PT-2025-19758 · Unknown · Sourcecodester/Oretnom23 Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A vulnerability has been found in the SourceCodester/oretnom23 Stock Management System, classified as problematic. This issue affects unknown code of the file...

PT-2025-19340 · Unknown · Phpgurukul Emergency Ambulance Hiring Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description: A critical vulnerability was found in the PHPGurukul Emergency Ambulance Hiring Portal. The issue affects an unknown functionality of the file /admin/contact-us.php. The...

PT-2025-19808 · Unknown · Phpgurukul Men Salon Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 2.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /admin/change-password.php. This issue leads to SQL injection and can be initiated remotely...

PT-2025-19809 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 versions up to 15.03.06.23 Description: A critical vulnerability was found in Tenda AC1206, affecting the function formSetCfm of the file /goform/setcfm. The manipulation leads to buffer overflow. The attack can be initiated...

PT-2025-19370 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.374 Description: A vulnerability was found in the TOTOLINK A720R, affecting an unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the topicurl argument with the input showSyslog leads to...

PT-2025-19325 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.2 Description: A problematic vulnerability has been found in SeaCMS, affecting the processing of the file /admin pay.php. The manipulation of the cstatus argument leads to cross-site scripting. The attack can be initiated...

PT-2025-19884 · Dell · Dell Storage Center +1

Name of the Vulnerable Software and Affected Versions: Dell Storage Center - Dell Storage Manager version 20.1.20 Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as 'Command Injection'. This could allow a low-privileged attacker wi...

PT-2025-19729 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: foxcms version 1.2.5 Description: The issue is a SQL injection vulnerability via the executeCommand method in DataBackup.php. This vulnerability allows for potential SQL injection attacks. Recommendations: For foxcms version 1.2.5, consider...

PT-2025-19775 · Unknown · Itranswarp

Name of the Vulnerable Software and Affected Versions: itranswarp version 2.19 Description: An issue in the component /manage/ of itranswarp allows attackers to bypass authentication via a crafted request. Recommendations: For version 2.19, consider restricting access to the /manage/ component...

PT-2025-19762 · Unknown · Sourcecodester/Oretnom23 Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A critical issue affects the processing of the file /classes/Login.php?f=login, where the manipulation of the Username argument leads to SQL injection. The attack can b...

PT-2025-18962 · Unknown · Sourcecodester Simple To-Do List System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple To-Do List System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Simple To-Do List System, affecting an unknown functionality of the file /complete task.php. The manipulation of th...

PT-2025-18963 · Unknown · Phpgurukul E-Diary Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1.0 Description: A critical vulnerability was found in the PHPGurukul e-Diary Management System, affecting some unknown functionality of the file /manage-categories.php. The manipulation of the ID...

PT-2025-18952 · Unknown · Phpgurukul Teacher Subject Allocation Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Teacher Subject Allocation Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Teacher Subject Allocation Management System. The issue affects an unknown function of the file...

PT-2025-18931 · WordPress · Xavin'S Review Ratings

Name of the Vulnerable Software and Affected Versions: Xavin's Review Ratings plugin for WordPress versions up to, and including, 1.4.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'xrr' shortcode due to insufficient input sanitization and output escaping on...

PT-2025-18932 · WordPress · Verticalresponse Newsletter Widget

Name of the Vulnerable Software and Affected Versions: VerticalResponse Newsletter Widget plugin for WordPress versions up to, and including, 1.6 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'verticalresponse' shortcode due to insufficient input sanitization a...

PT-2025-18935 · Unknown · Abundatrade Plugin

Name of the Vulnerable Software and Affected Versions: Abundatrade Plugin versions up to, and including, 1.8.02 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'abundatrade' page. This allows unauthenticated attackers to update...

PT-2025-18940 · WordPress · Surveyjs Plugin

Name of the Vulnerable Software and Affected Versions: SurveyJS plugin for WordPress versions up to and including 1.12.32 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping, allowing authenticated attackers with...

PT-2025-18759 · WordPress · Formality

Name of the Vulnerable Software and Affected Versions: Formality plugin for WordPress versions up to, and including, 1.5.8 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with...

PT-2025-18922 · Unknown · Handrew Browserpilot

Name of the Vulnerable Software and Affected Versions: handrew browserpilot versions up to 0.2.51 Description: A critical issue was found in the GPTSeleniumAgent function of the file browserpilot/browserpilot/agents/gpt selenium agent.py. The manipulation of the instructions argument leads to cod...

PT-2025-18758 · WordPress · Taxonomy Chain Menu

Name of the Vulnerable Software and Affected Versions: Taxonomy Chain Menu plugin for WordPress versions up to, and including, 1.0.8 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes in the pn...