CVE-2025-6490 sparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflow

A vulnerability was found in sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833 and classified as problematic. This issue affects the function hashmapsetwithhash of the file gumbo-parser/src/hashmap.c. The manipulation leads to heap-based buffer overflow. An attack has to be approach...

CVE-2025-6451

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/deletepending.php. The manipulation of the argument transactionid leads to sql injection. The attack can be initiated...

CVE-2025-6451 code-projects Simple Online Hotel Reservation System delete_pending.php sql injection

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/deletepending.php. The manipulation of the argument transactionid leads to sql injection. The attack can be initiated...

PT-2025-26559 · Code Projects · Code-Projects Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Pizza Ordering System version 1.0 Description: A critical issue has been found in the processing of the file /update.php, where the manipulation of the ID argument leads to SQL injection. This issue can be exploited...

PT-2025-26571 · Sparklemotion +1 · Nokogiri +1

Name of the Vulnerable Software and Affected Versions: sparklemotion nokogiri versions up to 1.18.7 Description: A vulnerability was found in sparklemotion nokogiri, affecting the function hashmap get with hash of the file gumbo-parser/src/hashmap.c. The manipulation leads to heap-based buffer...

PT-2025-26536 · Unknown · Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A critical issue was found in the Simple Online Hotel Reservation System. This issue affects an unknown part of the file /admin/confirm reserve.php. The manipulatio...

PT-2025-26287 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue has been discovered in the /admin/confirm.php file, where manipulation of the ID argument leads to SQL injection. This can be initiated remotely. The exploit has been...

PT-2025-26442 · Itsourcecode · Itsourcecode Employee Record Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Record Management System version 1.0 Description: A critical issue affects the processing of the file /editprofile.php. The manipulation of the emp1name argument leads to SQL injection. The attack may be initiated...

PT-2025-26472 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical issue affects the function formSetEmail of the file /goform/formSetEmail. The manipulation of the argument curTime/config.smtp email subject leads to stack-based buffer overflow. The...

PT-2025-26099

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc2-15930-g875cc8bc536a Description The issue is related to the Linux kernel, specifically with the drm/msm/mdp5 module. It involves a problem with the global state lock backoff, where the lock is not...

PT-2025-26157 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10.0.aarch64 Description: A read out-of-bounds error was reported in the Linux kernel, specifically in the neon poly1305 blocks function. This issue can be reproduced with a specially crafted code compiled as ...

PT-2025-26091 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns an uninitialized variable use in the wil write file wmi function. A commit changed simple write to buffer to memdup user, but forgot to update the return value,...

ash_authentication_phoenix has Insufficient Session Expiration

Impact Session tokens remain valid on the server after user logout, creating a security gap where: - Compromised tokens via XSS, network interception, or device theft continue to work even after the user logs out - The sessions stored in the database still expire, limiting the duration during whi...

CVE-2025-6152

A vulnerability, which was classified as critical, was found in Steel Browser up to 0.1.3. This affects the function handleFileUpload of the file api/src/modules/files/files.routes.ts. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotel...

PT-2025-25737 · Unknown · Miliaris Amigdala

Name of the Vulnerable Software and Affected Versions: Miliaris Amigdala version 2.2.6 Description: A cross-site scripting XSS issue in the e-mail manager function allows attackers to execute arbitrary HTML in the context of a user's browser via a crafted payload. This could potentially lead to...

PT-2025-25533 · Unknown · Customer Support System

Name of the Vulnerable Software and Affected Versions: Customer Support System version 1.0 Description: This issue allows an authenticated attacker to retrieve, create, update, and delete databases via the id parameter in the "/customer support/manage user.php" endpoint. Recommendations: For...

PT-2025-25472 · Unknown +1 · Diot Scada +2

Name of the Vulnerable Software and Affected Versions: DIOT SCADA with MQTT plugin for WordPress versions up to, and including, 1.0.5.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes in the...

PT-2025-25494 · Ibm · Ibm Security Verify Directory Container

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Directory Container versions 10.0.0.0 through 10.0.3.1 Description: The issue allows a local user to execute commands as root due to execution with unnecessary privileges. This is related to the execution of commands with...

PT-2025-25413 · Unknown · Openc3 Cosmos

Name of the Vulnerable Software and Affected Versions: OpenC3 COSMOS version 6.0.0 Description: The issue allows attackers to execute a directory traversal in the "openc3-api/tables" endpoint. Recommendations: For OpenC3 COSMOS version 6.0.0, consider restricting access to the "openc3-api/tables"...

PT-2025-25411 · Openc3 · Openc3 Cosmos

Name of the Vulnerable Software and Affected Versions: OpenC3 COSMOS version 6.0.0 Description: A cross-site scripting XSS vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter. Recommendations: For OpenC3 COSMOS version...