PT-2025-28074 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical issue has been found, affecting the function formSetWanStatic of the file /goform/formSetWanStatic in the component webs. The manipulation of the arguments m wan ipaddr, m wan netmask, m...

PT-2025-28079 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical issue affects the function formiNICWpsStart of the file /goform/formiNICWpsStart in the webs component. The manipulation of the pinCode argument leads to a stack-based buffer overflow. Th...

PT-2025-26880 · Unknown +1 · Berkeley-Abc +1

Name of the Vulnerable Software and Affected Versions: berkeley-abc version 1.1 Description: The issue is related to a Null Pointer Dereference NPD vulnerability in the Abc NtkCecFraigPart function of the data processing module. This leads to unpredictable program behavior, causing segmentation...

SUSE CVE-2025-52991

The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location. This allows standard users to deceive the package manager into using directories with pre-existing content, potentially leading to unauthorized actions or data...

CLSA-2025-1750752721 Fix CVE(s): CVE-2025-24813

SECURITY UPDATE: Remote code execution - debian/patches/CVE-2025-24813.patch: Delete temporary file right after finishing request processing - CVE-2025-24813...

PT-2025-26666 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: xxyopen/201206030 novel-plus versions up to 5.1.3 Description: A critical issue has been found in the User Management Module, specifically affecting the function list of the file novel-admin/src/main/resources/mybatis/system/UserMapper.xml. T...

PT-2025-26791 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue was found in the SourceCodester Best Salon Management System, affecting an unknown functionality of the file /add-customer.php. The manipulation of the...

Security update for screen

This update for screen fixes the following issues: CVE-2025-46802: Fixed temporary chown of users' TTY to mode 0666 allowing PTY hijacking bsc1242269 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternative...

PT-2025-26576 · Htacg +1 · Tidy-Html5 +1

Name of the Vulnerable Software and Affected Versions: HTACG tidy-html5 version 5.8.0 Description: A memory leak issue has been discovered, affecting the defaultAlloc function in the src/alloc.c file. This issue can be exploited locally, potentially leading to memory leak. The exploit details hav...

PT-2025-26642 · Quarkus · Quarkus

Name of the Vulnerable Software and Affected Versions: Quarkus versions prior to 3.24.0 Description: The issue is related to a potential data leak when duplicating a duplicated context in Quarkus, which extensively uses the Vert.x duplicated context to implement context propagation. This can caus...

PT-2025-26664

Name of the Vulnerable Software and Affected Versions Linksys E-Series routers versions prior to a firmware update Linksys E4200 Linksys E3200 Linksys E3000 Linksys E2500 Linksys E2100L Linksys E2000 Linksys E1550 Linksys E1500 Linksys E1200 Linksys E1000 Linksys E900 Description An OS command...

PT-2025-26639

Name of the Vulnerable Software and Affected Versions: pbkdf2 versions =3.1.2 Description: The issue is related to an Improper Input Validation vulnerability in pbkdf2, allowing Signature Spoofing by Improper Validation. Recommendations: For versions =3.1.2, update to a version greater than 3.1.2...

PT-2025-26551 · Unknown · Code-Projects School Fees Payment System

Name of the Vulnerable Software and Affected Versions: code-projects School Fees Payment System version 1.0 Description: A problematic issue was found in the code-projects School Fees Payment System, affecting an unknown part of the file /fees.php. The manipulation of the transcation remark...

PT-2025-26525 · Unknown · Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Simple Online Hotel Reservation System version 1.0 Description: A critical issue affects the processing of the file /admin/add account.php, where the manipulation of the admin id argument leads to SQL injection. This issue can be exploited...

PT-2025-26532 · Code Projects · Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Simple Online Hotel Reservation System version 1.0 Description: A critical vulnerability was found in the Simple Online Hotel Reservation System. The issue is related to SQL injection, which can be triggered by manipulating the Username or...

CVE-2025-32876

An issue was discovered on COROS PACE 3 devices through 3.0808.0. The BLE implementation of the COROS smartwatch does not support LE Secure Connections and instead enforces BLE Legacy Pairing. In BLE Legacy Pairing, the Short-Term Key STK can be easily guessed. This requires knowledge of the...

PT-2025-26274 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue has been discovered in the code, specifically affecting the /admin/admin index.php file. The manipulation of the Username argument leads to a SQL injection. This issue...

PT-2025-26318 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue was found in the code-projects Online Shoe Store. The problem affects an unknown function of the file /admin/admin product.php. The manipulation of the pid argument lea...

PT-2025-26265 · Unknown · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hostel Management System version 1.0 Description: A critical issue affects an unknown functionality of the file /empty rooms.php. The manipulation of the search box argument leads to SQL injection. This issue can be exploited...

PT-2025-26464 · Unknown · Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Simple Pizza Ordering System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /portal.php. The manipulation of the ID argument leads to SQL injection. This issue can be exploited remotely...