EulerOS 2.0 SP10 : vim (EulerOS-SA-2025-1542)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does no...

CVE-2025-46392

A flaw was found in the Apache Commons Configuration. This vulnerability allows uncontrolled resource consumption via loading untrusted configuration files or attacker-controlled usage patterns. Mitigation Mitigation for this issue is either not available or the currently available options do not...

PT-2025-23533 · Unknown +4 · Modsecurity +4

Name of the Vulnerable Software and Affected Versions: ModSecurity versions prior to 2.9.10 Description: The issue is a denial of service vulnerability. It affects the sanitiseArg and its alias sanitizeArg action, which is vulnerable to adding an excessive number of arguments, leading to denial o...

PT-2025-20664 · Unknown · Freeebird Hotel

Name of the Vulnerable Software and Affected Versions: Freeebird Hotel 酒店管理系统 API versions up to 1.2 Description: A problematic issue has been found in the API, affecting some unknown functionality of the file /src/main/java/cn/mafangui/hotel/tool/SessionInterceptor.java. This leads to a permissi...

PT-2025-20662 · Mtsoftware · C-Lodop

Name of the Vulnerable Software and Affected Versions: MTSoftware C-Lodop versions 6.6.1.1 through 6.6.12 Description: A critical issue affects some unknown processing of the component CLodopPrintService, leading to an unquoted search path. The attack needs to be approached locally, with a rather...

PT-2025-26267 · Totolink · Totolink N150Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical issue has been discovered, affecting an unknown part of the file /boa/formWSC. The manipulation of the targetAPSsid argument leads to os command injection. This issue can be...

PT-2025-27480

Name of the Vulnerable Software and Affected Versions Wing FTP Server versions prior to 7.4.4 Description Wing FTP Server is affected by a critical remote code execution RCE vulnerability CVE-2025-47812 stemming from improper handling of null bytes '0' in the web interfaces. This allows attackers...

PT-2025-20645 · Bluewave · Bluewave Checkmate

Name of the Vulnerable Software and Affected Versions: BlueWave Checkmate versions 2.0.2 and earlier, before b387eba Description: The issue allows a profile edit request to include a role parameter. This is related to the external control of assumed-immutable web parameters. Recommendations: For...

PT-2025-20607 · Totolink · Totolink T10 +6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R versions 4.1.8cu.5241 B20210927 Description: A critical vulnerability exists in the CloudACMunualUpdate function of the /cgi-bin/cstecgi.cgi file in the affected devices. The...

PT-2025-20646

Name of the Vulnerable Software and Affected Versions Discord version 1.0.9188 Description A critical issue has been found in Discord, affecting some unknown functionality in the library WINSTA.dll. This issue leads to an uncontrolled search path. The attack must be approached locally and has a...

CVE-2023-7303

A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function processrequest of the file q2apro-onsitenotifications-page.php. The manipulation leads to cross site scripting. It is possible to initiate the attack...

CVE-2025-46392 Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

CVE-2025-46392 Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

CVE-2025-46392 Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

PT-2025-20548 · Apache +1 · Apache Commons Configuration +1

Name of the Vulnerable Software and Affected Versions: Apache Commons Configuration versions 1.x Description: The issue is related to Uncontrolled Resource Consumption in Apache Commons Configuration 1.x, which can lead to excessive resource consumption when loading untrusted configurations or...

PT-2025-20480

Name of the Vulnerable Software and Affected Versions itsourcecode Gym Management System version 1.0 Description A critical issue has been found in the system, affecting an unknown functionality of the file "/ajax.php?action=save plan". The manipulation of the plan argument leads to SQL injection...

PT-2025-22456 · Zohocorp · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior Description: The issue concerns an authenticated SQL injection in the logon events aggregate report. Recommendations: For Zohocorp ManageEngine ADAudit Plus versions 8510 and prior,...

PT-2025-20547 · Unknown · Code-Projects Departmental Store Management System

Name of the Vulnerable Software and Affected Versions: code-projects Departmental Store Management System version 1.0 Description: A critical issue was found in the function bill. The manipulation of the Item Code argument leads to a stack-based buffer overflow. This issue can be exploited locall...

PT-2025-20484 · Unknown · Imithemes Listing

Name of the Vulnerable Software and Affected Versions: IMITHEMES Listing plugin versions up to, and including, 3.3 Description: The issue is related to privilege escalation via account takeover. This is due to the plugin not properly validating a verification code value prior to updating a user's...

PT-2025-20475 · Sparx Systems · Sparx Systems Pro Cloud Server

Name of the Vulnerable Software and Affected Versions: Sparx Systems Pro Cloud Server versions earlier than 6.0.165 Description: The issue is caused by an Improper Limitation of a Pathname, leading to a Path Traversal vulnerability in Sparx Systems Pro Cloud Server. This vulnerability is present ...