PT-2025-24171 · Unknown · Giraphix Creative Layouts For Elementor

Name of the Vulnerable Software and Affected Versions: Giraphix Creative Layouts for Elementor versions 1.11 and earlier Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This can lead to various security problems, including data...

CVE-2025-30167

Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared %PROGRAMDATA% directory is searched for configuration files SYSTEMCONFIGPATH and SYSTEMJUPYTERPATH, which may allow users to create configuration...

CVE-2025-5647

A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the function rconscontextbreakpop in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. The attack needs to be approached locally. The...

CVE-2025-5648 Radare2 radiff2 pal.c r_cons_pal_init memory corruption

A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the function rconspalinit in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity...

CVE-2025-5647

Summary (CVE-2025-5647) Radare2 5.9.9’s radiff2 component is affected by a memory corruption bug in the r_cons_context_break_pop function within libr/cons/cons.c. The issue is triggered by manipulating the experimental -T argument, with local access required and a relatively high attack complexit...

CVE-2025-5646 Radare2 radiff2 pal.c r_cons_rainbow_free memory corruption

A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability affects the function rconsrainbowfree in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on...

RCE (Remote Code Execution) com.typesafe.akka:akka-actor_2.11 Dependency in Crowd Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 5.0.0, 5.1.0, and 5.2.0 of Crowd Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 8.1 and a CVSS Vector of CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H allows an unauthenticat...

DoS (Denial of Service) Third-Party Dependency in Crowd Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 6.1.0 and 6.2.0 of Crowd Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated...

PT-2025-23876 · Atheros · Atheos

Name of the Vulnerable Software and Affected Versions: Atheos versions prior to 6.0.4 Description: Atheos is a self-hosted browser-based cloud integrated development environment. The improper use of escapeshellcmd in /components/codegit/traits/execute.php allows argument injection, leading to...

PT-2025-23971 · Unknown · Campcodes Online Recruitment Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Recruitment Management System version 1.0 Description: A critical issue affects the processing of the file "/admin/ajax.php?action=save application". The manipulation of the position id argument leads to SQL injection. The...

PT-2025-23904 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: Radare2 version 5.9.9 Description: A problem has been found in the function r cons rainbow free in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch...

PT-2025-23895 · WordPress · Wp User Frontend Pro

Name of the Vulnerable Software and Affected Versions: WP User Frontend Pro plugin for WordPress versions up to, and including, 4.1.3 Description: The issue is related to insufficient file path validation in the delete avatar ajax function, allowing authenticated attackers with Subscriber-level...

PT-2025-24057 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical vulnerability was found in the HTTP POST Request Handler component of TOTOLINK X15. The issue affects an unknown functionality of the file /boafrm/formDosCfg. The manipulation ...

PT-2025-23899

Name of the Vulnerable Software and Affected Versions Radare2 version 5.9.9 Description A vulnerability was found in Radare2, affecting the function r cons is breaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is...

PT-2025-23937 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue has been found in the XMKD Command Handler component, which can be exploited remotely. The manipulation of this component leads to a buffer overflow. The issue has been publicly...

PT-2025-23903 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: Radare2 version 5.9.9 Description: A problematic vulnerability was found in Radare2, affecting the function r cons pal init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory...

PT-2025-23886 · Unknown · Code-Projects/Anirbandutta9 Content Management System/News-Buzz

Name of the Vulnerable Software and Affected Versions: code-projects/anirbandutta9 Content Management System and News-Buzz version 1.0 Description: A critical issue affects an unknown functionality of the file /admin/users.php. The manipulation of the change to admin argument leads to SQL...

PT-2025-23927 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 2.0 Description: A critical vulnerability was found in the PHPGurukul Complaint Management System. The issue affects an unknown functionality of the file /user/profile.php. The manipulation of th...

PT-2025-23949 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Insight Remote Support versions prior to 7.15.0.646 Description: A vulnerability in HPE Insight Remote Support may allow an unauthenticated denial of service. Recommendations: For versions prior to 7.15.0.646, update to version 7.15.0.646...

PT-2025-23972 · Shenzhen Dashi Tongzhou Information Technology · Agilebpm

Name of the Vulnerable Software and Affected Versions: Shenzhen Dashi Tongzhou Information Technology AgileBPM versions up to 2.5.0 Description: A critical issue has been discovered, affecting the parseStrByFreeMarker function in the file...