General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2025-70458 | A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainCheckerApp class within domain/script.js of So… | Medium (5.4) | 2026-01-23 | General Purpose |
| CVE-2025-70457 | A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/u… | Critical (9.8) | 2026-01-23 | General Purpose |
| CVE-2025-52026 | An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backen… | High (7.5) | 2026-01-23 | General Purpose |
| CVE-2025-52025 | An SQL Injection vulnerability exists in the GetServiceByRestaurantID endpoint of the Aptsys gemscms POS Platform backe… | Critical (9.4) | 2026-01-23 | General Purpose |
| CVE-2025-52024 | A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testi… | Critical (9.4) | 2026-01-23 | General Purpose |