CVE-2025-12198

...

EUVD-2025-36061

A vulnerability has been found in dnsmasq up to 2.73rc6. Affected is the function parsehex of the file src/util.c of the component Config File Handler. The manipulation of the argument i leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been...

PT-2025-43994

Name of the Vulnerable Software and Affected Versions Simple Food Ordering System version 1.0 Description A weakness exists in the processing of the /addcategory.php file. Manipulation of the cname argument can lead to cross site scripting. The attack can be initiated remotely. The exploit has be...

PT-2025-44045

Name of the Vulnerable Software and Affected Versions shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5 Description A SQL injection issue exists in the POST Request Handler component of shawon100 RUET OJ. The issue is located in the file /process.php and is triggered by manipulatin...

PT-2025-44022

Name of the Vulnerable Software and Affected Versions VirtFusion versions through 6.0.2 Description A security issue exists in VirtFusion that relates to improper restriction of excessive authentication attempts. The issue is located within the Email Change Handler component, specifically affecti...

PT-2025-43955

Name of the Vulnerable Software and Affected Versions code-projects Client Details System version 1.0 Description A security flaw exists that allows for authorization bypass. The issue is located within an unknown function and can be exploited remotely. The exploit for this issue has been publicl...

PT-2025-43867

Name of the Vulnerable Software and Affected Versions Kamailio version 5.5 Description A flaw exists in Kamailio 5.5 within the Grammar Rule Handler component, specifically in the yyerror at function located in the src/core/cfg.y file. This issue can lead to a null pointer dereference. Exploitati...

PT-2025-44050

Name of the Vulnerable Software and Affected Versions shawon100 RUET OJ versions up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5 Description A SQL injection issue exists in shawon100 RUET OJ. Manipulation of the Name argument in the /contestproblem.php file can lead to SQL injection. The attack ca...

PT-2025-43912

Name of the Vulnerable Software and Affected Versions AMTT Hotel Broadband Operation System version 1.0 Description A flaw exists in AMTT Hotel Broadband Operation System that allows for SQL injection. This issue is related to an unknown functionality within the /user/portal/get expiredtime.php...

PT-2025-43888

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A flaw exists in the fromSafeClientFilter function within the /goform/SafeClientFilter file. Manipulating the page argument can lead to a buffer overflow. This issue is remotely exploitable, and a public...

PT-2025-43757

Name of the Vulnerable Software and Affected Versions dnsmasq versions up to 2.73rc6 Description A flaw exists in dnsmasq that involves a null pointer dereference within the check servers function, located in the src/network.c file of the Config File Handler component. This issue can be triggered...

PT-2025-43861

Name of the Vulnerable Software and Affected Versions givanz Vvveb versions up to 1.0.7.3 Description A weakness exists in givanz Vvveb related to path traversal. This issue affects the sanitizeFileName function within the system/functions.php file of the Code Editor component. Manipulation of th...

PT-2025-43760

Name of the Vulnerable Software and Affected Versions ajayrandhawa User-Management-PHP-MYSQL web affected versions not specified Description A security flaw exists in ajayrandhawa User-Management-PHP-MYSQL web. The issue involves cross-site request forgery, allowing remote attackers to perform...

PT-2025-44018

A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to t...

PT-2025-43991

Name of the Vulnerable Software and Affected Versions code-projects Simple Food Ordering System version 1.0 Description A security issue exists in code-projects Simple Food Ordering System 1.0. The issue is related to cross site scripting, which can be triggered by manipulating the pname argument...

PT-2025-43896

Name of the Vulnerable Software and Affected Versions TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description A security issue exists in TOTOLINK A3300R 17.0.0cu.557 B20221024. The setDmzCfg function within the /cgi-bin/cstecgi.cgi file is susceptible to a buffer overflow when the ip argument ...

PT-2025-44016

Name of the Vulnerable Software and Affected Versions code-projects Nero Social Networking Site version 1.0 Description A flaw exists in code-projects Nero Social Networking Site 1.0, specifically within the /addfriend.php file. Manipulating the ID argument can lead to a SQL injection. This issue...

PT-2025-44061

Name of the Vulnerable Software and Affected Versions code-projects E-Commerce Website version 1.0 Description A flaw exists in code-projects E-Commerce Website 1.0 that allows for cross site scripting. The issue is located in the /pages/product add.php file. Manipulation of the prod name, prod...

PT-2025-43865

Name of the Vulnerable Software and Affected Versions Kamailio version 5.5 Description A flaw exists in Kamailio that involves a use-after-free condition. This issue is located within the Configuration File Handler component, specifically in the sr push yy state function of the src/core/cfg.lex...

PT-2025-43954

Name of the Vulnerable Software and Affected Versions code-projects Client Details System version 1.0 Description A security issue exists in code-projects Client Details System 1.0. The issue involves cross site scripting, potentially allowing remote attackers to compromise the system. The affect...