PT-2025-18019 · Ververica · Ververica Platform

Name of the Vulnerable Software and Affected Versions: Ververica Platform version 2.14.0 Description: The issue is a Reflected XSS vulnerability. It can be exploited via a "namespaces/default/formats" URI. Recommendations: For Ververica Platform version 2.14.0, consider restricting access to the...

PT-2025-17992 · Unknown · Itwanger Paicoding

Name of the Vulnerable Software and Affected Versions: itwanger paicoding version 1.0.3 Description: A vulnerability was found in the Browsing History Handler component, affecting some unknown functionality of the file "/user/home?userId=1&homeSelectType=read". The manipulation of this issue lead...

PT-2025-17998 · Unknown · Phpgurukul Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul COVID19 Testing Management System version 1.0 Description: A critical vulnerability was found in PHPGurukul COVID19 Testing Management System. The issue affects an unknown functionality of the file /add-phlebotomist.php. The...

PT-2025-17956 · Unknown · Anps Theme

Name of the Vulnerable Software and Affected Versions: The Anps Theme plugin versions up to, and including, 1.1.1 Description: The issue is related to arbitrary shortcode execution due to the software allowing users to execute an action that does not properly validate a value before running do...

PT-2025-20476 · Totolink · Totolink N150Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical vulnerability has been found in the TOTOLINK N150RT, affecting some unknown processing of the file /boafrm/formWsc. The manipulation of the localPin argument leads to buffer...

PT-2025-17900 · Ibm · Ibm Maximo Asset Management

Name of the Vulnerable Software and Affected Versions: IBM Maximo Asset Management version 7.6.1.3 Description: The issue allows a privileged user to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trust...

PT-2025-17905 · Entrust · Entrust Corp Printer Manager

Name of the Vulnerable Software and Affected Versions: Entrust Corp Printer Manager versions D3.18.4-3 and below Description: An issue in the Printer Manager System of Entrust Corp Printer Manager allows attackers to execute a directory traversal via a crafted POST request. Recommendations: For...

PT-2025-17871 · Unknown · Sherpa Orchestrator

Name of the Vulnerable Software and Affected Versions: Sherpa Orchestrator version 141851 Description: The issue allows for stored XSS attacks by an administrator through the name parameter when adding or updating licenses. The XSS payload can execute when the license expires. Recommendations: Fo...

PT-2025-17885 · WordPress · Icegram Express

Name of the Vulnerable Software and Affected Versions: The Icegram Express WordPress plugin versions prior to 5.7.50 Description: The issue concerns the Icegram Express WordPress plugin, which does not properly sanitise and escape some of its Template settings. This could allow high-privilege...

PT-2025-17944 · Netscout · Ngeniusone

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 Description: The issue concerns a Sensitive File Accessible Without Proper Authentication to an endpoint. No information is provided about the estimated number of potentially affected devices...

PT-2025-17940 · Netscout · Ngeniusone

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 Description: The issue is related to a Broken Authorization Schema for the report module. This means that there is a flaw in how authorization is handled, potentially allowing unauthorized...

PT-2025-17872 · Unknown · Sherpa Orchestrator

Name of the Vulnerable Software and Affected Versions: Sherpa Orchestrator version 141851 Description: The issue allows an authenticated user to perform multiple time-based blind SQL injections. This affects several API endpoints, including "api/gui/asset/list", "api/gui/files/export/csv/",...

PT-2025-17721 · WordPress · Usedesk

Name of the Vulnerable Software and Affected Versions: FuseDesk plugin for WordPress versions up to, and including, 6.7 Description: The issue is related to Stored Cross-Site Scripting via the successredirect parameter due to insufficient input sanitization and output escaping. This allows...

PT-2025-17682 · WordPress · Mang Board Wp

Name of the Vulnerable Software and Affected Versions: Mang Board WP plugin versions up to, and including, 1.8.6 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping in the board header and board footer parameters. This allows...

PT-2025-17734 · Unknown · Code-Projects Online Class/Exam Scheduling System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Class and Exam Scheduling System version 1.0 Description: A vulnerability was found in the file /Scheduling/pages/class save.php, where manipulation of the class parameter can lead to SQL injection attacks. Recommendation...

PT-2025-17850

Name of the Vulnerable Software and Affected Versions h11 versions prior to 0.16.0 Description h11 is a Python implementation of HTTP/1.1. A leniency in h11's parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities under certain conditions. This...

PT-2025-17736 · Unknown · Online Class/Exam Scheduling System

Name of the Vulnerable Software and Affected Versions: Online Class and Exam Scheduling System version 1.0 Description: A vulnerability has been discovered in the code, affecting some unknown features in the file /Scheduling/pages/class sched.php. Manipulating the class parameter can lead to...

PT-2025-17769 · Animate · Animate

Name of the Vulnerable Software and Affected Versions: Animate versions n/a through 0.5 Description: A Server-Side Request Forgery SSRF issue allows for Server Side Request Forgery. This issue is related to the Animate software. Recommendations: For Animate versions n/a through 0.5, consider...

PT-2025-17859 · WordPress · Breeze Display

Name of the Vulnerable Software and Affected Versions: Breeze Display plugin for WordPress versions up to, and including, 1.2.3 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with...

PT-2025-17817 · Unknown · Beerxml Shortcode

Name of the Vulnerable Software and Affected Versions: BeerXML Shortcode versions 0.71 and earlier Description: A Server-Side Request Forgery SSRF issue affects the software, allowing for Server Side Request Forgery. This issue can be exploited by making the server send requests to unintended...