PT-2025-19950 · Unknown · Phpgurukul Company Visitor Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Company Visitor Management System version 2.0 Description: A critical vulnerability has been found in the PHPGurukul Company Visitor Management System. This issue affects the /department.php file and is related to SQL injection. Th...

PT-2025-19822 · Unknown · Kefaming Mayi

Name of the Vulnerable Software and Affected Versions: kefaming mayi versions 1.3.9 and earlier Description: A critical vulnerability has been found in kefaming mayi, affecting the function Upload of the file app/tools/controller/File.php. The manipulation of the argument File leads to unrestrict...

PT-2025-19944 · Tenda · Tenda Dap-1520

Name of the Vulnerable Software and Affected Versions: Tenda DAP-1520 version 1.10B04 BETA02 Description: A critical issue has been found, affecting the set ws action function of the /dws/api/ file, leading to a heap-based buffer overflow. This can be initiated remotely. Recommendations: For Tend...

PT-2025-19951 · Unknown · Gym Management System

Name of the Vulnerable Software and Affected Versions: Gym Management System version 1.0 Description: A critical issue was found in the Gym Management System, affecting the /ajax.php?action=save membership file. The manipulation of the member id argument leads to SQL injection. This issue can be...

PT-2025-19927 · Phpgurukul · Phpgurukul Company Visitor Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Company Visitor Management System version 2.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /visitor-detail.php. The manipulation of the editid argument leads to SQL injection...

PT-2025-19824 · WordPress · Reales Wp Stpt

Name of the Vulnerable Software and Affected Versions: Reales WP STPT plugin for WordPress versions up to and including 2.1.2 Description: The issue arises from the plugin's failure to properly validate a user's identity before updating their details, such as the password. This allows authenticat...

PT-2025-19806 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: A SQL injection issue was discovered in the admin topic.php component. Recommendations: For SeaCMS version 13.3, update to a version that fixes the SQL injection vulnerability in the admin topic.php component...

PT-2025-19805 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: A SQL injection issue was discovered in the admin manager.php component. Recommendations: For SeaCMS version 13.3, update to a version that fixes the SQL injection vulnerability in the admin manager.php...

PT-2025-19344 · Unknown · Sourcecodester/Oretnom23 Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester/oretnom23 Stock Management System. This affects an unknown part of the file /admin/?page=purchase order/view po...

PT-2025-19705 · Mechrevo · Mechrevo Control Console

Name of the Vulnerable Software and Affected Versions: Mechrevo Control Console version 1.0.2.70 Description: A critical issue affects an unknown functionality in the library C:Program FilesOEMMECHREVO Control CenterUniwillServiceMyControlCentercsCAPI.dll of the component GCUService. The...

PT-2025-19887 · Dell · Dell Storage Center +1

Name of the Vulnerable Software and Affected Versions: Dell Storage Center - Dell Storage Manager version 20.0.21 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This could allow an unauthenticate...

PT-2025-19731 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the devname parameter in the reset wifi function. Recommendations: For version 1.0.2.26, consider restricting acces...

PT-2025-19717 · Unknown · Kashipara Online Service Management Portal

Name of the Vulnerable Software and Affected Versions: Kashipara Online Service Management Portal version V1.0 Description: A Directory Listing Vulnerability was found in the /osms/Requester/ directory. Recommendations: For Kashipara Online Service Management Portal version V1.0, consider...

PT-2025-19350 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.374 Description: A vulnerability was found in the Config Handler component of the TOTOLINK A720R, affecting an unknown function of the file /cgi-bin/cstecgi.cgi. The manipulation of the topicurl argument with th...

PT-2025-19708 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web Based Pharmacy Product Management System version 1.0 Description: The issue concerns Cross Site Scripting XSS in the add-admin.php file via the Fullname text field. This allows for potential malicious script injection...

PT-2025-19732 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the ifname parameter in the apcli do enr pbc wps function. Recommendations: For version 1.0.2.26, consider...

PT-2025-19771 · Misskey · Misskey

Name of the Vulnerable Software and Affected Versions: Misskey versions 12.31.0 through 2025.4.0 Description: The issue is related to missing validation in Mk:api, which allows malicious AiScript code to access additional endpoints that it isn't designed to have access to. This is achieved by...

PT-2025-19809 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 versions up to 15.03.06.23 Description: A critical vulnerability was found in Tenda AC1206, affecting the function formSetCfm of the file /goform/setcfm. The manipulation leads to buffer overflow. The attack can be initiated...

PT-2025-19727 · Shenzhen Sixun · Sixun Shanghui Group Business Management System

Name of the Vulnerable Software and Affected Versions: Shenzhen Sixun Software Sixun Shanghui Group Business Management System version 7 Description: A vulnerability was found in the system, affecting an unknown part of the file "/api/GylOperator/LoadData". The manipulation leads to information...

PT-2025-19889 · Dell · Dell Storage Center +1

Name of the Vulnerable Software and Affected Versions: Dell Storage Center - Dell Storage Manager version 21.0.20 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This could allow an unauthenticated attacker...