PT-2025-6108 · Allims · Lab.Online

Name of the Vulnerable Software and Affected Versions: Allims lab.online versions up to 20250201 Description: A critical issue was found in the processing of the file /model/model recuperar senha.php, where the manipulation of the recuperacao argument leads to SQL injection. This issue can be...

PT-2025-6101 · Unknown · Xxyopen Novel

Name of the Vulnerable Software and Affected Versions: xxyopen Novel versions up to 3.4.1 Description: A critical issue has been found in the software, affecting some unknown functionality of the file "/api/front/search/books". The manipulation of the sort argument leads to SQL injection. The...

PT-2025-6049

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43 Description A memory leak vulnerability has been found in the ld component of GNU Binutils, specifically affecting the xstrdup function in the libiberty/xmalloc.c file. This issue can be exploited remotely, with a...

PT-2025-6054 · Gnu +3 · Gnu Binutils +3

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.43 Description: A critical vulnerability was found in GNU Binutils, affecting the function bfd elf reloc symbol deleted p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is...

PT-2025-6053 · Gnu +3 · Gnu Binutils +3

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.43 Description: A critical vulnerability was found in GNU Binutils, affecting the function bfd elf gc mark rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can ...

PT-2025-6052

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43 Description A problematic issue has been found in GNU Binutils, affecting the bfd elf write section eh frame function of the ld component. This issue leads to memory corruption and can be initiated remotely, although...

PT-2025-6104 · Dayrui · Xunruicms

Name of the Vulnerable Software and Affected Versions: dayrui XunRuiCMS versions up to 4.6.4 Description: A critical issue has been identified, affecting unknown code in the /Control/Api/Api.php file. The manipulation of the thumb argument leads to deserialization. This issue can be exploited...

PT-2025-6102 · Webkul · Webkul Qloapps

Name of the Vulnerable Software and Affected Versions: Webkul QloApps version 1.6.1 Description: A problematic vulnerability was found in Webkul QloApps, affecting an unknown part of the file /stores of the component Your Location Search. The manipulation leads to cross site scripting. It is...

PT-2025-6109 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5.6.3.154.205 20250114 Description: A critical issue has been found, affecting an unknown function of the file addPolicyToSafetyGroup.jsp. The manipulation of the safetyGroupId argument leads to SQL injection. It is...

CVE-2024-49348

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows restricting access to organizational data to valid contexts. The fact that tasks of type comment can be reassigned via API implicitly...

CVE-2025-25155

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in efreja Music Sheet Viewer music-sheet-viewer allows Path Traversal.This issue affects Music Sheet Viewer: from n/a through = 4.1...

PT-2025-16508 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version V4.0si V16.03.10.20 Description: The issue is related to a Buffer Overflow in the AdvSetMacMtuWan function via the serviceName2 variable. Recommendations: For Tenda AC10 version V4.0si V16.03.10.20, as a temporary workaroun...

PT-2025-5926 · Unknown · Breaking News Ticker

Name of the Vulnerable Software and Affected Versions: Breaking News Ticker versions n/a through 2.4.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...

PT-2025-6002 · Trojan · Trojan

Name of the Vulnerable Software and Affected Versions: trojan versions 2.0.0 through 2.15.3 Description: An issue in trojan allows a remote attacker to escalate privileges via the initialization interface "/auth/register". Recommendations: For trojan versions 2.0.0 through 2.15.3, consider...

PT-2025-5985 · Unknown · Dhtmlxfileexplorer

Name of the Vulnerable Software and Affected Versions: dhtmlxFileExplorer version 8.4.6 Description: The issue allows a remote attacker to obtain sensitive information through the file download functionality. This is due to a local file inclusion vulnerability. Recommendations: For...

PT-2025-6212 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions 1.8.0 through 1.8.3 SoftwareX versions prior to 1.8.0 Description: The issue allows restricted information to be viewed through the main text, a feature introduced in version 1.8.0. This affects the frame publishing functio...

PT-2025-5939 · Unknown +1 · Link To Url +1

Name of the Vulnerable Software and Affected Versions: sudipto Link to URL / Post versions n/a through 1.3 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This allows for Blind SQL Injection...

Apache James vulnerable to denial of service through the use of IMAP literals

Similarly to CVE-2024-34055, Apache James is vulnerable to denial of service through the abuse of IMAP literals from both authenticated and unauthenticated users, which could be used to cause unbounded memory allocation and very long computations Version 3.7.6 and 3.8.2 restrict such illegitimate...

CVE-2022-3167

Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1...

CVE-2022-47577

An issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus 10.1.2228.15. Despite configuring complete restrictions on USB pendrives, USB HDD devices, memory cards, USB connections to mobile devices, etc., it is still possible to bypass the USB restrictions b...