GHSA-274Q-79Q9-52J7 Character injection in Hubble CLI

Impact A network attacker could inject malicious control characters into Hubble CLI terminal output, potentially leading to loss of integrity and manipulation of the output. This could be leveraged to conceal log entries, rewrite output, or even make the terminal temporarily unusable. Exploitatio...

PT-2025-22406 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /admin/edit-category.php. The manipulation of the Category argument leads to SQL injection. This issue c...

PT-2025-22419

Name of the Vulnerable Software and Affected Versions SeedDMS version 6.0.32 Description A vulnerability in SeedDMS allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functionality in the Extension Manager. Recommendations For SeedDMS version 6.0.3...

PT-2025-22445 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical issue was found in the software, affecting some unknown functionality of the file /admin/insert-product.php. The manipulation of the Category argument leads to SQL injection...

CVE-2025-48056 Hubble CLI vulnerable to character injection

Hubble is a fully distributed networking and security observability platform for cloud native workloads. Prior to version 1.17.2, a network attacker could inject malicious control characters into Hubble CLI terminal output, potentially leading to loss of integrity and manipulation of the output...

DEBIAN-CVE-2025-30193

In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from a client, an attacker can cause a denial of service by crafting a TCP exchange that triggers an exhaustion of the stack and a crash of DNSdist, causing a denial of...

CVE-2025-30193

In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from a client, an attacker can cause a denial of service by crafting a TCP exchange that triggers an exhaustion of the stack and a crash of DNSdist, causing a denial of...

PT-2025-22166 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A bug in the Linux kernel has been identified, which can lead to a busy inode at unmount time, resulting in a kernel BUG. This issue occurs when btrfs alloc path fails, and btrfs...

PT-2025-22404 · Mozilla · Firefox

Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 139 Description: The issue allows attackers to spoof website addresses when opening maliciously-crafted URLs in Firefox from other apps, such as Safari, if the URLs utilize non-HTTP schemes used internally by...

PT-2025-22316 · Part-Db · Part-Db

Name of the Vulnerable Software and Affected Versions: Part-DB versions up to 1.17.0 Description: A vulnerability was found in the Profile Picture Feature of Part-DB, affecting the handleUpload function of the AttachmentSubmitHandler.php file. The manipulation of the attachment argument leads to...

Astra Linux - уязвимость в yajl

yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of yajl contain an integer overflow which leads to subsequent heap memory corruption when dealing with large 2GB inputs. The reallocation logic at yajlbuf.cL64 may result in the need 32bit...

PT-2025-21890 · Unknown · Phpgurukul Auto Taxi Stand Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Auto Taxi Stand Management System version 1.0 Description: A critical issue was found in the system, affecting the /admin/forgot-password.php file. The email argument is vulnerable to sql injection, allowing remote attacks. The iss...

PT-2025-22084 · Jocoxdesign · Tiger

Name of the Vulnerable Software and Affected Versions: jocoxdesign Tiger tiger versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions n/a...

PT-2025-22055 · Dkszone · Dkszone Eximius

Name of the Vulnerable Software and Affected Versions: dkszone Eximius versions n/a through 2.2 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For versions n/a through 2.2, consider restricting file...

PT-2025-21875 · Unknown · Phpgurukul Notice Board System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Notice Board System version 1.0 Description: A critical issue was found in the PHPGurukul Notice Board System. The problem is related to the manipulation of the Username argument, which leads to SQL injection. This can be exploited...

PT-2025-22042 · Crocoblock · Crocoblock Jetreviews

Name of the Vulnerable Software and Affected Versions: Crocoblock JetReviews versions 2.3.6 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File...

PT-2025-21932 · Unknown · Project Worlds Online Lawyer Management System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Lawyer Management System version 1.0 Description: A critical vulnerability was found in the projectworlds Online Lawyer Management System, affecting unknown code in the file /save lawyer edit profile.php. This vulnerabili...

PT-2025-21894 · Unknown · Phpgurukul Auto Taxi Stand Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Auto Taxi Stand Management System version 1.0 Description: A critical issue has been discovered, affecting the file /admin/auto-taxi-entry-detail.php. The manipulation of the price argument leads to SQL injection. This issue can be...

PT-2025-22036 · Unknown · 1000 Projects Daily College Class Work Report Book

Name of the Vulnerable Software and Affected Versions: 1000 Projects Daily College Class Work Report Book version 1.0 Description: A critical issue has been found in the software, affecting the processing of the file /admin info.php. The manipulation of the batch argument leads to SQL injection...

PT-2025-22076 · Mojoomla · Wpams

Name of the Vulnerable Software and Affected Versions: WPAMS versions prior to 44.0 Description: The issue affects the mojoomla WPAMS, allowing PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion'...