The vulnerability of the Mattermost instant messaging application, related to an incorrect restriction on the path to the restricted catalog, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Mattermost instant messaging application is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

PT-2025-31042 · Code Projects · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A critical issue exists in code-projects Exam Form Submission 1.0. The vulnerability is due to the manipulation of the ID argument in the /admin/delete s6.php file, leading to a SQL...

PT-2025-31035 · Unknown · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A critical vulnerability exists due to a SQL injection flaw. The issue is located in an unknown function of the file /admin/update s4.php. Manipulation of the credits argument allows...

PT-2025-31049 · Vaelsys · Vaelsys

Name of the Vulnerable Software and Affected Versions: Vaelsys version 4.1.0 Description: A critical issue exists in Vaelsys 4.1.0 related to os command injection. The execute DataObjectProc function within the /grid/vgrid server.php file is vulnerable. Manipulation of the xajaxargs argument can...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe Acrobat

技术文章存档 ------ Paper list： Talking About Exploit Writing Bypassing AntiVirus Detection for Malicious PDFs MBR病毒分析 使用bochs调试MBR 基于MBR的系统登录密码验证程序 PDF文件格式分析 恶意PDF文件解析思路 Win 7下定位kernel32.dll基址及shellcode编写 CVE-2009-0658漏洞分析 Firefox vulnerabilityCVE-2011-0065 Bypassing DEP CVE-2009-4324漏洞分析 Flash XSS漏洞挖...

WordPress Premium Age Verification / Restriction for WordPress Plugin <= 3.0.2 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by ch4r0n in WordPress Plugin Premium Age Verification / Restriction for WordPress versions = 3.0.2...

PT-2025-30972 · Unknown · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: ABC Courier Management System version 1.0 Description: A critical issue exists in ABC Courier Management System 1.0. The vulnerability is due to a SQL injection flaw within an unknown function of the file /getbyid.php. Manipulation of the ID...

CVE-2025-38442 block: reject bs > ps block devices when THP is disabled

In the Linux kernel, the following vulnerability has been resolved: block: reject bs ps block devices when THP is disabled If THP is disabled and when a block device with logical block size page size is present, the following null ptr deref panic happens during boot: 13.2 mK AOSAN: null-ptr-deref...

PT-2025-30718 · Unknown · Deerwms Deer-Wms-2

Name of the Vulnerable Software and Affected Versions: deerwms deer-wms-2 versions up to 3.3 Description: A vulnerability exists in deerwms deer-wms-2 that allows for SQL injection. The issue is related to the manipulation of the paramsdataScope argument within the file...

PT-2025-30670 · Tenda · Tenda Ac8V4

Name of the Vulnerable Software and Affected Versions: Tenda AC8V4 version V16.03.34.06 Description: The Tenda AC8V4 device contains a stack overflow issue at the /goform/SetSysTimeCfg API endpoint. Manipulation of the timeZone and timeType parameters leads to a stack-based buffer overflow...

PT-2025-30962 · Tenda · Tenda Ch22

Name of the Vulnerable Software and Affected Versions: Tenda CH22 version 1.0.0.1 Description: A critical issue exists in the formdeleteUserName function within the /goform/deleteUserName file. The old account argument is susceptible to buffer overflow, allowing for remote exploitation. The explo...

The vulnerability of the unZipJarFilestoLocation method in the network management system allows a intruder to gain unauthorized access to file recording and execute arbitrary code. This vulnerability is present in Siemens SINEC NMS systems used for monitoring industrial networks.

The vulnerability of the unZipJarFilestoLocation method in the network management system for monitoring industrial networks of Siemens SINEC NMS is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operati...

The vulnerability of the uploadFWBinary method in the network management system for monitoring industrial networks of Siemens SINEC NMS allows a intruder to gain unauthorized access to file writing and execute arbitrary code.

The vulnerability of the uploadFWBinary method in the network management system for monitoring industrial networks of Siemens SINEC NMS is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating...

PT-2025-30681 · Tenda · Tenda Ac8V4

Name of the Vulnerable Software and Affected Versions: Tenda AC8V4 version 16.03.34.06 Description: The Tenda AC8V4 device contains a stack overflow issue at the /goform/WifiGuestSet API endpoint. Manipulation of the shareSpeed parameter leads to a stack-based buffer overflow. Recommendations:...

PT-2025-30536 · Samsung · Magicinfo 9 Server

Name of the Vulnerable Software and Affected Versions: MagicINFO 9 Server versions prior to 21.1080.0 Description: A flaw exists in Samsung Electronics MagicINFO 9 Server that allows code injection through the unrestricted upload of files with dangerous types. Recommendations: Update MagicINFO 9...

The vulnerability of the Booco business automation platform lies in the improper limitation of the path name to the restricted access catalog. This allows attackers to create or overwrite files in the file system’s directories and execute arbitrary code.

The vulnerability of the Booco business automation platform is related to an incorrect restriction on the path name for restricted access catalogs. Exploiting this vulnerability allows a malicious actor to create or re-record files in file system catalogs and execute arbitrary code...

PT-2025-30364 · Jsherp · Jsherp

Name of the Vulnerable Software and Affected Versions: jshERP versions prior to 3.5 Description: A critical issue exists in jshERP. The issue involves improper authorization due to the manipulation of the ID argument within an unknown function of the /user/delete file in the Account Handler...

PT-2025-30454 · Db-Gpt · Db-Gpt

Name of the Vulnerable Software and Affected Versions: DB-GPT version 0.7.0 Description: A SQL injection issue exists in the editor sql run and query ex functions of DB-GPT. Remote attackers can execute arbitrary SQL statements by providing crafted input to the /v1/editor/sql/run or...

PT-2025-30425 · Code Projects · Food Ordering Review System

Name of the Vulnerable Software and Affected Versions: code-projects Food Ordering Review System version 1.0 Description: A critical vulnerability exists in an unknown functionality of the file /user/reservation page.php. Manipulation of the argument reg Id leads to a SQL injection. The attack ca...

PT-2025-30418 · Unknown · Deepfiction Ai

Name of the Vulnerable Software and Affected Versions: Deepfiction AI versions prior to June 3, 2025 Description: An Insecure Direct Object Reference IDOR vulnerability exists in Deepfiction AI. This allows attackers to access and utilize other users' credits for interacting with the Large Langua...