GHSA-PF9W-GVCF-GV7M sparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflow

Withdrawn Advisory This advisory has been withdrawn because the affected code was never included in a release. This link has been maintained to preserve external references. Original Description A vulnerability was found in sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833 and...

CVE-2025-6490 sparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflow

A vulnerability was found in sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833 and classified as problematic. This issue affects the function hashmapsetwithhash of the file gumbo-parser/src/hashmap.c. The manipulation leads to heap-based buffer overflow. An attack has to be approach...

CVE-2025-6451

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/deletepending.php. The manipulation of the argument transactionid leads to sql injection. The attack can be initiated...

CVE-2025-6451 code-projects Simple Online Hotel Reservation System delete_pending.php sql injection

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/deletepending.php. The manipulation of the argument transactionid leads to sql injection. The attack can be initiated...

PT-2025-26559 · Code Projects · Code-Projects Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Pizza Ordering System version 1.0 Description: A critical issue has been found in the processing of the file /update.php, where the manipulation of the ID argument leads to SQL injection. This issue can be exploited...

PT-2025-26571 · Sparklemotion +1 · Nokogiri +1

Name of the Vulnerable Software and Affected Versions: sparklemotion nokogiri versions up to 1.18.7 Description: A vulnerability was found in sparklemotion nokogiri, affecting the function hashmap get with hash of the file gumbo-parser/src/hashmap.c. The manipulation leads to heap-based buffer...

PT-2025-26536 · Unknown · Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A critical issue was found in the Simple Online Hotel Reservation System. This issue affects an unknown part of the file /admin/confirm reserve.php. The manipulatio...

PT-2025-26442 · Itsourcecode · Itsourcecode Employee Record Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Record Management System version 1.0 Description: A critical issue affects the processing of the file /editprofile.php. The manipulation of the emp1name argument leads to SQL injection. The attack may be initiated...

PT-2025-26287 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue has been discovered in the /admin/confirm.php file, where manipulation of the ID argument leads to SQL injection. This can be initiated remotely. The exploit has been...

PT-2025-26472 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical issue affects the function formSetEmail of the file /goform/formSetEmail. The manipulation of the argument curTime/config.smtp email subject leads to stack-based buffer overflow. The...

PT-2025-26099

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc2-15930-g875cc8bc536a Description The issue is related to the Linux kernel, specifically with the drm/msm/mdp5 module. It involves a problem with the global state lock backoff, where the lock is not...

PT-2025-26157 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10.0.aarch64 Description: A read out-of-bounds error was reported in the Linux kernel, specifically in the neon poly1305 blocks function. This issue can be reproduced with a specially crafted code compiled as ...

PT-2025-26091 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns an uninitialized variable use in the wil write file wmi function. A commit changed simple write to buffer to memdup user, but forgot to update the return value,...

ash_authentication_phoenix has Insufficient Session Expiration

Impact Session tokens remain valid on the server after user logout, creating a security gap where: - Compromised tokens via XSS, network interception, or device theft continue to work even after the user logs out - The sessions stored in the database still expire, limiting the duration during whi...

CVE-2025-6152

A vulnerability, which was classified as critical, was found in Steel Browser up to 0.1.3. This affects the function handleFileUpload of the file api/src/modules/files/files.routes.ts. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotel...

PT-2025-25737 · Unknown · Miliaris Amigdala

Name of the Vulnerable Software and Affected Versions: Miliaris Amigdala version 2.2.6 Description: A cross-site scripting XSS issue in the e-mail manager function allows attackers to execute arbitrary HTML in the context of a user's browser via a crafted payload. This could potentially lead to...

PT-2025-25533

Name of the Vulnerable Software and Affected Versions Customer Support System version 1.0 Description This issue allows an authenticated attacker to retrieve, create, update, and delete databases via the id parameter in the "/customer support/manage user.php" endpoint. Recommendations For Custome...

PT-2025-25472 · Unknown +1 · Diot Scada +2

Name of the Vulnerable Software and Affected Versions: DIOT SCADA with MQTT plugin for WordPress versions up to, and including, 1.0.5.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes in the...

PT-2025-25494 · Ibm · Ibm Security Verify Directory Container

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Directory Container versions 10.0.0.0 through 10.0.3.1 Description: The issue allows a local user to execute commands as root due to execution with unnecessary privileges. This is related to the execution of commands with...

PT-2025-25413

Name of the Vulnerable Software and Affected Versions OpenC3 COSMOS version 6.0.0 Description The issue allows attackers to execute a directory traversal in the "openc3-api/tables" endpoint. Recommendations For OpenC3 COSMOS version 6.0.0, consider restricting access to the "openc3-api/tables"...