crud-query-parser SQL Injection vulnerability

Impact Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter, ordering is enabled and you have not set-up a property filter. Versions 0.0.1, 0.0.2 and 0.0.3 are affected b...

GHSA-9R25-RP3P-H2W4 crud-query-parser SQL Injection vulnerability

Impact Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter, ordering is enabled and you have not set-up a property filter. Versions 0.0.1, 0.0.2 and 0.0.3 are affected b...

Vulnerability fixed in FortiSwitch

Fortinet has fixed a vulnerability in the FortiSwitch GUI. The vulnerability with reference CVE-2024-48887, is located in the FortiSwitch GUI, which allows a remote, unauthenticated malicious person to change admin passwords via specially crafted requests. This security issue can lead to...

PT-2025-15695 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance version 10.0.2 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2025-20360

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue was found in the Linux kernel's cpufreq subsystem, specifically in the apple-soc driver. The apple soc cpufreq get rate function does not check if cpufre...

Kibana 8.16.4 and 8.17.2 Security Update (ESA-2025-02)

Kibana Prototype Pollution can lead to code injection ESA-2025-02 Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal. Affected Versions: Kibana versions 8.16.1 up to and including 8.16.3, and 8.17.0 up to and including 8.17.1 Solutio...

PT-2025-15360 · Unknown · Opplus Springboot-Admin

Name of the Vulnerable Software and Affected Versions: opplus springboot-admin versions up to a2d5310f44fd46780a8686456cf2f9001ab8f024 Description: A critical vulnerability has been found in the function code of the file SysGeneratorController.java. The manipulation of the argument Tables leads t...

PT-2025-20394 · Totolink · Totolink Nr1800X

Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6681 B20230703 Description: The issue is an authenticated stack overflow that occurs via the ssid5g parameter in the setWiFiEasyGuestCfg function. This allows for potential exploitation. Recommendations: For...

PT-2025-15277 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been found in the FEAT Command Handler component of PCMan FTP Server, affecting some unknown functionality. The manipulation leads to buffer overflow, and the attack may be...

PT-2025-15238 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the postID parameter in the edit method. Recommendations: For RUoYi version 4.8.0, consider disabling the edit method until a patch is...

PT-2025-15283 · Libbpf +1 · Libbpf +1

Name of the Vulnerable Software and Affected Versions: libbpf version 1.5.0 Description: The issue is a buffer overflow vulnerability that allows a local attacker to execute arbitrary code via the bpf object init prog function of libbpf. Recommendations: For libbpf version 1.5.0, as a temporary...

Vulnerability of the rkisp1_csi_disable() function in the drivers/media/platform/rockchip/rkisp1/rkisp1-csi.c module – This driver is responsible for supporting multimedia devices in the Linux operating system. An attacker can exploit this vulnerability to cause a service failure.

Vulnerability of the rkisp1csidisable function in the drivers/media/platform/rockchip/rkisp1/rkisp1-csi.c module – The Linux kernel’s multimedia device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to caus...

PT-2025-15275 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical vulnerability has been found in the EPRT Command Handler component of PCMan FTP Server. The manipulation leads to a buffer overflow, which can be launched remotely. The exploit has been...

PT-2025-15292 · Unknown · Xiaozhi-Esp32-Server-Java

Name of the Vulnerable Software and Affected Versions: joey-zhou xiaozhi-esp32-server-java up to a14fe8115842ee42ab5c7a51706b8a85db5200b7 Description: A critical issue has been found in the software, affecting the update function of the "/api/user/update" API endpoint. The manipulation of the sta...

PT-2025-15270 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue affects the CDUP Command Handler component, leading to a buffer overflow. This can be initiated remotely. Recommendations: For PCMan FTP Server version 2.0.7, consider disabling the...

PT-2025-20530

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a problem in the Linux kernel's perf/core subsystem, where a WARN ON ONCE cleanup check could trigger after the initial check passed but before the child event's...

PT-2025-18654 · Totolink · Totolink Cp900L

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP900 version 6.3c.1144 B20190715 Description: The issue is related to a command injection vulnerability in the setUpgradeUboot function via the FileName parameter. This allows attackers to execute arbitrary commands via a crafted...

PT-2025-14840

Name of the Vulnerable Software and Affected Versions bigint-buffer versions 0.0.0 and later Description The issue is related to a Buffer Overflow in the toBigIntLE function, which can be exploited by attackers to crash the application. Recommendations For versions 0.0.0 and later of bigint-buffe...

PT-2025-14833 · Unknown · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hospital Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Hospital Management System. This issue affects unknown code of the file /admin/doctor-specilization.php. The...

PT-2025-14848 · WordPress · Countdown

Name of the Vulnerable Software and Affected Versions: Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress versions up to, and including, 2.8.9.1 Description: The issue allows unauthenticated attackers to include and execute files with specific filenames on the server,...