PT-2025-25584 · Unknown · Projectworlds Life Insurance Management System

Name of the Vulnerable Software and Affected Versions: Projectworlds Life Insurance Management System version 1.0 Description: A critical issue affects the processing of the file "/insertPayment.php". The manipulation of the argument recipt no leads to SQL injection. The attack may be initiated...

Authd security vulnerability

Authd is a cloud-based authentication daemon for identity providers in the Ubuntu open source. A security vulnerability exists in Authd versions prior to 0.5.4, which stems from a temporary user logging issue that could result in a user being incorrectly recognized as the root group...

PT-2025-25506 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: FoxCMS versions 1.2.5 and earlier Description: A critical issue has been found in FoxCMS, affecting the batchCope function of the file app/admin/controller/Download.php. The manipulation of the ids argument leads to SQL injection. The attack...

PT-2025-25493

Name of the Vulnerable Software and Affected Versions codesiddhant Jasmin Ransomware versions up to 1.0.1 Description A critical vulnerability has been found in codesiddhant Jasmin Ransomware, affecting an unknown functionality of the file /dashboard.php. The manipulation of the Search argument...

PT-2025-25455 · Ibm · Ibm Backup

Name of the Vulnerable Software and Affected Versions: IBM Backup, Recovery and Media Services for i versions 7.4 through 7.5 Description: The issue allows a user with the capability to compile or restore a program to gain elevated privileges due to a library unqualified call made by a BRMS...

CVE-2024-7562: Creation of Temporary File in Directory with Insecure Permissions

A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported versions InstallShield 2023 R2, InstallShield 2022 R2 and InstallShield 2021 R2 are affected by this issue...

PT-2025-25334

Name of the Vulnerable Software and Affected Versions InstallShield versions 2021 R2 through 2023 R2 Description A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. Recommendations For...

Security Bulletin: Erlang/OTP SSH Protocol Flaw Allows Remote Code Execution

Summary Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in SSH protocol message handling, a malicious...

thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link

The Mozilla Foundation's Security Advisory describes the following issue: Thunderbird's handling of the X-Mozilla-External-Attachment-URL header can be exploited to execute JavaScript in the file:/// context. By crafting a nested email attachment message/rfc822 and setting its content type to...

PT-2025-24704 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.4 through 2.4.8 Description: A stored Cross-Site Scripting XSS vulnerability could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be execut...

PT-2025-24609 · Unknown · Phpgurukul Vehicle Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Record Management System version 1.0 Description: A critical issue affects the processing of the file /admin/search-vehicle.php. The manipulation of the searchinputdata argument leads to SQL injection. The attack may be...

PT-2025-24614 · Zendto · Zendto

Name of the Vulnerable Software and Affected Versions: Zend.To versions 6.10-6 Beta and earlier Description: A critical vulnerability has been found in Zend.To, affecting the function exec of the file NSSDropoff.php. The manipulation of the argument file 1 leads to os command injection. The attac...

PT-2025-24677 · Siemens · Scalance Xr326-8 Eec +20

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RST2428P versions prior to V3.2 SCALANCE XC316-8 versions prior to V3.2 SCALANCE XC324-4 versions prior to V3.2 SCALANCE XC324-4 EEC versions prior to V3.2 SCALANCE XC332 versions prior to V3.2 SCALANCE XC416-8 versions prior to V3....

PT-2025-24719 · Perl +1 · Perl +2

Name of the Vulnerable Software and Affected Versions: IBM AIX version 7.3 IBM VIOS version 4.1.1 Description: The issue is related to the improper neutralization of pathname input in the Perl implementation, which could allow a non-privileged local user to execute arbitrary code. Recommendations...

PT-2025-24932 · Unknown · Code-Projects School Fees Payment System

Name of the Vulnerable Software and Affected Versions: code-projects School Fees Payment System version 1.0 Description: A critical issue affects the processing of the file "/datatable.php". The manipulation of the sSortDir 0 argument leads to SQL injection. The attack may be initiated remotely...

PT-2025-25129 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing an attacker with limited privileges to inject malicious scripts into vulnerable form fields. This could...

PT-2025-25175

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 137.0.7151.103 Description: A use-after-free vulnerability exists in the Media component of Google Chrome. This vulnerability could allow a remote attacker to exploit heap corruption through a crafted HTML page...

PT-2025-25109 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing an attacker with limited privileges to inject malicious scripts into vulnerable form fields. This could...

PT-2025-24692 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign Desktop versions ID20.2, ID19.5.3 and earlier Description: The issue is a NULL Pointer Dereference that could lead to application denial-of-service. An attacker could exploit this to crash the application, causing disruption in...

PT-2025-24414 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread version 5.1.0 Description: A critical vulnerability was found in the function sys recvfrom of the file rt-thread/components/lwp/lwp syscall.c. The manipulation of the argument from leads to memory corruption. Recommendations: For...