PT-2026-1206

Name of the Vulnerable Software and Affected Versions UTT 进取 520W version 1.7.7-180627 Description A flaw exists in UTT 进取 520W 1.7.7-180627 related to the strcpy function within the /goform/ConfigAdvideo file. Manipulation of the timestart argument can lead to a buffer overflow, potentially...

OpenCart race condition vulnerabilities

OpenCart is an open source e-commerce system by the OpenCart team in China. The system provides modules for product reviews, product ratings, and product additions. A competitive conditions issue vulnerability exists in OpenCart 4.1.0.3 and prior versions, which stems from competitive conditions...

Splunk Enterprise XSS

The vulnerability of the Splunk Enterprise platform for operational analysis is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

PT-2025-52861

Name of the Vulnerable Software and Affected Versions Online Farm System version 1.0 Description A flaw exists in Online Farm System 1.0 that allows for SQL injection. The issue is located in the /addProduct.php file, specifically through manipulation of the Username argument. This allows for...

Varnish Cache Server HTTP Request Processing

The vulnerability of the Varnish cache server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send arbitrary HTTP requests remotely...

Tenda AX9 security vulnerabilities

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A security vulnerability exists in Tenda AX9 version 22.03.01.46, which originates from the use of a weak hash in the imagecheck function in the httpd component, which could lead to remote attacks...

Tiny RDM code vulnerabilities

Tiny RDM is a desktop manager by Lykin Personal Developers. A code issue vulnerability exists in Tiny RDM 1.2.5 and earlier versions, which stems from a deserialization issue in the pickle.loads function of the pickleconvert.go file in the Pickle Decoding component, which could lead to remote...

Security Bulletin: Vulnerabilities in brace-expansion, tmp, urllib3, pycryptodomex and cross-site request forgery might affect IBM Storage Defender Sentinel Anomaly Scan Engine.

Summary IBM Storage Defender Sentinel Anomaly Scan Engine can be affected by vulnerabilities in brace-expansion, tmp, urllib3, pycryptodomex, and cross-site request forgery. Vulnerabilities include launching remote attacks, arbitrary file and directory writes, obtain sensitive information, disabl...

COMMAX CVD-Axx DVR security vulnerabilities

COMMAX CVD-Axx DVR is a series of digital video recorders from the Korean company COMMAX. A security vulnerability exists in COMMAX CVD-Axx DVR version 5.1.4, which stems from a weak default credentials issue that could lead to remote password attacks and RTSP stream leaks...

Siemens Advanced Licensing (SALT) Toolkit

SUMMARY Multiple Siemens products are affected by improper certificate validation in Siemens Advanced Licensing SALT Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for several affected products and recommends...

JEPaaS Authorization Vulnerability

JEPaaS is a rapid development platform from China's Kate Weiye JEPaaS. An authorization issue vulnerability exists in JEPaaS 7.2.8 and prior versions, which stems from improper authorization and could lead to remote attacks...

Youlai-Mall access control error vulnerability

youlai-mall is a full-stack mall system by youlaitech open source. An access control error vulnerability exists in youlai-mall version 1.0.0 and 2.0.0, which stems from improper access control and could lead to remote attacks...

youlai-mall security vulnerabilities

youlai-mall is a full-stack mall system by youlaitech open source. A security vulnerability exists in youlai-mall version 1.0.0 and 2.0.0, which stems from improper control of dynamic variables and may lead to remote attacks...

Mall access control error vulnerability

mall is an e-commerce system for macro individual developers, including frontend mall system and backend management system. An access control error vulnerability exists in mall 1.0.3 and earlier versions, which stems from improper access control and could lead to remote attacks...

PT-2025-47208

Name of the Vulnerable Software and Affected Versions itsourcecode Web-Based Internet Laboratory Management System version 1.0 Description A SQL injection issue exists in itsourcecode Web-Based Internet Laboratory Management System version 1.0. The issue is located in an unknown functionality of...

Kibana Visualization Library XSS

The vulnerability of the Vega library used by the Kibana data visualization service is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

PT-2025-47079

Name of the Vulnerable Software and Affected Versions code-projects Student Information System version 2.0 Description A cross site scripting issue exists in code-projects Student Information System 2.0. The issue is located in the /register.php file within an unknown function. This manipulation...

PT-2025-47080

Name of the Vulnerable Software and Affected Versions code-projects Student Information System version 2.0 Description A security issue exists in code-projects Student Information System 2.0. The issue involves cross site scripting and impacts an unknown function within the /editprofile.php file...

CVE-2025-12231 projectworlds Expense Management System Expense Categories create cross site scripting

A security vulnerability has been detected in projectworlds Expense Management System 1.0. Affected is an unknown function of the file /public/admin/expensecategories/create of the component Expense Categories Page. Such manipulation leads to cross site scripting. It is possible to launch the...

LearnHouse security vulnerabilities

LearnHouse is an online learning management system open-sourced by LearnHouse. A security vulnerability exists in LearnHouse 98dfad76aad70711a8113f6c1fdabfccf10509ca and prior versions, which originates in file /api/v1/assignments/assignmentid/tasks/taskid/subfile Improper control of resource...