PT-2025-22551 · Ocuco Innovation · Appmanager.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation APPMANAGER.EXE version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the application manager function. Recommendations: For Ocuco Innovation APPMANAGER.EXE version 2.10.24.51, consider...

PT-2025-22484 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical issue has been found in the software, affecting an unknown part of the file /admin/edit-subcategory.php. The manipulation of the Category argument leads to SQL injection. It...

PT-2025-22524 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: File upload vulnerabilities are present in ASPECT if session administrator credentials become compromised...

PT-2025-22555 · Ocuco Innovation · Innovaserviceintf.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation - INNOVASERVICEINTF.EXE version 2.10.24.17 Description: The issue allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. Recommendations: For Ocuco Innovation -...

PT-2025-22500 · Unknown · Campcodes Cybercafe Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Cybercafe Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /adminprofile.php. The manipulation of the mobilenumber argument leads to SQL injection...

PT-2025-22508 · Sandboxie · Sandboxie

Name of the Vulnerable Software and Affected Versions: Sandboxie versions 1.3.0 through 1.15.12 Description: The issue arises from the failure of Api GetSecureParam to sanitize incoming pointers, implicitly trusting the pointer passed by the user as safe to write to. GetRegValue then writes the...

CVE-2003-1594

NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote attackers to bypass intended access restrictions via an FTP session...

CVE-2004-2338

OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such as SPARC64, which may allow remote attackers to bypass access restrictions...

CVE-2025-47942 Learners on edX Platform can download python_lib.zip

The Open edX Platform is a learning management platform. Prior to commit 6740e75c0fdc7ba095baf88e9f5e4f3e15cfd8ba, edxapp has no built-in protection against downloading the pythonlib.zip asset from courses, which is a concern since it often contains custom grading code or answers to course...

CVE-2005-2524

Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archives that cause Safari to render them as if they came from a different site...

CVE-2009-2077

Drupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and 1 read unpublished content from anonymous users when a view is already configured to display the content, and 2 read private content in generated queries...

CVE-2005-0745

UTStarcom iAN-02EX VoIP Analog Terminal Adaptor ATA allows local users to bypass ATA access restrictions by dialing "26845" and causing a device reset...

CVE-2008-7282

Kernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm in Open Ticket Request System OTRS before 2.2.6, when the CustomerPanelOwnSelection and CustomerGroupSupport options are enabled, allows remote authenticated users to bypass intended access restrictions, and perform certain 1 list and 2...

CVE-2009-2125

deletebug.php in Elvin before 1.2.1 does not require administrative privileges, which allows remote authenticated users to bypass intended access restrictions and delete arbitrary bugs...

PT-2025-22406 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /admin/edit-category.php. The manipulation of the Category argument leads to SQL injection. This issue c...

PT-2025-22434

Name of the Vulnerable Software and Affected Versions OrangeHRM version 5.7 Description The issue allows an attacker to escalate privileges through the UserService.php and the checkFOrOldHash function. Recommendations For OrangeHRM version 5.7, as a temporary workaround, consider disabling the...

PT-2025-22338 · WordPress · Dpepress

Name of the Vulnerable Software and Affected Versions: DPEPress plugin for WordPress versions up to, and including, 0.3 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'dpe' shortcode due to insufficient input sanitization and output escaping on user-supplied...

PT-2025-22352 · Unknown · Konsola Proget

Name of the Vulnerable Software and Affected Versions: Konsola Proget versions prior to 2.17.5 Description: The issue arises from input in the activationMessage field not being sanitized correctly in Konsola Proget, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack...

PT-2025-22419

Name of the Vulnerable Software and Affected Versions SeedDMS version 6.0.32 Description A vulnerability in SeedDMS allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functionality in the Extension Manager. Recommendations For SeedDMS version 6.0.3...

PT-2025-22367 · Kingdee · Kingdee Cloud Galaxy Private Cloud Bbc System

Name of the Vulnerable Software and Affected Versions: Kingdee Cloud Galaxy Private Cloud BBC System versions up to 9.0 Patch April 2025 Description: A critical issue has been found, affecting the BaseServiceFactory.getFileUploadService.deleteFileAction function of the...