PT-2025-10037 · Unknown · Insurance Management System

Name of the Vulnerable Software and Affected Versions: projectworlds Life Insurance Management System version 1.0 Description: A critical vulnerability was found in the projectworlds Life Insurance Management System. This issue affects an unknown part of the file /editAgent.php. The manipulation ...

Kibana 8.15.x < 8.17.3 (ESA_2025_06)

The version of Kibana installed on the remote host is prior to 8.17.3. It is, therefore, affected by a vulnerability as referenced in the ESA202506 advisory. - Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kiba...

PT-2025-9984 · Unknown · Phpgurukul Pre-School Enrollment System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Pre-School Enrollment System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Pre-School Enrollment System, affecting an unknown functionality of the file "/admin/edit-class.php?cid=1". The...

PT-2025-10011 · Sourcecodester · Sourcecodester Best Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Employee Management System version 1.0 Description: A critical issue was found in the file /admin/print1.php, where the manipulation of the id argument leads to SQL injection. The attack can be launched remotely. The explo...

PT-2025-10010 · Unknown · Code-Projects Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank Management System version 1.0 Description: A critical issue has been found in the code-projects Blood Bank Management System. The vulnerability affects an unknown functionality of the file /admin/delete bloodGroup.php...

PT-2025-9998

Name of the Vulnerable Software and Affected Versions NocoDB versions prior to 0.258.0 Description The issue concerns a Reflected Cross-Site-Scripting vulnerability in the password reset function of NocoDB. The API endpoint "/api/v1/db/auth/password/reset/:tokenId" is affected. This flaw is cause...

PT-2025-10003 · Unknown · Code-Projects Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Blood Bank Management System. The issue affects an unknown function of the file /admin/delete members.php. The...

USN-7330-1 ansible vulnerabilities

It was discovered that Ansible did not properly verify certain fields of X.509 certificates. An attacker could possibly use this issue to spoof SSL servers if they were able to intercept network communications. This issue only affected Ubuntu 14.04 LTS. CVE-2015-3908 Martin Carpenter discovered...

CVE-2025-1915

Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted Chrome Extension. Chromium security severity: Mediu...

DEBIAN-CVE-2025-1915

Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted Chrome Extension. Chromium security severity: Mediu...

CVE-2025-1915

Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted Chrome Extension. Chromium security severity: Mediu...

PT-2025-9854

Name of the Vulnerable Software and Affected Versions Spacy-LLM version 0.7.2 Description A Server-Side Template Injection SSTI vulnerability allows attackers to execute arbitrary code via injecting a crafted payload into the template field. Recommendations For Spacy-LLM version 0.7.2, as a...

CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted Chrome Extension. Chromium security severity: Mediu...

CVE-2024-11153: Exposure of Sensitive Information to an Unauthorized Actor

The Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.0 via the WordPress core search feature. This makes it possible for...

PT-2025-9850 · Volt · Volt

Name of the Vulnerable Software and Affected Versions: Volt versions prior to 1.7.0 Description: The issue concerns a remote code execution vulnerability within Volt components. Malicious, user-crafted request payloads could potentially lead to remote code execution. Approximately 1.08 million...

PT-2025-14367

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A vulnerability in the Linux kernel's switchdev notification chain has been resolved. The issue involved a blocking notification chain that used a read-write semaphore to protect the...

The vulnerability of the Intel PROSet/Wireless WiFi connection tool lies in the insufficient channel limitation for specified endpoints, allowing attackers to compromise the protected information.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insufficient channel limitation for specified endpoints. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

Linux Distros Unpatched Vulnerability : CVE-2024-36244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: taprio: extend minimum interval restriction to entire cycle too It is possible for syzbot to side-step the restriction imposed by the blamed commit i...

Linux Distros Unpatched Vulnerability : CVE-2022-24806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can exploit an...

PT-2025-9859 · Jenkins +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.499 and earlier Jenkins LTS versions 2.492.1 and earlier Description: The issue allows attackers with Agent/Extended Read permission to view encrypted values of secrets when accessing config.xml of agents via REST API or CL...