could inject JS into the API key overview, which would also be executed when another user clicks on his API tab. Prior to version 2.0.0,...