PT-2025-18563 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc2 Description: A slab-out-of-bounds write bug was found in the udf find entry function. This issue was reported by Syzbot and is related to a capacity change from 0 to 2048. The bug is caused by a write ...

PT-2025-18347 · NetGear · Netgear Ex6200

Name of the Vulnerable Software and Affected Versions: Netgear EX6200 version 1.0.3.94 Description: A critical vulnerability was found in the function sub 41940. The manipulation of the argument host leads to a buffer overflow. It is possible to launch the attack remotely. The vendor was contacte...

PT-2025-18633 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fix of the NULL pointer dereference in rose send frame Description: A NULL pointer dereference issue was found in the Linux kernel, specifically in the rose send frame function. This issue was reported by...

PT-2025-18714 · Sematell · Sematell Replyone

Name of the Vulnerable Software and Affected Versions: Sematell ReplyOne version 7.4.3.0 Description: The issue allows Server-Side Request Forgery SSRF through the application server API. This means an attacker could potentially manipulate the server into making unauthorized requests...

PT-2025-18356 · NetGear · Netgear Ex6200

Name of the Vulnerable Software and Affected Versions: Netgear EX6200 version 1.0.3.94 Description: A critical issue has been discovered, affecting the function sub 54014. The manipulation of the argument host leads to a buffer overflow. This issue can be exploited remotely. The vendor was...

PT-2025-18384 · WordPress · Wordpress Simple Shopping Cart

Name of the Vulnerable Software and Affected Versions: WordPress Simple Shopping Cart plugin versions up to, and including, 5.1.3 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'wp cart button' shortcode due to insufficient input sanitization and output escaping...

PT-2025-18375 · Unknown · Phpgurukul Boat Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Boat Booking System version 1.0 Description: A critical issue was found in the PHPGurukul Boat Booking System, affecting the file /admin/booking-details.php. The manipulation of the Status argument leads to sql injection. The attac...

PT-2025-18372 · Unknown · Phpgurukul Boat Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Boat Booking System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Boat Booking System. This affects an unknown part of the file /admin/edit-boat.php. The manipulation of the bid argument leads to SQL...

PT-2025-18679 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 15.11.0.6 Description: The issue is related to a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter. This allows attackers to execute arbitrary commands by sending a crafted...

PT-2025-18506 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A double free vulnerability has been resolved in the Linux kernel. The issue occurs in the zfcp fsf req send function, where the wrong type of integer is used to cache the FSF request...

PT-2025-18709 · Tenda · Tenda Rx2 Pro

Name of the Vulnerable Software and Affected Versions: Tenda RX2 Pro version 16.03.30.14 Description: An issue was discovered that allows an attacker, who is authenticated to the guest Wi-Fi network, to access resources on the router and/or resources and devices on other networks hosted by the...

PT-2025-18359 · WordPress · List Children

Name of the Vulnerable Software and Affected Versions: The List Children plugin for WordPress versions up to, and including, 2.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'list children' shortcode due to insufficient input sanitization and output escaping o...

PT-2025-18368 · WordPress · Nautic Pages

Name of the Vulnerable Software and Affected Versions: Nautic Pages plugin for WordPress versions up to, and including, 2.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'np marinetraffic map' shortcode due to insufficient input sanitization and output escaping...

PT-2025-18386 · Unknown · Phpgurukul Land Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Land Record System version 1.0 Description: A critical issue has been found in the processing of the file /admin/aboutus.php. The manipulation of the pagetitle argument leads to SQL injection. The attack may be initiated remotely...

PT-2025-18361 · Unknown · Phpgurukul Curfew E-Pass Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Curfew e-Pass Management System version 1.0 Description: A critical issue affects the processing of the file "/admin/pass-bwdates-reports-details.php". The manipulation of the fromdate argument leads to SQL injection. The attack ca...

PT-2025-18676 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 15.11.0.6 Description: A command injection issue was discovered in the formSetDebugCfg function via the module parameter. This issue allows attackers to execute arbitrary commands through a manipulated request...

PT-2025-18495 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc3+ Description: The issue arises from the incorrect handling of file map count for non-leaf pmd/pud in the Linux kernel, specifically when collapsing hugepages. This triggers an unexpected BUG ON due to...

PT-2025-18308 · Sourcecodester · Sourcecodester Simple Parking Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Barangay Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. It affects the API endpoint "/barangay management/admin/?page=view household". Recommendations: For SourceCodeste...

PT-2025-18246 · Unknown · Phpgurukul Student Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 3.20 Description: A critical vulnerability was found in PHPGurukul Student Record System. The issue affects an unknown function of the file /add-subject.php. The manipulation of the argument sub1 leads...

PT-2025-18276 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A SQL injection issue was discovered in the foreigner-bwdates-reports-details.php file. This issue allows remote attackers to execute arbitrary SQL code via the todate...