CVE-2025-29427

The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to a Cross Site Scripting (XSS) attack within the profile.php file. The root cause is the lack of effective filtering and escaping of user-supplied data in the member_first and member_last parameters. This vulnerability ...

CVE-2025-29426

The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) in the /pages/class.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data within the id and cys parameters, allowing an attacker to inject and ex...

CVE-2025-29429

The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) in the /pages/program.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data within the id, code, and name parameters. An attacker can exploit thi...

CVE-2025-29431

The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) within the /pages/department.php endpoint. The root cause is the incorrect manipulation and lack of effective filtering or escaping of user-supplied data in the id, code, and name parameters...

CVE-2025-25615

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections...

[SECURITY] Fedora 42 Update: OpenImageIO-2.5.16.0-6.fc42

OpenImageIO is a library for reading and writing images, and a bunch of relat ed classes, utilities, and applications. Main features include: - Extremely simple but powerful ImageInput and ImageOutput APIs for reading a nd writing 2D images that is format agnostic. - Format plugins for TIFF,...

CVE-2025-28913

Cross-Site Request Forgery CSRF vulnerability in Aftab Ali Muni WP Add Active Class To Menu Item wp-add-active-class-to-menu-item allows Cross Site Request Forgery.This issue affects WP Add Active Class To Menu Item: from n/a through = 1.0...

Windows USB Video Class System Driver Privilege Escalation

The vulnerability of the Windows USB Video Class System Driver for Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system-level level...

Windows USB Video Class System Driver Privilege Escalation

The vulnerability of the Windows USB Video Class System Driver for Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system-level level...

MAL-2025-191906 Malicious code in tonetext (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c46725ad6c88079cce4f7fa4a29175fec7f78ea83344da99d0f02ac4f020fcf3 When imported, the code embedded into the exception class downloads a remote file, and runs it by importing, and attempts to cover tracks by overwriting itself...

CVE-2025-21857

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: fix error handling causing NULL dereference tcfextsmisscookiebasealloc calls xaalloccyclic which can return 1 if the allocation succeeded after wrapping. This was treated as an error, with value 1 returned to...

PT-2025-11000 · WordPress · The Uncanny Automator – Easy Automation

Name of the Vulnerable Software and Affected Versions: The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress versions up to, and including, 6.2 Description: The issue allows authenticated attackers with Administrator-level access and above t...

WordPress WP Add Active Class To Menu Item plugin <=1.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin WP Add Active Class To Menu Item versions = 1.0...

CVE-2025-28913

Cross-Site Request Forgery CSRF vulnerability in Aftab Ali Muni WP Add Active Class To Menu Item wp-add-active-class-to-menu-item allows Cross Site Request Forgery.This issue affects WP Add Active Class To Menu Item: from n/a through = 1.0...

CVE-2025-28913

CVE-2025-28913 is a CSRF vulnerability in the WP Add Active Class To Menu Item WordPress plugin, affecting versions up to 1.0. The connected sources confirm the issue and provide CVSS v3.1 base score 4.3 (Medium) but do not specify a patched version or concrete exploit details. No remediation ver...

CVE-2025-24055 Windows USB Video Class System Driver Information Disclosure Vulnerability

...

PT-2025-10832

Name of the Vulnerable Software and Affected Versions Windows USB Video Class System Driver affected versions not specified Description The issue is an out-of-bounds read in the Windows USB Video Driver, allowing an authorized attacker to elevate privileges with a physical attack. Recommendations...

PT-2025-10833

Name of the Vulnerable Software and Affected Versions Windows USB Video Class System Driver affected versions not specified Description The issue is an out-of-bounds read in the Windows USB Video Driver, allowing an authorized attacker to elevate privileges with a physical attack. Recommendations...

WordPress plugin WP Add Active Class To Menu Item: Cross-site Request Forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-10675

Name of the Vulnerable Software and Affected Versions SAP NetWeaver ABAP Class Builder affected versions not specified Description The issue is due to a missing authorization check, allowing an attacker to escalate privileges and gain higher access levels. This could result in the disclosure of...