PT-2025-22434

Name of the Vulnerable Software and Affected Versions OrangeHRM version 5.7 Description The issue allows an attacker to escalate privileges through the UserService.php and the checkFOrOldHash function. Recommendations For OrangeHRM version 5.7, as a temporary workaround, consider disabling the...

PT-2025-22383

Name of the Vulnerable Software and Affected Versions Blizzard Battle.net version 2.40.0.15267 Description The issue allows attackers to escalate privileges by placing a crafted shell script or executable in the C:ProgramData directory. This enables them to gain elevated access, potentially leadi...

PT-2025-22446 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical vulnerability has been found in Campcodes Online Shopping Portal. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the productimage1...

PT-2025-22399

Name of the Vulnerable Software and Affected Versions itech iLabClient version 3.7.1 Description The issue allows local attackers to read cleartext credentials for servers configured in the client from the local iLabClient database, specifically from the CONFIGS table. Recommendations For itech...

PT-2025-22352 · Unknown · Konsola Proget

Name of the Vulnerable Software and Affected Versions: Konsola Proget versions prior to 2.17.5 Description: The issue arises from input in the activationMessage field not being sanitized correctly in Konsola Proget, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack...

PT-2025-22406 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /admin/edit-category.php. The manipulation of the Category argument leads to SQL injection. This issue c...

PT-2025-22320 · Unknown · Moonlightl Hexo-Boot

Name of the Vulnerable Software and Affected Versions: moonlightL hexo-boot version 4.3.0 Description: A problematic issue was found in the Dynamic List Page component, specifically affecting the /admin/home/index.html file. This leads to cross-site scripting and can be initiated remotely. The...

PT-2025-22323 · WordPress · Digits: Wordpress Mobile Number Signup/Login

Name of the Vulnerable Software and Affected Versions: The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin versions prior to 8.4.6.1 Description: The issue concerns the lack of rate limiting for OTP validation attempts, making it possible for attackers to brute force them...

PT-2025-22402

Name of the Vulnerable Software and Affected Versions Vasco versions 3.14 and earlier Description The issue allows a remote attacker to obtain sensitive information via the help menu. This is due to a Local File Inclusion vulnerability. Recommendations For versions 3.14 and earlier, consider...

PT-2025-22367 · Kingdee · Kingdee Cloud Galaxy Private Cloud Bbc System

Name of the Vulnerable Software and Affected Versions: Kingdee Cloud Galaxy Private Cloud BBC System versions up to 9.0 Patch April 2025 Description: A critical issue has been found, affecting the BaseServiceFactory.getFileUploadService.deleteFileAction function of the...

CVE-2025-48014 Improper Restriction of Excessive Authentication Attempts

Password guessing limits could be bypassed when using LDAP authentication...

Incorrect Authorization

Overview typo3/cms-core is a free open source enterprise content management system. Affected versions of this package are vulnerable to Incorrect Authorization due to improper handling of FrontendGroupRestriction in multi-table database queries. An attacker can access data from additional tables...

CVE-2025-30193

In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from a client, an attacker can cause a denial of service by crafting a TCP exchange that triggers an exhaustion of the stack and a crash of DNSdist, causing a denial of...

PT-2025-22319 · Unknown · Moonlightl Hexo-Boot

Name of the Vulnerable Software and Affected Versions: moonlightL hexo-boot version 4.3.0 Description: A problematic issue has been discovered, affecting an unknown part of the file /admin/home/index.html of the component Blog Backend. The manipulation of the Description argument leads to...

PT-2025-22317 · Unknown · Project Worlds Online Time Table Generator

Name of the Vulnerable Software and Affected Versions: ProjectWorlds Online Time Table Generator version 1.0 Description: A critical issue was found in the ProjectWorlds Online Time Table Generator. The problem is related to the file /admin/add teacher.php, where the manipulation of the e argumen...

PT-2025-22311 · Gnu +1 · Gnu Pspp +1

Name of the Vulnerable Software and Affected Versions: GNU PSPP version 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb Description: A vulnerability was found in GNU PSPP, affecting the calloc function in the pspp-convert.c file. The manipulation of the argument -l leads to integer overflow. Local acces...

PT-2025-22312 · Sourcecodester · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical issue was found in the SourceCodester Client Database Management System. This affects an unknown part of the file /user proposal update order.php. The...

PT-2025-22308 · H3C · H3C Magic R200

Name of the Vulnerable Software and Affected Versions: H3C Magic R200G versions up to 100R002 Description: A vulnerability has been found in the HTTP POST Request Handler component, specifically affecting the function Edit BasicSSID, Edit BasicSSID 5G, SetAPWifiorLedInfoById, SetMobileAPInfoById,...

PT-2025-22315 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical issue has been found in the software. It affects an unknown function of the file /admin/category.php. The manipulation of the Category argument leads to SQL injection. This...

TYPO3 安全漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 that stems from a database query where FrontendGroupRestriction is applied only to the first table, which could lead to a data leak. The following...