PT-2025-23018 · Unknown · Phpgurukul News Portal Project

Name of the Vulnerable Software and Affected Versions: PHPGurukul News Portal Project version 4.1 Description: A critical issue has been found in the PHPGurukul News Portal Project. The problem affects the /admin/edit-subcategory.php file, where the manipulation of the Category argument leads to...

PT-2025-23019 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: maccms10 version 2025.1000.4047 Description: The issue is related to Server-Side request forgery SSRF in Friend Link Management. This allows an attacker to trick the server into making unintended requests. Recommendations: For version...

PT-2025-22951 · Unknown · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown function of the file /admin/add-doctor.php. The manipulation of the Doctorspecialization argument...

PT-2025-23004 · Campcodes · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue was discovered, affecting the file /hms/admin/query-details.php. The manipulation of the adminremark argument leads to SQL injection. This issue can be...

PT-2025-22959 · Unknown · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /admin/view-patient.php. The manipulation of the viewid argument leads to SQL injection. The attack may be...

PT-2025-22939 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue has been found in the PHPGurukul Employee Record Management System. This issue affects the file /loginerms.php and is related to SQL injection. The...

PT-2025-22942 · Unknown · Projectworlds Responsive E-Learning System

Name of the Vulnerable Software and Affected Versions: projectworlds Responsive E-Learning System version 1.0 Description: A critical issue has been identified in the system, affecting an unknown functionality of the file /admin/delete file.php. The manipulation of the ID argument leads to SQL...

PT-2025-22941 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue was found in the PHPGurukul Employee Record Management System. The problem affects an unknown function of the file /admin/editempexp.php. Manipulation of t...

PT-2025-22921 · Realce Tecnologia · Realce Tecnologia Queue Ticket Kiosk

Name of the Vulnerable Software and Affected Versions: Realce Tecnologia Queue Ticket Kiosk up to 20250517 Description: A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk, affecting an unknown functionality of the file /adm/index.php of the component Cadastro de Administrador Page...

PT-2025-23651 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R version 1.0.0-B20230726.1108 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /boafrm/formMapDel. The manipulation of the argument devicemac1 leads to command...

PT-2025-22876 · Unknown · Perfreeblog

Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 4.0.11 Description: A vulnerability has been found in the function JwtUtil of the component JWT Handler, which leads to the use of a hard-coded cryptographic key. The attack can be initiated remotely, and the complexity of...

PT-2025-22874 · H3C · H3C Seccenter Smp-E1114P02

Name of the Vulnerable Software and Affected Versions: H3C SecCenter SMP-E1114P02 up to 20250513 Description: A critical vulnerability has been found in H3C SecCenter SMP-E1114P02, affecting some unknown functionality of the file /safeEvent/importFile/. The manipulation of the argument...

PT-2025-22914 · Econtrata · Econtrata

Name of the Vulnerable Software and Affected Versions: Econtrata up to 20250516 Description: A critical vulnerability was found in Econtrata, affecting an unknown function of the file /valida. The manipulation of the argument usuario leads to SQL injection. It is possible to launch the attack...

PT-2025-22896 · Unknown · I2A-Cronos

Name of the Vulnerable Software and Affected Versions: i2A-Cronos version 23.02.01.17 Description: A Stored Cross-Site Scripting XSS issue allows an authenticated attacker to upload a malicious SVG image into the user's personal space in...

PT-2025-22922 · Unknown +1 · Nfwchk.Exe +2

Name of the Vulnerable Software and Affected Versions: Wondershare Filmora version 14.5.16 Description: A critical vulnerability has been found in Wondershare Filmora, affecting some unknown functionality in the library CRYPTBASE.dll of the file NFWCHK.exe of the component Installer. The...

PT-2025-22943 · Unknown · Kashipara Responsive Online Learing Platform

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive Online Learing Platform version 1.0 Description: A critical issue was found in the software, affecting some unknown functionality of the file /courses/course detail user new.php. The manipulation of the ID argument leads ...

PT-2025-22871 · H3C · H3C Seccenter Smp-E1114P02

Name of the Vulnerable Software and Affected Versions: H3C SecCenter SMP-E1114P02 up to 20250513 Description: A vulnerability was found in the function Download of the file /cfgFile/1/download. The manipulation of the argument Name leads to path traversal. The attack may be initiated remotely...

PT-2025-22852 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.117 Description: A critical issue was found in DedeCMS, affecting an unknown function of the file dede/sys verifies.php?action=getfiles. The manipulation of the refiles argument leads to code injection. This issue can be...

PT-2025-22867 · Qianfox · Foxcms

Name of the Vulnerable Software and Affected Versions: qianfox FoxCMS version 1.2.5 Description: A critical issue has been found in the batchCope function of the app/admin/controller/Article.php file. The manipulation of the ids argument leads to SQL injection. This issue can be exploited remotel...

PT-2025-22870 · H3C · H3C Seccenter Smp-E1114P02

Name of the Vulnerable Software and Affected Versions: H3C SecCenter SMP-E1114P02 up to 20250513 Description: A vulnerability was found in the function downloadSoftware of the file /cfgFile/downloadSoftware. The manipulation of the argument filename leads to path traversal. The attack can be...