PT-2025-15417 · Dell · Dell Common Event Enabler

Name of the Vulnerable Software and Affected Versions: Dell Common Event Enabler version 9.0.0.0 Description: The issue is related to an Initialization of a Resource with an Insecure Default vulnerability in the Common Anti-Virus Agent CAVA of the Dell Common Event Enabler. This could allow an...

PT-2025-15327 · Unknown · Seeyon Zhiyuan Interconnect Fe Collaborative Office Platform

Name of the Vulnerable Software and Affected Versions: Seeyon Zhiyuan Interconnect FE Collaborative Office Platform version 5.5.2 Description: A critical issue affects some unknown processing of the file /sysform/042/check.js%70. The manipulation of the argument Name leads to SQL injection. The...

PT-2025-15426 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 7.2.0 through 7.2.1 Description: The issue allows an attacker to disclose information by modifying the LDAP server IP to point to a malicious server, due to passwords being stored in a recoverable format...

PT-2025-15381

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite plugin for WordPress versions up to, and including, 2.1.3.6 Description: The issue allows unauthenticated attackers to perform SQL Injection via the coating text parameter due to insufficient escaping of user-supplied input and...

PT-2025-15280

Name of the Vulnerable Software and Affected Versions fluent-bit version 3.7.2 Description The issue allows a local attacker to cause a denial of service via the cfl list size in cfl list.h:165. This can be exploited to disrupt the service. Recommendations For fluent-bit version 3.7.2, as a...

PT-2025-15253 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the SysDictTypeController component. Recommendations: For RUoYi version 4.8.0, consider disabling the SysDictTypeController component as a...

PT-2025-15246 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the jobLogId parameter. Recommendations: For RUoYi version 4.8.0, consider restricting access to the jobLogId parameter to minimize the ris...

PT-2025-15223 · Unknown · Phpgurukul Old Age Home Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Old Age Home Management System version 1.0 Description: A critical issue has been found in the PHPGurukul Old Age Home Management System, affecting an unknown functionality of the file /admin/login.php. The manipulation of the...

PT-2025-15301 · Jalios · Jalios Jplatform

Name of the Vulnerable Software and Affected Versions: Jalios JPlatform versions prior to 10.0.6 Description: The DB chooser functionality in Jalios JPlatform improperly neutralizes special elements used in an SQL command, allowing authenticated administrative users to trigger SQL Injection. A...

PT-2025-15237 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been found in the DELETE Command Handler component, leading to a buffer overflow. This issue can be exploited remotely. Recommendations: For PCMan FTP Server version 2.0.7,...

PT-2025-15300 · Unknown · 1000 Projects Human Resource Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Human Resource Management System version 1.0 Description: A critical issue was found in the Human Resource Management System, affecting an unknown function of the file /controller/employee.php. The manipulation of the email...

PT-2025-15306 · Renrenio · Renren-Security

Name of the Vulnerable Software and Affected Versions: renrenio renren-security versions up to 5.4.0 Description: A vulnerability has been found in renrenio renren-security, affecting an unknown part of the JSON Handler component. The manipulation leads to cross-site scripting attacks, which can ...

PT-2025-15249 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the add method of the "/add/parentId" endpoint, which does not properly validate whether the requesting user has permission to add a menu...

PT-2025-15305 · Unknown · Linzhaoguan Pb-Cms

Name of the Vulnerable Software and Affected Versions: LinZhaoguan pb-cms version 2.0 Description: A vulnerability was found in the file /adminlinks of the component Friendship Link Handler, leading to cross-site scripting. The attack may be launched remotely. The exploit has been disclosed to th...

PT-2025-20419 · Totolink · Totolink A3100R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3100R version 5.9c.1527 Description: The issue is related to a Buffer Overflow that can be triggered via the priority parameter in the setMacQos interface of /lib/cste modules/firewall.so. This can be accessed through the API endpoi...

PT-2025-15247 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the edit method of the "/edit/dictId" endpoint, which does not properly validate whether the requesting user has permission to modify the...

PT-2025-15230 · Unknown · Xxyopen Novel-Plus

Name of the Vulnerable Software and Affected Versions: xxyopen Novel-Plus version 5.1.0 Description: A critical issue affects some unknown functionality of the file /novel/friendLink/list. The manipulation of the sort argument leads to SQL injection. The attack may be launched remotely...

PT-2025-15221 · Unknown · Phpgurukul Old Age Home Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Old Age Home Management System version 1.0 Description: A critical issue was found in the PHPGurukul Old Age Home Management System, affecting an unknown function of the file /admin/view-enquiry.php. The manipulation of the viewid...

PT-2025-15183 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical issue was discovered in the codeprojects Online Restaurant Management System. The problem affects the file /admin/member save.php, where the manipulation of...

PT-2025-15268 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical vulnerability was found in PCMan FTP Server, affecting an unknown functionality of the CCC Command Handler component. The manipulation leads to a buffer overflow, and the attack can be...