785 matches found
PT-2025-19827 · Unknown · Phpgurukul Art Gallery Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: A critical issue affects an unknown functionality of the file /admin/add-art-type.php. The manipulation of the arttype argument leads to SQL injection. This issue can be...
CVE-2025-4287 PyTorch nccl.py torch.cuda.nccl.reduce denial of service
A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function torch.cuda.nccl.reduce of the file torch/cuda/nccl.py. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has bee...
PT-2025-19779 · Hope-Boot · Hope-Boot
Name of the Vulnerable Software and Affected Versions: hope-boot version 1.0.0 Description: The issue is related to incorrect access control in the "/user/edit/" component, which allows attackers to bypass authentication by sending a crafted GET request. Recommendations: For hope-boot version...
A Slicing-Based Approach for Detecting and Patching Vulnerable Code Clones
Code cloning is a common practice in software development, but it poses significant security risks by propagating vulnerabilities across cloned segments. To address this challenge, we introduce srcVul, a scalable, precise detection approach that combines program slicing with Locality-Sensitive...
PT-2025-19803 · Ideacms · Ideacms
Name of the Vulnerable Software and Affected Versions: IdeaCMS versions up to 1.6 Description: A critical vulnerability was found in IdeaCMS, affecting the saveUpload function. This vulnerability allows for unrestricted upload and can be exploited remotely. The exploit has been disclosed to the...
PT-2025-19769 · Misskey · Misskey
Name of the Vulnerable Software and Affected Versions: Misskey versions 12.0.0 through 2025.4.0 Description: The issue arises from an oversight in validation performed in UrlPreviewService and MkUrlPreview, allowing an attacker to inject arbitrary CSS into the MkUrlPreview component. This can lea...
PT-2025-19794 · Pytorch +1 · Pytorch +1
Name of the Vulnerable Software and Affected Versions: PyTorch version 2.6.0+cu124 Description: A vulnerability was found in PyTorch, affecting the function torch.cuda.nccl.reduce of the file torch/cuda/nccl.py. This issue leads to denial of service and can be exploited on the local host. The...
PT-2025-19724 · NetGear · Netgear Rax5
Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the iface parameter in the vif enable function. This allows for potential exploitation. Recommendations: For versio...
PT-2025-18938 · Gnu +1 · Gnu Pspp +1
Name of the Vulnerable Software and Affected Versions: GNU PSPP versions through 2.0.1 Description: The issue allows attackers to cause a denial of service, resulting in an application exit, via crafted input data. This can be triggered by specific data that causes a call from the...
PT-2025-18955 · Unknown · Code-Projects Online Bus Reservation Site
Name of the Vulnerable Software and Affected Versions: code-projects Online Bus Reservation System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /print.php. The manipulation of the ID argument leads to SQL injection. The...
PT-2025-18924 · FFmpeg +1 · Ffmpeg +1
Name of the Vulnerable Software and Affected Versions: ffmpeg version 7.1 Description: The issue is related to a Null Pointer Dereference in the iamf read header function located in /libavformat/iamfdec.c. This is a general information about the problem, but specific details about the number of...
PT-2025-18589 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the net: gso module. The issue occurs when the gso size of a GRO packet is changed, and the frag list contains skbs wi...
CVE-2025-4003
A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB. It has been classified as problematic. This affects the function InternalApfsTranslateBlock of the file Library/RPApfsLib/RPApfsIo.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the...
PT-2025-18166 · Unknown · Scriptandtools Online-Travling-System
Name of the Vulnerable Software and Affected Versions: ScriptAndTools Online-Travling-System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /admin/viewenquiry.php, leading to improper access controls. The manipulation can be initiated remotely...
PT-2025-18204 · Unknown · Phpgurukul Online Nurse Hiring System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Nurse Hiring System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /admin/view-request.php. The manipulation of the viewid argument leads to SQL injection. This...
CVE-2025-4003
CVE-2025-4003 affects RefindPlus 0.14.2.AB. The vulnerability is in InternalApfsTranslateBlock of RP_ApfsIo.c and causes a null pointer dereference, enabling an attack on the local host. A patch named 4d35125ca689a255647e9033dd60c257d26df7cb exists and should be applied to remediate. Some sources...
PT-2025-18040 · Unknown · Refindplus
Name of the Vulnerable Software and Affected Versions: RefindPlus versions 0.14.2.AB Description: A vulnerability was found in RefindPlus, classified as problematic. The issue affects the GetDebugLogFile function of the file Library/MemLogLib/BootLog.c, leading to a null pointer dereference. Loca...
PT-2025-18041 · Unknown · Refindplus
Name of the Vulnerable Software and Affected Versions: RefindPlus versions 0.14.2.AB Description: A vulnerability was found in RefindPlus, affecting the InternalApfsTranslateBlock function of the file Library/RP ApfsLib/RP ApfsIo.c. The manipulation leads to null pointer dereference. It is possib...
PT-2025-18113 · Novel · Novel
Name of the Vulnerable Software and Affected Versions: 201206030 Novel version 3.5.0 Description: A critical issue affects the function updateBookChapter of the file src/main/java/io/github/xxyopen/novel/controller/author/AuthorController.java of the component Chapter Handler, leading to improper...
