Skip to content

Commit 90d83b1

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-64f6-cxwr-2jr4 GHSA-fh8h-mwrg-g6m3 GHSA-q792-7q8g-fgf5 GHSA-qxfj-gqc8-v87m GHSA-v736-7qxc-59qf
1 parent 42fbf39 commit 90d83b1

File tree

5 files changed

+260
-0
lines changed

5 files changed

+260
-0
lines changed

‎advisories/unreviewed/2025/09/GHSA-64f6-cxwr-2jr4/GHSA-64f6-cxwr-2jr4.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-64f6-cxwr-2jr4",
4+
"modified": "2025-09-07T03:30:19Z",
5+
"published": "2025-09-07T03:30:19Z",
6+
"aliases": [
7+
"CVE-2025-10067"
8+
],
9+
"details": "A vulnerability was detected in itsourcecode POS Point of Sale System 1.0. The impacted element is an unknown function of the file /inventory/main/vendors/datatables/unit_testing/templates/empty_table.php. Performing manipulation of the argument scripts results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10067"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/AlphabugX/CVE-Report/blob/main/CVE-011.md"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://itsourcecode.com"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?ctiid.322990"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?id.322990"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?submit.643955"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-79"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2025-09-07T02:15:32Z"
55+
}
56+
}

‎advisories/unreviewed/2025/09/GHSA-fh8h-mwrg-g6m3/GHSA-fh8h-mwrg-g6m3.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-fh8h-mwrg-g6m3",
4+
"modified": "2025-09-07T03:30:19Z",
5+
"published": "2025-09-07T03:30:19Z",
6+
"aliases": [
7+
"CVE-2025-10064"
8+
],
9+
"details": "A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This issue affects some unknown processing of the file /inventory/main/vendors/datatables/unit_testing/templates/dom_data_two_headers.php. The manipulation of the argument scripts results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be exploited.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10064"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/AlphabugX/CVE-Report/blob/main/CVE-008.md"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://itsourcecode.com"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?ctiid.322987"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?id.322987"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?submit.643946"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-79"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2025-09-07T01:15:31Z"
55+
}
56+
}

‎advisories/unreviewed/2025/09/GHSA-q792-7q8g-fgf5/GHSA-q792-7q8g-fgf5.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-q792-7q8g-fgf5",
4+
"modified": "2025-09-07T03:30:19Z",
5+
"published": "2025-09-07T03:30:19Z",
6+
"aliases": [
7+
"CVE-2025-10065"
8+
],
9+
"details": "A weakness has been identified in itsourcecode POS Point of Sale System 1.0. Impacted is an unknown function of the file /inventory/main/vendors/datatables/unit_testing/templates/dom_data_th.php. This manipulation of the argument scripts causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10065"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/AlphabugX/CVE-Report/blob/main/CVE-009.md"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://itsourcecode.com"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?ctiid.322988"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?id.322988"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?submit.643947"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-79"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2025-09-07T01:15:31Z"
55+
}
56+
}

‎advisories/unreviewed/2025/09/GHSA-qxfj-gqc8-v87m/GHSA-qxfj-gqc8-v87m.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-qxfj-gqc8-v87m",
4+
"modified": "2025-09-07T03:30:19Z",
5+
"published": "2025-09-07T03:30:19Z",
6+
"aliases": [
7+
"CVE-2025-10066"
8+
],
9+
"details": "A security vulnerability has been detected in itsourcecode POS Point of Sale System 1.0. The affected element is an unknown function of the file /inventory/main/vendors/datatables/unit_testing/templates/dymanic_table.php. Such manipulation of the argument scripts leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10066"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/AlphabugX/CVE-Report/blob/main/CVE-010.md"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://itsourcecode.com"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?ctiid.322989"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?id.322989"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?submit.643948"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-79"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2025-09-07T01:15:32Z"
55+
}
56+
}

‎advisories/unreviewed/2025/09/GHSA-v736-7qxc-59qf/GHSA-v736-7qxc-59qf.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-v736-7qxc-59qf",
4+
"modified": "2025-09-07T03:30:19Z",
5+
"published": "2025-09-07T03:30:19Z",
6+
"aliases": [
7+
"CVE-2025-36100"
8+
],
9+
"details": "IBM MQ LTS 9.1.0.0 through 9.1.0.29, 9.2.0.0 through 9.2.0.36, 9.3.0.0 through 9.3.0.30 and 9.4.0.0 through 9.4.0.12 and IBM MQ CD 9.3.0.0 through 9.3.5.1 and 9.4.0.0 through 9.4.3.0  Java and JMS stores a password in client configuration files when trace is enabled which can be read by a local user.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-36100"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.ibm.com/support/pages/node/7243544"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-260"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-09-07T01:15:32Z"
35+
}
36+
}

0 commit comments

Comments
 (0)