6770 matches found
PT-2025-28472 · Ibm · Ibm Sterling File Gateway +1
Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator versions 6.0.0.0 through 6.1.2.6 IBM Sterling B2B Integrator versions 6.2.0.0 through 6.2.0.4 IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4...
PT-2025-28225
Name of the Vulnerable Software and Affected Versions: gnuboard5 version 5.5.16 Description: The issue is related to an open redirect vulnerability that allows a remote attacker to obtain sensitive information. This is due to insufficient URL parameter verification in the "bbs/logout.php" endpoin...
PT-2025-28252 · Sourcecodester · Sourcecodester Best Pos Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A problematic issue was found in the Update Staff Page component, specifically in the /panel/edit plan.php file, allowing for cross-site scripting. This can be exploited...
PT-2025-28179
Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 8.0.7 MongoDB Server versions prior to 7.0.20 MongoDB Server versions prior to 6.0.22 Description: An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper...
PT-2025-28180
Name of the Vulnerable Software and Affected Versions: MongoDB Server versions 6.0 prior to 6.0.23 MongoDB Server versions 7.0 prior to 7.0.20 MongoDB Server versions 8.0 prior to 8.0.9 Description: The issue affects MongoDB Server's mongos component, causing it to become unresponsive to new...
PT-2025-28234 · Splunk · Splunk Enterprise
Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 9.4.3 Splunk Enterprise versions prior to 9.3.5 Splunk Enterprise versions prior to 9.2.7 Splunk Enterprise versions prior to 9.1.10 Description: A low-privileged user without the "admin" or "power" Splunk...
PT-2025-28236 · Splunk · Splunk Enterprise +1
Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 9.4.3 Splunk Enterprise versions prior to 9.3.5 Splunk Enterprise versions prior to 9.2.7 Splunk Enterprise versions prior to 9.1.10 Splunk Cloud Platform versions prior to 9.3.2411.103 Splunk Cloud Platfor...
PT-2025-28182 · Unknown · Codeastro Online Movie Ticket Booking System
Name of the Vulnerable Software and Affected Versions: CodeAstro Online Movie Ticket Booking System version 1.0 Description: A problematic issue has been discovered, affecting an unknown part of the system, which leads to cross-site request forgery. The attack can be initiated remotely. The explo...
PT-2025-28216 · Wegia · Wegia
Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.3 Description: A Cross-Site Scripting XSS Injection issue was found in WeGIA, a web manager for charitable institutions. The vulnerability is located in the novo memorando.php file. When a memo is submitted, the...
PT-2025-28168 · Unknown +1 · Urlshortener Extension +1
Name of the Vulnerable Software and Affected Versions: Mediawiki - UrlShortener Extension versions 1.42.X through 1.42.6 Mediawiki - UrlShortener Extension versions 1.43.X through 1.43.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known a...
PT-2025-28202 · Dokploy · Dokploy
Name of the Vulnerable Software and Affected Versions: Dokploy versions prior to 0.23.7 Description: Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated low-privileged account can retrieve detailed...
PT-2025-28158 · Unknown · Campcodes Complaint Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complaint Management System version 1.0 Description: A critical issue affects the processing of the file /admin/complaint-details.php, where the manipulation of the cid and uid arguments leads to SQL injection. This issue can be...
PT-2025-28145 · Unknown · Campcodes Complaint Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complaint Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the /users/complaint-details.php file. The manipulation of the cid argument leads to SQL injection. It ...
PT-2025-28200 · Unknown · Educoder Challenges
Name of the Vulnerable Software and Affected Versions: educoder challenges version 1.0 Description: The issue is related to insufficient security mechanisms for created containers, allowing attackers to execute arbitrary code by injecting crafted content into a container. Recommendations: For...
PT-2025-28235 · Splunk · Splunk Enterprise +1
Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 9.4.2 Splunk Enterprise versions prior to 9.3.5 Splunk Enterprise versions prior to 9.2.7 Splunk Enterprise versions prior to 9.1.10 Splunk Cloud Platform versions prior to 9.3.2411.104 Splunk Cloud Platfor...
Exploit for Injection in Cisco Identity_Services_Engine
CVE-2025-20281 — Cisco ISE Critical RCE Vulnerability 🛑...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
CVE-2025-32463 – Privilege Escalation via Sudo chroot 📝 Ov...
PT-2025-28183
Name of the Vulnerable Software and Affected Versions: Redis versions 2.8 through 8.0.3, 7.4.5, 7.2.10, and 6.2.19. Valkey versions up to 8.1.3 and 8.0.4 are also affected. Description: Redis and Valkey are vulnerable to a heap-based buffer overflow in the HyperLogLog functionality. An...
PT-2025-28033
Name of the Vulnerable Software and Affected Versions: Dradis versions through 4.16.0 Description: Dradis allows referencing external images over HTTPS instead of requiring the use of embedded images. This can be exploited by an authorized author to attempt to steal the Net-NTLM hashes of other...
