PT-2025-15689

Name of the Vulnerable Software and Affected Versions: propanetank Roommate-Bill-Tracking versions up to 288437f658fc9ee7d4b92a9da12557024d8bc55c Description: A critical issue has been found in the code of the /includes/login.php file. The manipulation of the Username argument leads to SQL...

CVE-2017-20197: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

DEBIAN-CVE-2025-3409

A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stbincludestring. The manipulation of the argument pathtoincludes leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This product does not use...

UBUNTU-CVE-2025-3409

A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stbincludestring. The manipulation of the argument pathtoincludes leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This product does not use...

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow through the manipulation of the pathtoincludes argument. Remediation There is no fixed version for stb. References - GitHub Issue...

STB security vulnerabilities

stb is a single-file public domain library of stb for C/C++ by Sean Barrett, an individual developer. A security vulnerability exists in stb that stems from a stack-based buffer overflow due to the parameter pathtoincludes...

PT-2025-9905

Name of the Vulnerable Software and Affected Versions Ad Inserter - Ad Manager and AdSense Ads version 2.8.0 Description The issue arises from the web application dynamically generating web content without validating the source of potentially untrusted data in the file myapp/includes/dst/dst.php...

Linux Distros Unpatched Vulnerability : CVE-2016-2570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Edge Side Includes ESI parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP...

PHPYun security vulnerabilities

PHPYun is an efficient solution for talent and business recruitment and employment based on PHP and MySQL database by China Xinchao PHPYun. A security vulnerability exists in PHPYun versions prior to 7.0.2. An attacker can exploit the vulnerability to perform code execution via backdoor-restricte...

PT-2025-49180

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.30 through 2.4.65 Description An integer overflow occurs during failed ACME certificate renewal. After approximately 30 days of failures with default configurations, the backoff timer reaches zero. Subsequent...

PT-2025-49181

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.66 Description The Apache HTTP Server, when configured with Server Side Includes SSI enabled and utilizing mod cgid but not mod cgi, improperly handles shell-escaped query strings passed to exec cmd=".....

Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

Overview aptrs is an Automated Penetration Testing Reporting System Affected versions of this package are vulnerable to Improper Neutralization of Server-Side Includes SSI Within a Web Page in the web application's handling of user-supplied input in the ckeditor fields that are passed directly to...

ASPECT Enterprise Embedded Network Control File Name Disclosure

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to incorrect management of file names for PHP functions like include or require. Exploiting this vulnerability can allow an attacker to gain acce...

CVE-2024-10316: Exposure of Sensitive Information to an Unauthorized Actor

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.4 in includes/templates/content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract...

PT-2024-16183

Name of the Vulnerable Software and Affected Versions The Stratum – Elementor Widgets plugin for WordPress versions up to, and including, 1.4.4 Description The issue allows authenticated attackers with Contributor-level access and above to extract sensitive private, pending, and draft template da...

squid: Squid: Denial of Service via crafted ESI response content

A flaw was found in Squid. When configured as a reverse proxy with Edge Side Includes ESI enabled, improper input validation and resource handling during the processing of ESI response content allow an upstream server to cause a Denial of Service DoS. By returning specially crafted ESI markup or...

squid: Squid: Denial of Service via crafted ESI response content

A flaw was found in Squid. When configured as a reverse proxy with Edge Side Includes ESI enabled, improper input validation and resource handling during the processing of ESI response content allow an upstream server to cause a Denial of Service DoS. By returning specially crafted ESI markup or...

squid: Squid: Denial of Service via crafted ESI response content

A flaw was found in Squid. When configured as a reverse proxy with Edge Side Includes ESI enabled, improper input validation and resource handling during the processing of ESI response content allow an upstream server to cause a Denial of Service DoS. By returning specially crafted ESI markup or...

squid: Squid: Denial of Service via crafted ESI response content

A flaw was found in Squid. When configured as a reverse proxy with Edge Side Includes ESI enabled, improper input validation and resource handling during the processing of ESI response content allow an upstream server to cause a Denial of Service DoS. By returning specially crafted ESI markup or...

squid: Squid: Denial of Service via crafted ESI response content

A flaw was found in Squid. When configured as a reverse proxy with Edge Side Includes ESI enabled, improper input validation and resource handling during the processing of ESI response content allow an upstream server to cause a Denial of Service DoS. By returning specially crafted ESI markup or...