PT-2025-18315 · Elastic +2 · Elastic +2

Name of the Vulnerable Software and Affected Versions: Volcano versions prior to 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2 Description: The issue is related to a privilege escalation that can cause denial of service of the scheduler. If an attacker compromises...

PT-2025-18249 · Unknown · Phpgurukul Pre-School Enrollment System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Pre-School Enrollment System version 1.0 Description: A critical issue was found in the PHPGurukul Pre-School Enrollment System, affecting an unknown part of the file /admin/visitor-details.php. The manipulation of the Status...

PT-2025-18255 · Unknown · Phpgurukul Curfew E-Pass Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Curfew e-Pass Management System version 1.0 Description: A critical issue affects the processing of the file /admin/edit-pass-detail.php. The manipulation of the editid argument leads to SQL injection. The attack may be initiated...

PT-2025-18278 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A SQL Injection issue was discovered in the normal-bwdates-reports-details.php file. This issue allows remote attackers to execute arbitrary SQL code via the todate paramete...

PT-2025-18286 · Unknown · Phpgurukul Directory Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Directory Management System version 2.0 Description: A SQL Injection issue was identified in the admin/edit-directory.php file. Attackers can exploit this issue via the email parameter in a POST request to execute arbitrary SQL...

PT-2025-18276 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A SQL injection issue was discovered in the foreigner-bwdates-reports-details.php file. This issue allows remote attackers to execute arbitrary SQL code via the todate...

PT-2025-18308 · Sourcecodester · Sourcecodester Simple Parking Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Barangay Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. It affects the API endpoint "/barangay management/admin/?page=view household". Recommendations: For SourceCodeste...

CVE-2025-23178

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints...

CVE-2025-23178 Ribbon Communications - CWE-923: Improper Restriction of Communication Channel to Intended Endpoints

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints...

CVE-2025-23178 Ribbon Communications - CWE-923: Improper Restriction of Communication Channel to Intended Endpoints

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints...

CVE-2025-40619

Bookgy suffers an improper access control vulnerability that could permit unauthenticated users to reach private or role-specific areas. The issue is described as insufficient authorization across multiple areas of the application, with a high impact on confidentiality (and a high impact on integ...

CVE-2025-4092 Memory safety bugs fixed in Firefox 138 and Thunderbird 138

Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138 and Thunderbird 138...

CVE-2025-24271

CVE-2025-24271 describes an access issue in AirPlay handling where an unauthenticated user on the same network as a signed‑in Mac could send AirPlay commands without pairing. Apple fixed this in multiple OS updates: macOS Sequoia 15.4, macOS Ventura 13.7.5, macOS Sonoma 14.7.5, iOS 18.4 and iPadO...

PT-2025-18196

Name of the Vulnerable Software and Affected Versions YesWiki versions prior to 4.5.4 Description The issue is related to reflected XSS in the file upload form, allowing malicious unauthenticated users to create links that can perform arbitrary actions when clicked by a victim. Recommendations Fo...

PT-2025-18138 · WordPress · Gutenverse

Name of the Vulnerable Software and Affected Versions: Gutenverse – Ultimate Block Addons and Page Builder for Site Editor plugin for WordPress versions up to, and including, 2.2.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's countdown Block due to insufficien...

PT-2025-18146 · Unknown · Prison Management System

Name of the Vulnerable Software and Affected Versions: code-projects Prison Management System version 1.0 Description: A critical vulnerability was found in the Prison Management System, affecting the addrecord function of the Prison Mgmt Sys component. The manipulation of the filename argument...

PT-2025-18176 · Bookgy · Bookgy

Name of the Vulnerable Software and Affected Versions: Bookgy affected versions not specified Description: The issue is a SQL injection vulnerability that could allow an attacker to retrieve, create, update, and delete databases by sending an HTTP request through the IDRESERVA parameter in the...

PT-2025-18190 · Unknown · Phpgurukul Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Nurse Hiring System version 1.0 Description: A critical issue affects the processing of the file /admin/edit-nurse.php, leading to sql injection. The attack may be initiated remotely. Multiple parameters might be affected...

PT-2025-18198 · Unknown · Phpgurukul Curfew E-Pass Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Curfew e-Pass Management System version 1.0 Description: A critical issue was found in the PHPGurukul Curfew e-Pass Management System. The problem affects an unknown functionality of the file /admin/pass-bwdates-report.php. The...

PT-2025-18175 · Bookgy · Bookgy

Name of the Vulnerable Software and Affected Versions: Bookgy affected versions not specified Description: The issue is related to a SQL injection vulnerability. This could allow an attacker to retrieve, create, update, and delete databases by sending an HTTP request through the IDTIPO, IDPISTA,...