PT-2025-27200 · Unknown · Gioni Plugin Inspector

Name of the Vulnerable Software and Affected Versions: gioni Plugin Inspector versions n/a through 1.5 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in the gioni Plugin Inspector...

PT-2025-26692

Name of the Vulnerable Software and Affected Versions: WRC-2533GST2 affected versions not specified WRC-1167GST2 affected versions not specified Description: The issue is related to the unrestricted upload of files with dangerous types. If a specially crafted file is uploaded by a remote...

PT-2025-26546 · Unknown · Code-Projects Online Bidding System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Bidding System version 1.0 Description: A critical issue was found in the code, affecting the /bidnow.php file, where the manipulation of the ID argument leads to SQL injection. This issue can be exploited remotely...

On Secure UAV-Aided ISCC Systems

Integrated communication and sensing, which can make full use of the limited spectrum resources to perform communication and sensing tasks simultaneously, is an up-and-coming technology in wireless communication networks. In this work, we investigate the secrecy performance of an uncrewed aerial...

PT-2025-25680 · Mapsvg · Mapsvg

Name of the Vulnerable Software and Affected Versions: MapSVG versions prior to 8.5.32 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can lead to further exploitation and potential control o...

PT-2025-25055 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim browses ...

PT-2025-24937 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: The issue is a reflected Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Wh...

PT-2025-24116 · Unknown · No Spam At All

Name of the Vulnerable Software and Affected Versions: No Spam At All versions 1.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 1.3 and earlier,...

Weblate: exposure of personal IP address via email.

The exposure of personal IP addresses through email messages has been identified as a potential security issue. Email messages can pass through multiple servers, which may store or record the content, including the user's IP address, even if the email is encrypted during transit. The user's IP...

PT-2025-23165 · Tcpreplay +1 · Tcpreplay +1

Name of the Vulnerable Software and Affected Versions: tcpreplay version 4.4.4 Description: The issue is related to an infinite loop in the tcprewrite function, located at get.c. This infinite loop can be triggered, potentially causing the software to become unresponsive. Recommendations: For...

GDPRShield: AI-Powered GDPR Support for Software Developers in Small and Medium-Sized Enterprises

With the rapid increase in privacy violations in modern software development, regulatory frameworks such as the General Data Protection Regulation GDPR have been established to enforce strict data protection practices. However, insufficient privacy awareness among SME software developers...

An Alignment between the CRA'S Essential Requirements and the ATT&CK'S Mitigations

The paper presents an alignment evaluation between the mitigations present in the MITRE's ATT&CK framework and the essential cyber security requirements of the recently introduced Cyber Resilience Act CRA in the European Union. In overall, the two align well with each other. With respect to the...

DNS Query Forgery: a Client-Side Defense against Mobile App Traffic Profiling

Mobile applications continuously generate DNS queries that can reveal sensitive user behavioral patterns even when communications are encrypted. This paper presents a privacy enhancement framework based on query forgery to protect users against profiling attempts that leverage these background...

Schneider Electric Modicon Controllers (Update B)

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...

PT-2025-19949

Name of the Vulnerable Software and Affected Versions Gym Management System version 1.0 Description A critical issue has been found in the Gym Management System, affecting some unknown functionality of the file /view member.php. The manipulation of the ID argument leads to SQL injection. The atta...

PT-2025-17003 · Unknown · Aidraw I Draw

Name of the Vulnerable Software and Affected Versions: aidraw I Draw versions n/a through 1.0 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For versions n/a through 1.0, consider restricting file...

PT-2025-15002 · Unknown · 1-Click Backup & Restore Database

Name of the Vulnerable Software and Affected Versions: 1-Click Backup & Restore Database versions 1.0.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For...

PT-2025-13677 · Code Projects · Code-Projects Payroll Management System

Name of the Vulnerable Software and Affected Versions: code-projects Payroll Management System version 1.0 Description: A critical issue has been found in the system, affecting the file update account.php. The manipulation of the deduction argument leads to SQL injection. This issue can be...

How to Enter the US With Your Digital Privacy Intact

Crossing into the United States has become increasingly dangerous for digital privacy. Here are a few steps you can take to minimize the risk of Customs and Border Protection accessing your data...

Sungrow iSolarCloud Android App, WiNet Firmware

RISK EVALUATION Successful exploitation of these vulnerabilities could result in attackers being able to access and could modify sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:...