CVE-2025-5175 erdogant pypickle pypickle.py save improper authorization

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

CVE-2025-5174 erdogant pypickle pypickle.py load deserialization

A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the function load of the file pypickle/pypickle.py. The manipulation leads to deserialization. Local access is required to approach this attack. The exploit has been disclosed to th...

PT-2025-22899 · Tcman · Tcman'S Gim

Name of the Vulnerable Software and Affected Versions: TCMAN's GIM version 11 Description: Time-based blind SQL injection vulnerabilities in TCMAN's GIM allow an attacker to retrieve, create, update, and delete databases through the ArbolID parameter in "/GIMWeb/PC/frmPreventivosList.aspx"...

PT-2025-22940 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue affects the processing of the file /myprofile.php, where the manipulation of the EmpCode argument leads to SQL injection. The attack can be initiated...

PT-2025-22887 · Ibm · Ibm Controller

Name of the Vulnerable Software and Affected Versions: IBM Controller versions 11.0.0 through 11.1.0 Description: The issue allows an authenticated user to obtain sensitive credentials that may be inadvertently included within the source code. Recommendations: For versions 11.0.0 through 11.1.0,...

PT-2025-23638 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002RU version 2.1.1-B20230720.1011 Description: The issue is related to the IP/Port Filtering module of the TOTOLINK A3002RU router's firmware, where the Comment parameter is not properly protected, leading to cross-site scripting...

PT-2025-22906 · Google · Web Designer App +1

Name of the Vulnerable Software and Affected Versions: Google Web Designer versions prior to 16.3.0.0407 Description: The issue allows an attacker to achieve remote code execution by tricking users into downloading a malicious ad template. This is due to path traversal in Google Web Designer's...

PT-2025-22917 · Pypi · Pypickle

Name of the Vulnerable Software and Affected Versions: erdogant pypickle versions 1.1.5 and earlier Description: A critical issue affects the Save function of the file pypickle/pypickle.py, leading to improper authorization. The manipulation requires a local attack, and the exploit has been...

PT-2025-22913 · Llisoft · Llisoft Mta Maita Training System

Name of the Vulnerable Software and Affected Versions: llisoft MTA Maita Training System version 4.5 Description: A critical issue has been found in the this.fileService.download function of the file comllisoftcontrollerOpenController.java. The manipulation of the url argument leads to unrestrict...

PT-2025-22929 · Unknown · Wing Ftp Server

Name of the Vulnerable Software and Affected Versions: Wing FTP Server versions 7.4.0 through 7.4.3 Description: A critical vulnerability has been found in the Lua Admin Console component of Wing FTP Server, allowing execution with unnecessary privileges. The attack can be launched remotely and h...

PT-2025-22927 · Unknown · Summer Pearl Group Vacation Rental Management Platform

Name of the Vulnerable Software and Affected Versions: Summer Pearl Group Vacation Rental Management Platform versions up to 1.0.1 Description: A vulnerability was found in the Summer Pearl Group Vacation Rental Management Platform, affecting an unknown functionality and leading to cross-site...

PT-2025-22885 · Assimp +1 · Assimp +1

Name of the Vulnerable Software and Affected Versions: Open Asset Import Library Assimp version 5.4.3 Description: A problematic vulnerability has been found in Open Asset Import Library Assimp, affecting the function MDLImporter::InternReadFile 3DGS MDL345 of the file...

PT-2025-23626

Name of the Vulnerable Software and Affected Versions TOTOLINK X2000R version 1.0.0-B20230726.1108 Description A critical issue exists in the TOTOLINK X2000R router related to insufficient input validation when processing the peerRptPin parameter. Exploitation of this issue can allow a remote...

PT-2025-22901 · Gestnet · Gestnet

Name of the Vulnerable Software and Affected Versions: Gestnet version 1.07 Description: This issue allows an attacker to retrieve, create, update, and delete databases via the fk remoto central parameter on the "/webservices/articles.php" endpoint. Recommendations: For Gestnet version 1.07, as a...

PT-2025-22916 · Pypi · Pypickle

Name of the Vulnerable Software and Affected Versions: erdogant pypickle versions 1.1.5 and earlier Description: A vulnerability was found in erdogant pypickle, classified as problematic. The issue affects the load function of the file pypickle/pypickle.py, leading to deserialization. Local acces...

PT-2025-22923 · Unknown · Summer Pearl Group Vacation Rental Management Platform

Name of the Vulnerable Software and Affected Versions: Summer Pearl Group Vacation Rental Management Platform version 1.0.1 Description: A vulnerability was found in the Summer Pearl Group Vacation Rental Management Platform, affecting an unknown part of the file /spgpm/updateListing. The...

Fedora: Security Advisory (FEDORA-2024-0d14d0d2f9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4177 : libphp-adodb - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4177 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4177-1 [email protected] https://www.debian.org/lts/security/...

Fedora: Security Advisory (FEDORA-2025-3854530fd9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-0912cd3ad9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...