PT-2025-22445 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical issue was found in the software, affecting some unknown functionality of the file /admin/insert-product.php. The manipulation of the Category argument leads to SQL injection...

PT-2025-22446 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical vulnerability has been found in Campcodes Online Shopping Portal. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the productimage1...

CVE-2025-48014 Improper Restriction of Excessive Authentication Attempts

Password guessing limits could be bypassed when using LDAP authentication...

Incorrect Authorization

Overview typo3/cms-core is a free open source enterprise content management system. Affected versions of this package are vulnerable to Incorrect Authorization due to improper handling of FrontendGroupRestriction in multi-table database queries. An attacker can access data from additional tables...

CVE-2025-30193

In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from a client, an attacker can cause a denial of service by crafting a TCP exchange that triggers an exhaustion of the stack and a crash of DNSdist, causing a denial of...

PT-2025-22137 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: A buffer overflow issue was discovered in the TOTOLINK A3002R via the interfacenameds parameter in the "formDhcpv6s" interface. This issue can be exploited, potentially leading to...

PT-2025-22287 · Wavlink · Wavlink Wl-Wn579A3

Name of the Vulnerable Software and Affected Versions: Wavlink WL-WN579A3 version 1.0 Description: A command injection vulnerability in the component /cgi-bin/qos.cgi allows attackers to execute arbitrary commands via a crafted input. Recommendations: For Wavlink WL-WN579A3 version 1.0, as a...

PT-2025-22312 · Sourcecodester · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical issue was found in the SourceCodester Client Database Management System. This affects an unknown part of the file /user proposal update order.php. The...

PT-2025-22313 · Unknown · Project Worlds Online Time Table Generator

Name of the Vulnerable Software and Affected Versions: projectworlds Online Time Table Generator version 1.0 Description: A critical issue has been discovered, affecting the /semester ajax.php file, where manipulation of the ID argument leads to SQL injection. This issue can be exploited remotely...

PT-2025-22319 · Unknown · Moonlightl Hexo-Boot

Name of the Vulnerable Software and Affected Versions: moonlightL hexo-boot version 4.3.0 Description: A problematic issue has been discovered, affecting an unknown part of the file /admin/home/index.html of the component Blog Backend. The manipulation of the Description argument leads to...

PT-2025-22311 · Gnu +1 · Gnu Pspp +1

Name of the Vulnerable Software and Affected Versions: GNU PSPP version 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb Description: A vulnerability was found in GNU PSPP, affecting the calloc function in the pspp-convert.c file. The manipulation of the argument -l leads to integer overflow. Local acces...

PT-2025-22144 · Unknown +1 · Mini Httpd +1

Name of the Vulnerable Software and Affected Versions: Netgear DGND3700 version 1.1.00.15 1.00.15NA Description: A vulnerability has been found in the mini http component, specifically affecting the /currentsetting.htm file, leading to information disclosure. The attack can be initiated remotely...

Schweitzer Engineering Laboratories SEL Series 安全漏洞

Schweitzer Engineering Laboratories SEL Series is a series of software and firmware products from Schweitzer Engineering Laboratories, Inc. A security vulnerability exists in the Schweitzer Engineering Laboratories SEL Series that stems from an improper pathname restriction could lead to file...

PT-2025-22308 · H3C · H3C Magic R200

Name of the Vulnerable Software and Affected Versions: H3C Magic R200G versions up to 100R002 Description: A vulnerability has been found in the HTTP POST Request Handler component, specifically affecting the function Edit BasicSSID, Edit BasicSSID 5G, SetAPWifiorLedInfoById, SetMobileAPInfoById,...

PT-2025-22315 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical issue has been found in the software. It affects an unknown function of the file /admin/category.php. The manipulation of the Category argument leads to SQL injection. This...

PT-2025-22577 · Opendcim · Opendcim

Name of the Vulnerable Software and Affected Versions: openDCIM versions prior to 23.05 Description: The issue allows SQL injection in people depts.php because prepared statements are not used. This could potentially lead to unauthorized access or manipulation of data. Recommendations: For openDC...

PT-2025-22134 · NetGear · Netgear Dgnd3700

Name of the Vulnerable Software and Affected Versions: Netgear DGND3700 version 1.1.00.15 1.00.15NA Description: A vulnerability has been found in the Netgear DGND3700, affecting some unknown functionality of the file /BRS top.html. The manipulation leads to information disclosure. The attack may...

TYPO3 安全漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 that stems from a database query where FrontendGroupRestriction is applied only to the first table, which could lead to a data leak. The following...

PT-2025-22317 · Unknown · Project Worlds Online Time Table Generator

Name of the Vulnerable Software and Affected Versions: ProjectWorlds Online Time Table Generator version 1.0 Description: A critical issue was found in the ProjectWorlds Online Time Table Generator. The problem is related to the file /admin/add teacher.php, where the manipulation of the e argumen...

CVE-2025-4948

A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...