Google Chrome Security Update (stable-channel-update-for-desktop-2025-08) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

pyLoad 安全漏洞

pyLoad is a free open source download manager written in Python by pyLoad Open Source. A security vulnerability exists in pyLoad 0.5.0b3.dev89 and earlier versions, which stems from a path traversal vulnerability that could lead to arbitrary file writes and remote code execution...

PT-2025-31768 · Unknown · Online Medicine Guide

Name of the Vulnerable Software and Affected Versions: code-projects Online Medicine Guide version 1.0 Description: A vulnerability exists in an unknown functionality of the file /cusfindphar2.php. The manipulation of the argument Search leads to SQL injection. The attack may be launched remotely...

PT-2025-31583

Name of the Vulnerable Software and Affected Versions pyjwt version 2.10.1 Description pyjwt version 2.10.1 contains weak encryption. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-31502 · Unknown · Campcodes Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hotel Reservation System version 1.0 Description: A critical issue exists in Campcodes Online Hotel Reservation System 1.0, specifically within the Login component. The vulnerability is due to SQL injection, resulting from th...

CS Cart 安全漏洞

CS Cart is an e-commerce system from the US-based company CS Cart. A security vulnerability exists in CS Cart version 4.18.3, which stems from vulnerability to cross-site request forgery attacks...

Python DoS Vulnerability (Jul 2025) - Linux

Python is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

Google Chrome Security Update (stable-channel-update-for-desktop_29-2025-07) - Windows

Google Chrome is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

Google Chrome Security Update (stable-channel-update-for-desktop_29-2025-07) - Linux

Google Chrome is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to sensitive information disclosure (CVE-2025-25045)

Summary A sensitive information disclosure vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-25045 DESCRIPTION: IBM InfoSphere Information Server authenticated user to obtain sensitive information when a detailed technical error message is...

PT-2025-31102 · Unknown · Meddream Pacs Premium

Name of the Vulnerable Software and Affected Versions: MedDream PACS Premium version 7.3.3.840 Description: A privilege escalation issue exists in the login.php functionality. An attacker can upload a malicious .php file to gain elevated access. Recommendations: At the moment, there is no...

PT-2025-30976 · Campcodes · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Courier Management System version 1.0 Description: A critical issue exists in Campcodes Courier Management System 1.0. The vulnerability is due to a SQL injection flaw in the /edit user.php file. Manipulation of the ID argument can...

CVE-2024-53288

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in NTP Region functionality in Synology Router Manager SRM before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via unspecified...

Google Chrome Security Update (stable-channel-update-for-desktop_22-2025-07) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

PT-2025-30371 · Unknown · Sanluan Publiccms

Name of the Vulnerable Software and Affected Versions: Sanluan PublicCMS versions through 5.202506.a Description: A vulnerability exists in Sanluan PublicCMS up to version 5.202506.a, affecting an unknown functionality within the file...

PT-2025-30374 · Unknown · Code-Projects Public Chat Room

Name of the Vulnerable Software and Affected Versions: code-projects Public Chat Room version 1.0 Description: A critical issue exists in code-projects Public Chat Room 1.0 related to a functionality within the /login.php file. Manipulation of the Username argument results in a SQL injection. The...

PT-2025-30432 · Unknown · Bloomberg Comdb2

Name of the Vulnerable Software and Affected Versions: Bloomberg Comdb2 version 8.1 Description: A denial of service issue exists in the Distributed Transaction Commit/Abort Operation functionality. A specially crafted network packet can lead to a denial of service. An attacker can send a malicio...

PT-2025-30326

Name of the Vulnerable Software and Affected Versions Eveo URVE Web Manager version 27.02.2025 Description An issue exists in Eveo URVE Web Manager that allows for Server-Side Request Forgery SSRF. The / internal/redirect.php endpoint accepts a URL as input, sends a request to this address, and...

PT-2025-30159 · Unknown · Church Donation System

Name of the Vulnerable Software and Affected Versions: Church Donation System version 1.0 Description: A critical issue exists in the processing of the /members/login admin.php file. Manipulation of the Username argument leads to a SQL injection. The attack can be initiated remotely, and the...

PT-2025-30143 · Unknown · Church Donation System

Name of the Vulnerable Software and Affected Versions: Church Donation System version 1.0 Description: A critical vulnerability has been identified in Church Donation System. The issue involves SQL injection stemming from unknown processing of the file /members/giving.php. Manipulation of the...