PT-2025-28198 · Samsung · Exynos 2400 +1

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor and Modem Exynos 2400 Samsung Mobile Processor and Modem Modem 5400 Description: An issue was discovered in L2, where the lack of a length check leads to a Denial of Service via a malformed PDCP packet. Recommendation...

PT-2025-28070 · 07Flycms +1 · 07Flycms +1

Name of the Vulnerable Software and Affected Versions: 07FLYCMS versions up to 1.3.9 07FLY-CMS versions up to 1.3.9 07FlyCRM versions up to 1.3.9 Description: A vulnerability was found in the software, affecting unknown code and leading to cross-site request forgery. The attack can be initiated...

PT-2025-27923 · Unknown · Fw Gallery

Name of the Vulnerable Software and Affected Versions: FW Gallery versions n/a through 8.0.0 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For FW Gallery versions n/a through 8.0.0, consider restricti...

PT-2025-27632 · Winstar · Winstar Wn572Hp3

Name of the Vulnerable Software and Affected Versions: WINSTAR WN572HP3 version v230525 Description: A heap overflow issue was discovered via the CONTENT LENGTH variable at the "/cgi-bin/upload.cgi" API endpoint. Recommendations: For WINSTAR WN572HP3 version v230525, consider disabling access to...

PT-2025-27502 · Unknown · Code-Projects Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Pizza Ordering System version 1.0 Description: A critical issue affects the processing of the file /editcus.php. The manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely. The exploi...

PT-2025-27524 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS versions up to 2.7.5 Description: A problematic issue has been found in Open5GS, affecting the amf state operational function of the file src/amf/amf-sm.c in the AMF Service component. This issue leads to a reachable assertion and can...

PT-2025-27404 · Unknown · Phpgurukul Teachers Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Teachers Record Management System version 2.1 Description: A critical issue was found in the system, affecting an unknown function of the file /admin/edit-teacher-detail.php. The manipulation of the tid argument leads to SQL...

PT-2025-28069 · Shenzhen Libituo Technology Co. · Lbt-T300-T310

Name of the Vulnerable Software and Affected Versions: Shenzhen Libituo Technology LBT-T300-T310 versions up to 2.2.3.6 Description: A critical vulnerability has been found in the affected software. This issue affects the config 3g para function of the file /appy.cgi. The manipulation of the...

PT-2025-27398 · D Link · D-Link Di-8100

Name of the Vulnerable Software and Affected Versions: D-Link DI-8100 version 16.07.21 Description: A critical issue affects some unknown functionality of the file /pppoe base.asp of the component jhttpd. The manipulation of the mschap en argument leads to a buffer overflow. This issue can be...

PT-2025-28160 · Unknown · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Management System version 1.0 Description: A critical issue was found in the itsourcecode Employee Management System. The issue affects an unknown functionality of the file /admin/editempeducation.php. The manipulation o...

PT-2025-27196 · Unknown · Morten Dalgaard Johansen Dashboard Widget Sidebar

Name of the Vulnerable Software and Affected Versions: Morten Dalgaard Johansen Dashboard Widget Sidebar versions 1.2.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels...

PT-2025-26831 · Unknown · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue was found in the software. It affects an unknown function of the file /panel/stock.php. The manipulation of the ID argument leads to SQL injection. This iss...

PT-2025-26860 · Unknown · Gitforge.Jl

Name of the Vulnerable Software and Affected Versions: GitForge.jl versions prior to 5.9.1 Description: The issue is related to a lack of input validation for user-provided values in certain functions. Specifically, in the GitHub.repo function, the repo name field can be set to any string, which ...

PT-2025-29297

Name of the Vulnerable Software and Affected Versions: Artifex GhostPDL versions prior to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145 Description: A problematic issue exists in Artifex GhostPDL related to a null pointer dereference. The issue is located in the pdf ferror function within the...

PT-2025-26748 · Unknown · Os4Ed Open Source Information System Community

Name of the Vulnerable Software and Affected Versions: OS4Ed Open Source Information System Community version 8.0 Description: A SQL injection issue exists via the student id and TRANSFERSCHOOL parameters in a POST request sent to "/TransferredOutModal.php" API endpoint. Recommendations: For OS4E...

PT-2025-26735 · Oatpp · Oatpp

Name of the Vulnerable Software and Affected Versions: oatpp Oat++ versions up to 1.3.1 Description: A critical vulnerability has been found, affecting the deserializeArray function in the file src/oatpp/json/Deserializer.cpp. This issue leads to a stack-based buffer overflow and can be initiated...

PT-2025-28021

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.14.6 Description: A problematic issue has been found in HDF5, affecting the function H5FL malloc of the file src/H5FL.c. This issue leads to a memory leak and requires local attacking to exploit. The exploit has been disclosed ...

PT-2025-26610 · Ncr · Ncr Terminal Handler

Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: The issue allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts via a crafted session cookie. Recommendations: For NCR Terminal Handler...

sparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflow

Withdrawn Advisory This advisory has been withdrawn because the affected code was never included in a release. This link has been maintained to preserve external references. Original Description A vulnerability was found in sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833 and...

GHSA-PF9W-GVCF-GV7M sparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflow

Withdrawn Advisory This advisory has been withdrawn because the affected code was never included in a release. This link has been maintained to preserve external references. Original Description A vulnerability was found in sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833 and...