797 matches found
PT-2025-27253 · Sublinkx · Sublinkx
Name of the Vulnerable Software and Affected Versions: gooaclok819 sublinkX versions up to 1.8 Description: A critical issue has been found, affecting the function AddTemp of the file api/template.go. The manipulation of the argument filename leads to path traversal. This issue can be exploited...
CVE-2025-53073
In Sentry 25.1.0 through 25.5.1, an authenticated attacker can access a project's issue endpoint and perform unauthorized actions such as adding a comment without being a member of the project's team. A seven-digit issue ID must be known it is not treated as a secret and might be mentioned...
PT-2025-27002
Name of the Vulnerable Software and Affected Versions: Octo-STS versions prior to v0.5.3 Description: Octo-STS is a GitHub App that acts like a Security Token Service STS for the GitHub API. The issue allows for unauthenticated Server-Side Request Forgery SSRF by abusing fields in OpenID Connect...
PT-2025-26954 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is described as not being a vulnerability, with a severity of 0.0 and marked as NA. No further details are provided about the nature of the issue or its potential impact...
PT-2025-26813 · Brother Industries +4 · Ads-2400N +685
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated attacker may perform a limited server side request forgery SSRF, forcing the target device to open a TCP connection to an arbitrary port number on an arbitrary IP address...
PT-2025-26881 · Codeastro · Codeastro Patient Record Management System
Name of the Vulnerable Software and Affected Versions: CodeAstro Patient Record Management System version 1.0 Description: A problematic issue was found, leading to cross-site request forgery. The manipulation can be launched remotely. Recommendations: For CodeAstro Patient Record Management Syst...
CVE-2025-6429
Mozilla Firefox and Thunderbird are vulnerable to a security bypass due to the incorrect parsing of URLs within an embed tag. The flaw could cause the browser to rewrite the URL to the youtube.com domain, potentially bypassing website security checks that restrict which domains users are permitte...
CVE-2025-53073
In Sentry 25.1.0 through 25.5.1, an authenticated attacker can access a project's issue endpoint and perform unauthorized actions such as adding a comment without being a member of the project's team. A seven-digit issue ID must be known it is not treated as a secret and might be mentioned...
PT-2025-26582
Name of the Vulnerable Software and Affected Versions: WSO2 products affected versions not specified Description: An incorrect authorization issue exists, allowing unauthorized access to versioned files stored in the registry. This is due to flawed authorization logic, which can be exploited by a...
PT-2025-26284 · Unknown · Campcodes Sales/Inventory System
Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /pages/cat update.php. The manipulation of the ID argument leads to SQL injection. It is possibl...
PT-2025-26223
Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.7 and prior Description The issue concerns RabbitMQ logging authorization headers in plaintext, encoded in base64, when queried with HTTP/s and basic authentication. This results in logs containing all request headers,...
PT-2025-26251 · Powsybl · Powsybl
Name of the Vulnerable Software and Affected Versions: PowSyBl versions 6.3.0 through 6.7.1 Description: The issue is a deserialization problem in the read method of the SparseMatrix class, which can lead to various privilege escalations depending on the circumstances. This method takes an...
PT-2025-25874 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises when changing the console font with ioctlKDFONTOP, where the new font size can be larger than the previous one. This can lead to out-of-bounds accesses to graphics...
PT-2025-26090 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0-rc3+ Description: A vulnerability in the Linux kernel has been resolved, related to the wifi component, specifically in the iwlwifi mvm module. The issue occurs when station queues are disabled, and the...
PT-2025-25694 · Unknown · Thembay Besa
Name of the Vulnerable Software and Affected Versions: thembay Besa versions n/a through 2.3.8 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This...
PT-2025-25619 · Unknown · Sourcecodester Simple Food Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Food Ordering System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /editproduct.php. The manipulation of the photo argument leads to unrestricted upload. It ...
PT-2025-25747
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An Out-of-bounds Write issue exists within the parsing of PRJ files due to the lack of proper validation of user-supplied data. This can result in memory corruption issues, such as reading and...
PT-2025-25696 · Unknown · Thembay Nika
Name of the Vulnerable Software and Affected Versions: thembay Nika versions 1.2.8 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local File...
PT-2025-25467 · Apache · Apache Http Server
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an information disclosure problem. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this...
