PT-2025-22651 · Zohocorp · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions below 8511 Description: The issue concerns SQL injection in the OU History report. This allows for potential exploitation. Recommendations: For Zohocorp ManageEngine ADAudit Plus versions below 8511...

PT-2025-22817 · Unknown · Phpgurukul Student Management System

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Student Management System using PHP and MySQL version 1 Description: The issue is related to multiple SQL injection vulnerabilities. These vulnerabilities are located at the "/studentrecordms/login.php" API endpoint, specifically v...

PT-2025-22698 · Thememove · Thememove Healsoul

Name of the Vulnerable Software and Affected Versions: ThemeMove Healsoul versions n/a through 2.0.2 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local Fi...

PT-2025-22665 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Medical Card Generation System version 1.0 Description: The issue concerns stored cross-site scripting XSS vulnerabilities in the /admin/card-bwdates-report.php component. Attackers can execute arbitrary web scripts or HTML by...

PT-2025-22796 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue has been found in the TYPE Command Handler component, leading to a buffer overflow. This issue can be exploited remotely. Recommendations: For FreeFloat FTP Server version 1.0,...

PT-2025-22576 · WordPress · Tournamatch

Name of the Vulnerable Software and Affected Versions: Tournamatch plugin for WordPress versions up to and including 4.6.1 Description: The issue is related to Stored Cross-Site Scripting via the 'trn-ladder-registration-button' shortcode. This is due to insufficient input sanitization and output...

PT-2025-22666 · Unknown · Hospital Management System In Php

Name of the Vulnerable Software and Affected Versions: Hospital Management System In PHP version 4.0 Description: The issue allows a remote attacker to execute arbitrary code via the "hms/doctor/edit-profile.php" file. This could potentially lead to unauthorized access and control of the system...

PT-2025-22655 · WordPress · Tablepress

Name of the Vulnerable Software and Affected Versions: TablePress plugin for WordPress versions up to, and including, 3.1.2 Description: The issue is related to DOM-Based Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers wi...

PT-2025-22808 · Unknown · Phpgurukul Student Management System

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Student Management System using PHP and MySQL version 1 Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the "/studentrecordms/password-recovery.php" endpoint, specificall...

CVE-2022-23435

decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service...

CVE-2022-39872

Improper restriction of broadcasting Intent in ShareLive prior to version 13.2.03.5 leaks MAC address of the connected Bluetooth device...

CVE-2022-1983

Incorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allowed an attacker already in possession of a valid Deploy Key or a Deploy Token to misuse it from any location to access Container Registries even when IP...

CVE-2022-1850

Path Traversal in GitHub repository filegator/filegator prior to 7.8.0...

CVE-2022-0198

corenlp is vulnerable to Improper Restriction of XML External Entity Reference...

CVE-2022-31472

Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to obtain the data of Cabinet...

CVE-2022-30943

Browsing restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the data of Bulletin...

CVE-2022-30723

Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in activateVoiceRecognitionWithDevice function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device...

CVE-2022-29484

Operation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0 allows a remote authenticated attacker to delete the data of Space...

CVE-2022-29471

Browse restriction bypass vulnerability in Bulletin of Cybozu Garoon allows a remote authenticated attacker to obtain the data of Bulletin...

CVE-2022-28858

Improper buffer restriction in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access...