PT-2025-47413

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 15.7.0 Description Piwigo is a photo gallery application for the web. The password reset function in versions prior to 15.7.0 does not validate the hostname used in the password-reset URL, which is taken directly from...

Piwigo authorization issue vulnerability

Piwigo is Piwigo open source a set of Web-based open source image library software. The software includes features such as image management, image categorization and permission management. An authorization issue vulnerability exists in Piwigo version 15.6.0, which stems from the password reset...

Backdrop CMS security vulnerability

Backdrop CMS is a content management system CMS from Backdrop CMS open source. A security vulnerability exists in Backdrop CMS version 1.32.1 that stems from improper manipulation of the Host header in a password reset request, which could lead to redirection to a malicious domain and session...

Siemens SIPROTEC 5 Allocation of Resources Without Limits or Throttling (CVE-2025-40570)

Affected devices do not properly limit the bandwidth for incoming network packets over their local USB port. This could allow an attacker with physical access to send specially crafted packets with high bandwidth to the affected devices thus forcing them to exhaust their memory and stop respondin...

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

EUVD-2025-197801

In a Bluetooth device, using RS9116-WiseConnect SDK experiences a Denial of Service, if it receives malformed L2CAP packets, only hard reset will bring the device to normal operation...

CVE-2025-4321 DoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packets

In a Bluetooth device, using RS9116-WiseConnect SDK experiences a Denial of Service, if it receives malformed L2CAP packets, only hard reset will bring the device to normal operation...

CVE-2025-4321

The CVE-2025-4321 entry concerns Silabs RS9116W-WiSeConnect SDK used in Bluetooth devices. Affected component: the RS9116-WiseConnect SDK handling L2CAP; root cause is processing malformed L2CAP packets, leading to a Denial of Service. Impact as stated: device remains non-operational until a hard...

CVE-2025-58083

General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to remotely reset the device...

PT-2025-47149

Name of the Vulnerable Software and Affected Versions RS9116-WiseConnect SDK affected versions not specified Description The RS9116-WiseConnect SDK, when used in a Bluetooth device, is susceptible to a Denial of Service condition. This occurs when the device receives improperly formatted L2CAP...

CVE-2024-44654

PHPGurukul Complaint Management System version 2.0 is vulnerable to an SQL Injection flaw within the reset-password.php file. The vulnerability arises from a lack of validation of externally entered SQL statements in the email and mobileno parameters. An attacker can exploit this by manipulating ...

CVE-2024-44654: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

EUVD-2024-55095

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

PT-2025-47188

Name of the Vulnerable Software and Affected Versions PHPGurukul Complaint Management System version 2.0 Description The PHPGurukul Complaint Management System version 2.0 contains a SQL Injection flaw. The issue is located in the reset-password.php file and affects the email and mobileno...

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

PHPGurukul Complaint Management System security vulnerabilities

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the email and mobileno parameters of reset-password.php. An attacker can exploit this...

CVE-2025-4321: Improper Handling of Inconsistent Structural Elements

In a Bluetooth device, using RS9116-WiseConnect SDK experiences a Denial of Service, if it receives malformed L2CAP packets, only hard reset will bring the device to normal operation...

CVE-2025-58083

General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to remotely reset the device...