PT-2025-22404 · Mozilla · Firefox

Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 139 Description: The issue allows attackers to spoof website addresses when opening maliciously-crafted URLs in Firefox from other apps, such as Safari, if the URLs utilize non-HTTP schemes used internally by...

Astra Linux – Vulnerability in Erlang

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server might allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in the SSH protocol’s message handling, a malicious...

Astra Linux - уязвимость в yajl

yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of yajl contain an integer overflow which leads to subsequent heap memory corruption when dealing with large 2GB inputs. The reallocation logic at yajlbuf.cL64 may result in the need 32bit...

PT-2025-21894 · Unknown · Phpgurukul Auto Taxi Stand Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Auto Taxi Stand Management System version 1.0 Description: A critical issue has been discovered, affecting the file /admin/auto-taxi-entry-detail.php. The manipulation of the price argument leads to SQL injection. This issue can be...

PT-2025-21932 · Unknown · Project Worlds Online Lawyer Management System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Lawyer Management System version 1.0 Description: A critical vulnerability was found in the projectworlds Online Lawyer Management System, affecting unknown code in the file /save lawyer edit profile.php. This vulnerabili...

PT-2025-22076 · Mojoomla · Wpams

Name of the Vulnerable Software and Affected Versions: WPAMS versions prior to 44.0 Description: The issue affects the mojoomla WPAMS, allowing PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion'...

PT-2025-22055 · Dkszone · Dkszone Eximius

Name of the Vulnerable Software and Affected Versions: dkszone Eximius versions n/a through 2.2 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For versions n/a through 2.2, consider restricting file...

PT-2025-22109 · Unknown · Section Widget

Name of the Vulnerable Software and Affected Versions: Section Widget versions n/a through 3.3.1 Description: The issue is related to a Path Traversal vulnerability, specifically a '.../...//' vulnerability in the ctltwp Section Widget, which allows Path Traversal. Recommendations: For versions n...

PT-2025-21890 · Unknown · Phpgurukul Auto Taxi Stand Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Auto Taxi Stand Management System version 1.0 Description: A critical issue was found in the system, affecting the /admin/forgot-password.php file. The email argument is vulnerable to sql injection, allowing remote attacks. The iss...

PT-2025-22036 · Unknown · 1000 Projects Daily College Class Work Report Book

Name of the Vulnerable Software and Affected Versions: 1000 Projects Daily College Class Work Report Book version 1.0 Description: A critical issue has been found in the software, affecting the processing of the file /admin info.php. The manipulation of the batch argument leads to SQL injection...

PT-2025-21875 · Unknown · Phpgurukul Notice Board System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Notice Board System version 1.0 Description: A critical issue was found in the PHPGurukul Notice Board System. The problem is related to the manipulation of the Username argument, which leads to SQL injection. This can be exploited...

PT-2025-22084 · Jocoxdesign · Tiger

Name of the Vulnerable Software and Affected Versions: jocoxdesign Tiger tiger versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions n/a...

PT-2025-22042 · Crocoblock · Crocoblock Jetreviews

Name of the Vulnerable Software and Affected Versions: Crocoblock JetReviews versions 2.3.6 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File...

PT-2025-21988 · Falang · Falang

Name of the Vulnerable Software and Affected Versions: Falang multilanguage versions 1.3.61 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 1.3.61 and earlier,...

CVE-2025-47790

Nextcloud Server is a self hosted personal cloud system. Nextcloud Server prior to 29.0.15, 30.0.9, and 31.0.3 and Nextcloud Enterprise Server prior to 26.0.13.15, 27.1.11.15, 28.0.14.6, 29.0.15, 30.0.9, and 31.0.3 have a bug with session handling. The bug caused skipping the second factor...

PT-2025-21863 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Doctors Appointment System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Doctors Appointment System. This issue affects some unknown processing of the file /admin/delete-session.php. The...

PT-2025-21824 · Totolink · Totolink N300Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N300RH version 6.1c.1390 B20191101 Description: A critical issue affects the function CloudACMunualUpdateUserdata of the file "/cgi-bin/cstecgi.cgi". The manipulation of the url argument leads to command injection. This issue can be...

PT-2025-21829 · D Link · D-Link Dap-2695

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2695 version 120b36r137 ALL en 20210528 Description: A vulnerability was found in the MAC Bypass Settings Page, specifically affecting the file /adv macbypass.php. The manipulation of the argument f mac leads to cross-site scriptin...

PT-2025-21862 · Unknown · Calmkart Django-Sso-Server

Name of the Vulnerable Software and Affected Versions: calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15 Description: A vulnerability was found in the function gen rsa keys of the file common/crypto.py, leading to inadequate encryption strength. The attack can be initiated...

PT-2025-21848 · Unknown · Sourcecodester Restaurant Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Restaurant Management System version 1.0 Description: A critical issue was found in the iSourcecode Restaurant Management System, affecting an unknown functionality of the file /admin/user save.php. The manipulation of the...