PT-2025-36442

Name of the Vulnerable Software and Affected Versions: SourceCodester Pet Grooming Management Software version 1.0 Description: A security vulnerability exists in SourceCodester Pet Grooming Management Software version 1.0. The vulnerability is a SQL injection that affects an unknown function...

SourceCodester Pet Grooming Management Software SQL Injection Vulnerability

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. SourceCodester Pet Grooming Management Software version 1.0 suffers from a SQL injection vulnerability that originates from improper handling of parameters in the...

Google Android path traversal vulnerability (CNVD-2025-21374)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a path traversal vulnerability that can be exploited by an attacker to cause a local denial of service...

CVE-2025-41043

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAppReportCodeid' and 'dataAppReportCodename' parameters in /apprain/appreport/manage/...

ossindex-maven-plugin

It is an offensive tool for dependency audit. The primary CVE ID is not present in the provided context. The target product/service or framework is Maven, and the vulnerability class/vector is dependency audit. Notable dependencies/tooling include the OSS Index REST API v2.0. The execution contex...

Exploit for CVE-2021-34527

A PrintNightmare CVE-2021-34527 Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE not the LPE and generates a CSV report with the results. Tests exploitability over MS-PAR and MS-RPRN. This tool has "de-fanged" versions of the Python exploits, it does not actually...

PT-2025-36422

Name of the Vulnerable Software and Affected Versions Frappe versions prior to 14.96.10 Frappe versions 15.0.0 through 15.71.0 Description An insecure endpoint parameter is susceptible to error-based SQL Injection due to a lack of validation. This allows for the retrieval of sensitive information...

DEBIAN-CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

UBUNTU-CVE-2025-38734

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on smcsk after smclistenout BPF CI testing report a UAF issue: 16.446633 BUG: kernel NULL pointer dereference, address: 000000000000003 0 16.447134 PF: supervisor read access in kernel mod e 16.447516 PF:...

MAL-2025-42917 Malicious code in @teamteanpm2024/vitae-suscipit-quidem (npm)

The package @teamteanpm2024/vitae-suscipit-quidem was found to contain malicious code...

MAL-2025-43249 Malicious code in @zalastax/nolb-fez (npm)

The package @zalastax/nolb-fez was found to contain malicious code...

MAL-2025-44575 Malicious code in heix-erlinglingsan-part5 (npm)

The package heix-erlinglingsan-part5 was found to contain malicious code...

MAL-2025-45641 Malicious code in putri-kentang5-breki (npm)

The package putri-kentang5-breki was found to contain malicious code...

MAL-2025-46532 Malicious code in vina-mangut79-breki (npm)

The package vina-mangut79-breki was found to contain malicious code...

Malicious code in nikeyi-zaitaluo-yidian (npm)

The package nikeyi-zaitaluo-yidian was found to contain malicious code...

MAL-2025-44966 Malicious code in laila-esdoger69-breki (npm)

The package laila-esdoger69-breki was found to contain malicious code...

OESA-2025-2108 aide security update

Security Fixes: A vulnerability was found in AIDE up to 0.19.1 and classified as problematic.Using CWE to declare the problem leads to CWE-117. The product does not neutralize or incorrectly neutralizes output that is written to logs.Impacted is integrity.Upgrading to version 0.19.2 eliminates th...

Linux kernel HID DoS

The vulnerability of the applemagicbacklightreportset function in the HID component of the Linux kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a perpetrator to trigger a service failure...

Linux Distros Unpatched Vulnerability : CVE-2023-5551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups. CVE-2023-5551 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2024-25980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided...