PT-2025-26574 · Htacg +1 · Tidy-Html5 +1

Name of the Vulnerable Software and Affected Versions: HTACG tidy-html5 version 5.8.0 Description: A vulnerability was found in HTACG tidy-html5, affecting the function prvTidyParseNamespace of the file src/parser.c. The manipulation leads to a reachable assertion. Attacking locally is a...

PT-2025-26469 · Unknown · Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Pizza Ordering System version 1.0 Description: A critical issue has been found in the Simple Pizza Ordering System. The problem affects an unknown functionality of the file /adduser-exec.php. The manipulation of the...

PT-2025-26265 · Unknown · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hostel Management System version 1.0 Description: A critical issue affects an unknown functionality of the file /empty rooms.php. The manipulation of the search box argument leads to SQL injection. This issue can be exploited...

PT-2025-26476 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical vulnerability was found in the D-Link DIR-619L, affecting the function formSetWizard1 of the file /goform/formSetWizard1. The manipulation of the argument curTime leads to a stack-based...

PT-2025-26464 · Unknown · Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Simple Pizza Ordering System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /portal.php. The manipulation of the ID argument leads to SQL injection. This issue can be exploited remotely...

CVE-2025-6268

CVE-2025-6268 affects Luna Imaging up to 7.5.5.6, where an unknown function in /luna/servlet/view/search is vulnerable via manipulation of the q parameter, triggering cross-site scripting. The vulnerability can be exploited remotely, and public disclosure has occurred. Connected PT-Security advis...

PT-2025-26206 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.2 Description: The issue is related to an OS Command Injection flaw in the "/html/configuracao/debug info.php" endpoint. The branch parameter is not properly sanitized before being concatenated and executed in a...

PT-2025-25617 · Unknown · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hostel Management System version 1.0 Description: A critical vulnerability was found in the code-projects Hostel Management System. This issue affects unknown code of the file /allocate room.php. The manipulation of the search b...

Apple MacOSX Security Update (HT122901)

Apple Mac OS X is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security advisory: Recently discovered Use After Free issue in QHttp2ProtocolHandler impacts Qt

There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This has been assigned the CVE id CVE-2025-5991. Affected versions: Qt version 6.9.0. This is fixed in 6.9.1. Impact: This only affects HTTP/2 handling, HTTP handling is not affected by this at all...

KLA84754 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Media can be exploited to cause denial of service or execute...

GIMP Integer Overflow RCE Vulnerability (Jun 2025) - Windows

GIMP is prone to an integer overflow remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Synology Router Manager (SRM) 1.3.x File Write Vulnerability (Synology-SA-25:07)

Synology Router Manager SRM is prone to a file write vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2025-24047 · Sourcecodester · Sourcecodester Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Result Management System version 1.0 Description: A problematic issue has been found in the Announcement Page component, specifically in the /script/academic/announcement file. The manipulation of the Title argument lea...

PT-2025-23985 · Code Projects · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue affects some unknown processing of the file /Admin/User.php. The manipulation of the txtUserName argument leads to SQL injection. The attack may be...

PT-2025-23913 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 2.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /admin/between-date-userreport.php. The manipulation of the fromdate and todate arguments lea...

PT-2025-23862 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue has been found in the PHPGurukul Online Fire Reporting System, affecting the /reporting.php file. The manipulation of the fullname argument leads to SQL...

PT-2025-23781 · Unknown · Phpgurukul Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A critical issue has been found in the PHPGurukul Dairy Farm Shop Management System, affecting the processing of the file /bwdate-report-details.php. The manipulation of th...

VulnCheck KEV: CVE-2025-39475

Path Traversal: '.../...//' vulnerability in Frenify Arlo arlo allows PHP Local File Inclusion.This issue affects Arlo: from n/a through = 6.0.3...

PT-2025-23526

Name of the Vulnerable Software and Affected Versions xls2csv utility version 0.95 Description A memory corruption issue exists in the Shared String Table Record Parser implementation. This can be triggered by a specially crafted malformed file, leading to a heap buffer overflow. An attacker can...