OESA-2025-2362 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

CVE-2025-11594

A vulnerability has been found in ywxbear PHP-Bookstore-Website-Example and PHP Basic BookStore Website up to 0e0b9f542f7a2d90a8d7f8c83caca69294e234e4. This issue affects some unknown processing of the file /index.php of the component Quantity Handler. Such manipulation leads to improper validati...

CVE-2025-11319

A weakness has been identified in nahiduddinahammed Hospital-Management-System-Website up to e6562429e14b2f88bd2139cae16e87b965024097. This issue affects some unknown processing of the file /delete.php. This manipulation of the argument ai causes sql injection. It is possible to initiate the atta...

CVE-2023-47806

Cross-Site Request Forgery CSRF vulnerability in Saint Systems Disable User Login.This issue affects Disable User Login: from n/a through 1.3.7...

PT-2025-15357 · Unknown · Mymagicpower Aias

Name of the Vulnerable Software and Affected Versions: mymagicpower AIAS 20250308 Description: A critical issue was found in mymagicpower AIAS, affecting an unknown function of the file 2 training platform/train-platform/src/main/java/top/aias/training/controller/InferController.java. The...

PT-2025-3892 · Netvision Information · Airpass

Name of the Vulnerable Software and Affected Versions: airPASS from NetVision Information affected versions not specified Description: The issue allows unauthenticated remote attackers to access specific administrative functionality, enabling them to retrieve all accounts and passwords. This pose...

PT-2025-3833 · Unknown · Codezips Project Management System

Name of the Vulnerable Software and Affected Versions: Codezips Project Management System version 1.0 Description: A critical issue has been found in Codezips Project Management System, affecting an unknown part of the file /pages/forms/teacher.php. The manipulation of the argument name leads to...

PT-2025-4577 · Unknown · Bozdoz Quote Tweet

Name of the Vulnerable Software and Affected Versions: bozdoz Quote Tweet versions n/a through 0.7 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and...

PT-2024-10666 · Unknown · /Proc/Driver/Wmt Dbg

Name of the Vulnerable Software and Affected Versions: /proc/driver/wmt dbg driver affected versions not specified Description: The issue concerns the /proc/driver/wmt dbg driver, where several possible out of bounds writes could lead to local escalation of privilege. System execution privileges...

PT-2024-33353 · Unknown · Madiri Salman Aashish

Name of the Vulnerable Software and Affected Versions: Madiri Salman Aashish versions n/a through 1.1 Description: The issue is related to Incorrect Privilege Assignment in the registration system, allowing Privilege Escalation when adding drop down roles. This can be exploited due to the incorre...

PT-2024-38795 · Unknown · Sourcecodester E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Commerce System version 1.0 Description: A critical vulnerability has been found in the SourceCodester E-Commerce System, affecting unknown code of the file /ecommerce/admin/login.php of the component Admin Login. The...

PT-2024-40356 · Unknown · Laravel Framework

Name of the Vulnerable Software and Affected Versions: Laravel Framework affected versions not specified Description: The issue arises when a field, normally a non-array value, is crafted as an array in a request and this input is not validated or cast to its expected type before being passed to...

PT-2024-13272 · Unknown · Webreports

Name of the Vulnerable Software and Affected Versions: WebReports affected versions not specified Description: The issue allows an administrative user of WebReports to perform a Cross Site Scripting XSS and/or Man in the Middle MITM exploit through SAML configuration. Recommendations: At the...

PT-2023-25431 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: JerryScript version 3.0 Description: The issue allows remote attackers to execute arbitrary code via the ecma stringbuilder append raw component at /jerry-core/ecma/base/ecma-helpers-string.c. This is a Buffer Overflow vulnerability...

PT-2023-24004 · Unknown · E-Excellence U-Office Force

Name of the Vulnerable Software and Affected Versions: e-Excellence U-Office Force affected versions not specified Description: The issue is related to a path traversal vulnerability within the file uploading and downloading functions. An unauthenticated remote attacker can exploit this to read...

Home Assistant Detection Consolidation

Consolidation of Home Assistant detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

PT-2023-11821 · Unknown · Youngerheart Nodeserver

Name of the Vulnerable Software and Affected Versions: youngerheart nodeserver affected versions not specified Description: A critical vulnerability has been found in youngerheart nodeserver, affecting an unknown functionality of the file nodeserver.js. The manipulation leads to path traversal...

PT-2022-9031 · Unknown · Chris92De Adminserv

Name of the Vulnerable Software and Affected Versions: Chris92de AdminServ affected versions not specified Description: A vulnerability was found in Chris92de AdminServ, affecting unknown code of the file resources/core/adminserv.php. The manipulation of the text argument leads to cross-site...

PT-2022-24973 · Unknown · Eolinker Goku Lite

Name of the Vulnerable Software and Affected Versions: eolinker goku lite affected versions not specified Description: A critical issue was found in the software, affecting the /plugin/getList file. The manipulation of the route/keyword argument leads to SQL injection. The attack can be initiated...

PT-2022-16254 · Unknown · Securegate

Name of the Vulnerable Software and Affected Versions: SecureGate affected versions not specified Description: The issue involves SQL-Injection using login without password and a path traversal vulnerability during file transfer. An attacker can exploit these to obtain privileges, execute remote...