PT-2025-18758 · WordPress · Taxonomy Chain Menu

Name of the Vulnerable Software and Affected Versions: Taxonomy Chain Menu plugin for WordPress versions up to, and including, 1.0.8 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes in the pn...

PT-2025-18913 · Unknown · Phpgurukul Online Birth Certificate System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Birth Certificate System version 1.0 Description: A critical issue has been discovered, affecting the /admin/search.php file. The manipulation of the searchdata argument leads to SQL injection. This issue can be exploited...

PT-2025-18863 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.15.36 Description: A vulnerability in the Linux kernel has been resolved, where a sleepable memory allocation was made from an atomic context in the Xilinx firmware. The issue was discovered using lockdep and ...

PT-2025-18907 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: The issue is related to an off-by-one fsmap error on 1k block filesystems in the Linux kernel. It occurs when the ioctl function is called with the FS IOC GETFSMAP command, and the...

PT-2025-18791 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.06.42 multi Description: A command injection issue was found in the formSetSambaConf function via the usbname parameter. This allows attackers to execute arbitrary commands via a crafted request. Recommendations: For...

PT-2025-18743 · WordPress · Gmapsmania

Name of the Vulnerable Software and Affected Versions: GmapsMania plugin for WordPress versions up to, and including, 1.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's gmap shortcode due to insufficient input sanitization and output escaping on user-supplied...

PT-2025-18731 · Unknown · Sourcecodester Restaurant Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Restaurant Management System version 1.0 Description: A critical issue was found in the itsourcecode Restaurant Management System, affecting an unknown part of the file /admin/category save.php. The manipulation of the Category...

PT-2025-18734 · Ibm · Ibm Concert

Name of the Vulnerable Software and Affected Versions: IBM Concert Software versions 1.0.0 through 1.0.5 Description: The issue allows a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view...

PT-2025-18738 · Sourcecodester · Sourcecodester Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Patient Record Management System version 1.0 Description: A critical issue affects the processing of the file /birthing.php, where the manipulation of the comp id argument leads to sql injection. The attack may be initiated...

PT-2025-18911 · Vercel +1 · @Vercel/Flags +1

Name of the Vulnerable Software and Affected Versions: Flags versions 3.2.0 and prior @vercel/flags versions 3.1.1 and prior Description: The issue allows for information disclosure, where a bad actor could gain access to a list of all feature flags exposed through the "flags discovery endpoint"...

PT-2025-18741 · WordPress · Kiwichat Nextclient

Name of the Vulnerable Software and Affected Versions: KiwiChat NextClient plugin for WordPress versions up to, and including, 6.2 Description: The issue is related to Stored Cross-Site Scripting via the url parameter due to insufficient input sanitization and output escaping. This allows...

PT-2025-18735 · Unknown · Sourcecodester Restaurant Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Restaurant Management System version 1.0 Description: A critical issue was found in the iSourcecode Restaurant Management System, affecting some unknown functionality of the file /admin/category update.php. The manipulation of the...

PT-2025-18915 · Unknown · Phpgurukul Online Dj Booking Management System

Name of the Vulnerable Software and Affected Versions: PHPGuruku Online DJ Booking Management System version 1.0 Description: A critical issue affects the processing of the file /admin/booking-bwdates-reports-details.php, where the manipulation of the fromdate argument leads to SQL injection. The...

PT-2025-18736

Name of the Vulnerable Software and Affected Versions iSourcecode Gym Management System version 1.0 Description A critical vulnerability was found in the iSourcecode Gym Management System. This issue affects the file /ajax.php?action=save member, where the manipulation of the umember id argument...

PT-2025-18564 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc2 Description: A segmentation fault issue has been resolved in the Linux kernel, specifically in the am65-cpsw driver. The problem occurred when the module was unloaded, causing a segmentation fault when...

PT-2025-18346 · NetGear · Netgear Ex6200

Name of the Vulnerable Software and Affected Versions: Netgear EX6200 version 1.0.3.94 Description: A critical issue has been found in the Netgear EX6200, affecting the function sub 3D0BC. The manipulation of the host argument leads to a buffer overflow. This issue can be exploited remotely. The...

PT-2025-22185

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 Description A bug has been reported in the Linux kernel where the trace seq to buffer function attempts to copy more data than PAGE SIZE to a buffer, resulting in an...

PT-2025-18499 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc2-syzkaller-00073-g88619e77b33d Description: A vulnerability has been resolved in the Linux kernel related to missing SIGTRAP checking. The issue occurs when some events not associated with progress in t...

PT-2025-18715 · Ibm · Ibm Mq Operator +2

Name of the Vulnerable Software and Affected Versions: IBM MQ Operator LTS versions 2.0.0 through 2.0.29 IBM MQ Operator CD versions 3.0.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 IBM MQ Operator SC2 versions 3.2.0 through 3.2.10 Description: A client connecting to an MQ Queue Manager can...

PT-2025-18367 · WordPress · The Team Members – Best Wordpress Team Plugin

Name of the Vulnerable Software and Affected Versions: The Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder plugin for WordPress versions up to, and including, 3.4.0 Description: The issue is related to Stored Cross-Site Scripting via Social Link icons due ...