EUVD-2021-0293

Malware in sbrugna...

EUVD-2019-7090

Malware in sbrugna...

PT-2025-40961

Name of the Vulnerable Software and Affected Versions code-projects Online Hotel Reservation System version 1.0 Description A flaw exists in code-projects Online Hotel Reservation System 1.0 that allows for unrestricted file uploads. The issue is located in the file /admin/editpicexec.php within ...

PT-2025-41161

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.3.0.15 Dell PowerProtect Data Domain LTS2025 version 8.3.1.0 Dell PowerProtect Data Domain LTS2024 versions 7.13.1.0 through 7.13.1.30 Dell PowerProtect Data Domain LTS2023 versions...

PT-2025-40964

Name of the Vulnerable Software and Affected Versions Online Hotel Reservation System version 1.0 Description A flaw exists in Online Hotel Reservation System version 1.0 that allows for unrestricted file upload. This is possible through manipulation of the image argument in the...

PT-2025-40967

Name of the Vulnerable Software and Affected Versions UTT 1250GW versions through 2v3.2.2-200710 Description A buffer overflow issue exists in the strcpy function within the /goform/aspChangeChannel file of UTT 1250GW. The pvid argument can be manipulated to trigger the overflow, allowing for...

PT-2025-41181

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.1.0.10 Dell PowerProtect Data Domain versions 7.13.1.0 through 7.13.1.25 Dell PowerProtect Data Domain versions 7.10.1.0 through 7.10.1.50 Description The software contains an Improper...

PT-2025-40962

Name of the Vulnerable Software and Affected Versions code-projects Online Hotel Reservation System version 1.0 Description A security issue exists in code-projects Online Hotel Reservation System 1.0. The manipulation of the image argument in the file /admin/addexec.php allows for unrestricted...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2025-985008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-985008 advisory. scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the...

CVE-2025-59489

Unity Runtime before 2025-10-02 on Android, Windows, macOS, and Linux allows argument injection that can result in loading of library code from an unintended location. If an application was built with a version of Unity Editor that had the vulnerable Unity Runtime code, then an adversary may be...

CVE-2025-11305

A vulnerability has been found in UTT HiPER 840G up to 3.1.1-190328. Affected by this issue is the function strcpy of the file /goform/formTaskEdit. The manipulation of the argument txtMin2 leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to...

CVE-2025-11339

A vulnerability has been found in D-Link DI-7100G C1 up to 20250928. This issue affects the function sub4BD4F8 of the file /webchat/hiblock.asp of the component jhttpd. The manipulation of the argument popupId leads to buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2025-11325 Tenda AC18 fast_setting_pppoe_set stack-based overflow

A security flaw has been discovered in Tenda AC18 15.03.05.196318. Affected by this issue is some unknown functionality of the file /goform/fastsettingpppoeset. Performing a manipulation of the argument Username results in stack-based buffer overflow. The attack is possible to be carried out...

CVE-2025-11319

CVE-2025-11319 affects the nahiduddinahammed Hospital-Management-System-Website prior to version e6562429e14b2f88bd2139cae16e87b965024097. The vulnerability is a SQL injection in the /delete.php handler, triggered by manipulating the argument ai. The issue is exploitable remotely and, according t...

PT-2025-40852

Name of the Vulnerable Software and Affected Versions UTT versions prior to v2v3.2.2-200710 Description A buffer overflow issue exists in the strcpy function within the /goform/formUserStatusRemark file. Manipulation of the Username argument can trigger this issue, potentially allowing for remote...

PT-2025-40889

Name of the Vulnerable Software and Affected Versions CmsEasy versions up to 7.7.7 Description A flaw exists in CmsEasy that may allow for cross site scripting. This issue affects an unknown function within the lib/inc/view.php component of the URL Handler. Manipulation of the PHP SELF argument c...

PT-2025-40857

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.196318 Description A security issue exists in Tenda AC18 routers. A stack-based buffer overflow can occur due to manipulation of the Username argument within the /goform/fast setting pppoe set file. This issue is...

CVE-2025-11303

A vulnerability was detected in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/mp. Performing a manipulation of the argument command results in command injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted...

CVE-2025-11303

Belkin F9K1015 (version 1.00.10) contains a command injection flaw in the /goform/mp handler via manipulation of the command argument. The vulnerability allows remote execution and is supported by multiple sources (NVD, Red Hat, Vulners enrichments, PT Security) with exploitation details publicly...

CVE-2025-11300 Belkin F9K1015 formWlanMP buffer overflow

A security flaw has been discovered in Belkin F9K1015 1.00.10. The impacted element is an unknown function of the file /goform/formWlanMP. The manipulation of the argument ateFunc results in buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public...