PT-2025-23746

Name of the Vulnerable Software and Affected Versions Samsung Cloud for Galaxy Watch versions prior to SMR Jun-2025 Release 1 Description The issue is related to an incorrect default permission setting in Samsung Cloud for Galaxy Watch, allowing local attackers to access data. This could...

PT-2025-23755

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 28.0.0.59 Description The issue arises from improper handling of insufficient permission in SyncClientProvider, allowing local attackers to access and modify arbitrary files. This affects Samsung Internet...

PT-2025-23786 · Unknown · Phpgurukul Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A critical issue affects an unknown functionality of the /search-product.php file. The manipulation of the productname argument leads to SQL injection. This issue can be...

PT-2025-23747

Name of the Vulnerable Software and Affected Versions ThemeManager versions prior to SMR Jun-2025 Release 1 Description The issue is related to improper privilege management, allowing local privileged attackers to reuse trial items. This could potentially be exploited by attackers with local...

PT-2025-23799 · Oscommerce · Oscommerce

Name of the Vulnerable Software and Affected Versions: osCommerce version 4 Description: The issue is a Reflected Cross-Site Scripting XSS that allows an attacker to execute JavaScript code in the victim's browser. This can be achieved by sending a malicious URL using any parameter name in the...

PT-2025-23869 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical vulnerability has been found in PHPGurukul Online Fire Reporting System. This affects an unknown part of the file /admin/manage-teams.php. The manipulation of the...

PT-2025-23815 · Unknown · Motivian Content Management System

Name of the Vulnerable Software and Affected Versions: Motivian Content Management System version 41.0.0 Description: The issue allows a remote attacker to execute arbitrary code via the Marketing/Forms, Marketing/Offers, and Content/Pages components. This is a Cross Site Scripting vulnerability...

PT-2025-23762

Name of the Vulnerable Software and Affected Versions kro Kube Resource Orchestrator versions 0.1.0 through 0.2.1 Description The issue allows users with permission to create or modify ResourceGraphDefinition resources to supply arbitrary container images. This can lead to a confused-deputy...

PT-2025-23753 · Samsung · Libsecimaging.Camera.Samsung.So

Name of the Vulnerable Software and Affected Versions: libsecimaging.camera.samsung.so versions prior to SMR Feb-2025 Release 1 Description: The issue is an out-of-bound read that allows local attackers to read out-of-bounds memory. This can be exploited by local attackers. Recommendations: For...

PT-2025-23835 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5232 B20210713 Description: A critical vulnerability has been found in the setLanguageCfg function of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument LangType leads to a stack-based buffer...

PT-2025-23775 · Joomla · Rsform!Pro

Name of the Vulnerable Software and Affected Versions: RSform!Pro component versions 3.0.0 through 3.3.13 for Joomla Description: A reflected XSS issue was discovered, arising from the improper handling of the filterdateFrom GET parameter, which is reflected unescaped in the administrative backen...

PT-2025-23791 · Unknown · Codeastro Real Estate Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System version 1.0 Description: A critical vulnerability has been found in the CodeAstro Real Estate Management System. The issue affects an unknown function of the file /register.php, leading to SQL injection...

PT-2025-23731 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical vulnerability was found in the SYSTEM Command Handler component of FreeFloat FTP Server, which can be exploited remotely. The issue leads to a buffer overflow. The exploit has been...

PT-2025-23854

Name of the Vulnerable Software and Affected Versions Listmonk versions 2.4.0 through 4.1.0 Description The issue allows attackers to escalate privileges through SQL Injection in the QuerySubscribers function. Recommendations For versions 2.4.0 through 4.1.0, consider disabling the QuerySubscribe...

PT-2025-23816 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical vulnerability has been found in the SET Command Handler component of FreeFloat FTP Server, leading to a buffer overflow. The attack can be initiated remotely, and the exploit has been...

CVE-2025-5520 Open5GS AMF/MME emm_state_authentication assertion

A vulnerability was found in Open5GS up to 2.7.3. It has been classified as problematic. Affected is the function gmmstateauthentication/emmstateauthentication of the component AMF/MME. The manipulation leads to reachable assertion. It is possible to launch the attack remotely. The exploit has be...

[SECURITY] [DLA 4199-1] tcpdf security update

Debian LTS Advisory DLA-4199-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón May 31, 2025 https://wiki.debian.org/LTS Package : tcpdf Version : 6.3.5+dfsg1-1+deb11u1 CVE ID : CVE-2024-22640 CVE-2024-22641 CVE-2024-32489 CVE-2024-51058 CVE-2024-56519...

CVE-2025-5499 slackero phpwcms image_resized.php getimagesize deserialization

A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function isfile/getimagesize of the file imageresized.php. The manipulation of the argument imgfile leads to deserialization. It is possible to launch the attack remotely. The exploit ha...

CVE-2025-5497 slackero phpwcms Feedimport processing.inc.php deserialization

A vulnerability was detected in slackero phpwcms up to 1.9.45/1.10.8. The impacted element is an unknown function of the file include/incmodule/modfeedimport/inc/processing.inc.php of the component Feedimport Module. Performing manipulation of the argument cnttext results in deserialization. The...

PT-2025-23654

Name of the Vulnerable Software and Affected Versions Multer versions 1.4.4-lts.1 through 2.0.0 Description A Denial of Service DoS issue is present, allowing an attacker to crash the process by sending an upload file request with an empty string field name, causing an unhandled exception...