Skip to content

Commit fed11e3

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-98qw-prqm-9f4p GHSA-4mcf-c9v4-fpcr GHSA-cv6h-r85q-6vvv GHSA-pcp2-9pj8-878j GHSA-q2gf-mw7m-x2mr
1 parent ed442cc commit fed11e3

File tree

5 files changed

+176
-2
lines changed

5 files changed

+176
-2
lines changed

‎advisories/unreviewed/2025/06/GHSA-98qw-prqm-9f4p/GHSA-98qw-prqm-9f4p.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-98qw-prqm-9f4p",
4-
"modified": "2025-11-03T03:30:25Z",
4+
"modified": "2025-11-03T06:30:26Z",
55
"published": "2025-06-26T21:31:08Z",
66
"aliases": [
77
"CVE-2025-5318"
@@ -47,6 +47,10 @@
4747
"type": "WEB",
4848
"url": "https://access.redhat.com/errata/RHSA-2025:19400"
4949
},
50+
{
51+
"type": "WEB",
52+
"url": "https://access.redhat.com/errata/RHSA-2025:19401"
53+
},
5054
{
5155
"type": "WEB",
5256
"url": "https://access.redhat.com/security/cve/CVE-2025-5318"

‎advisories/unreviewed/2025/08/GHSA-4mcf-c9v4-fpcr/GHSA-4mcf-c9v4-fpcr.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-4mcf-c9v4-fpcr",
4-
"modified": "2025-08-29T21:32:02Z",
4+
"modified": "2025-11-03T06:30:26Z",
55
"published": "2025-08-29T21:32:02Z",
66
"aliases": [
77
"CVE-2023-41471"
@@ -23,6 +23,10 @@
2323
"type": "WEB",
2424
"url": "https://github.com/9001/copyparty"
2525
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/9001/copyparty/releases/tag/v1.9.2"
29+
},
2630
{
2731
"type": "WEB",
2832
"url": "https://github.com/Trinity-SYT-SECURITY/XSS_vuln_issue/blob/main/copyparty.md"

‎advisories/unreviewed/2025/11/GHSA-cv6h-r85q-6vvv/GHSA-cv6h-r85q-6vvv.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-cv6h-r85q-6vvv",
4+
"modified": "2025-11-03T06:30:26Z",
5+
"published": "2025-11-03T06:30:26Z",
6+
"aliases": [
7+
"CVE-2025-12617"
8+
],
9+
"details": "A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/login_crud.php. Executing manipulation of the argument Password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12617"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://itsourcecode.com"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.330911"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.330911"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.678665"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://www.yuque.com/yuqueyonghuexlgkz/zepczx/py9oh6m1p7mx4eqr?singleDoc"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-74"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2025-11-03T05:15:46Z"
55+
}
56+
}

‎advisories/unreviewed/2025/11/GHSA-pcp2-9pj8-878j/GHSA-pcp2-9pj8-878j.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-pcp2-9pj8-878j",
4+
"modified": "2025-11-03T06:30:26Z",
5+
"published": "2025-11-03T06:30:26Z",
6+
"aliases": [
7+
"CVE-2025-12616"
8+
],
9+
"details": "A vulnerability was detected in PHPGurukul News Portal 1.0. The impacted element is an unknown function of the file /onps/settings.py. Performing manipulation results in insertion of sensitive information into debugging code. It is possible to initiate the attack remotely. The attack's complexity is rated as high. The exploitability is regarded as difficult. The exploit is now public and may be used.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12616"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/NishantKumar-CSE/News-Portal-Python-Django-Project/blob/main/Information%20Disclosure%20via%20Debug%20Mode.md"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://phpgurukul.com"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?ctiid.330910"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?id.330910"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?submit.678649"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-200"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2025-11-03T04:15:32Z"
55+
}
56+
}

‎advisories/unreviewed/2025/11/GHSA-q2gf-mw7m-x2mr/GHSA-q2gf-mw7m-x2mr.json‎

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-q2gf-mw7m-x2mr",
4+
"modified": "2025-11-03T06:30:26Z",
5+
"published": "2025-11-03T06:30:26Z",
6+
"aliases": [
7+
"CVE-2025-12615"
8+
],
9+
"details": "A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRET_KEY leads to use of hard-coded cryptographic key\n . The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been disclosed publicly and may be used.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12615"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/NishantKumar-CSE/News-Portal-Python-Django-Project/blob/main/Hard-coded%20Cryptographic%20Key.md"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://phpgurukul.com"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?ctiid.330909"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?id.330909"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?submit.678625"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [],
49+
"severity": "LOW",
50+
"github_reviewed": false,
51+
"github_reviewed_at": null,
52+
"nvd_published_at": "2025-11-03T04:15:32Z"
53+
}
54+
}

0 commit comments

Comments
 (0)