PT-2025-18674 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-POE version 6.2c.884 B20180522 Description: A command injection issue was found in the CloudSrvUserdataVersionCheck function via the url parameter, allowing attackers to execute arbitrary commands through a crafted request...

PT-2025-18667 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-POE version 6.2c.884 B20180522 Description: A command injection issue was discovered in the msg process function via the Url parameter. This issue allows attackers to execute arbitrary commands through a manipulated request...

PT-2025-15059 · Sourcecodester · Sourcecodester Online Eyewear Shop

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A critical issue has been found in the software, affecting the processing of the file /classes/Users.php?f=delete customer. The manipulation of the ID argument leads to sql injection...

PT-2025-14869 · Unknown · Phpgurukul Zoo Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A critical issue affects some unknown processing of the file /aboutus.php. The manipulation of the argument pagetitle leads to SQL injection. The attack may be initiated remotely. The...

PT-2025-15021 · WordPress · Post To Social Media – Wordpress To Hootsuite

Name of the Vulnerable Software and Affected Versions: Post to Social Media – WordPress to Hootsuite versions 1.5.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performi...

PT-2025-14820 · Unknown · Phpgurukul E-Diary Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1.0 Description: A critical issue has been discovered in the /add-notes.php file, where manipulation of the Category argument leads to SQL injection. The attack can be initiated remotely. An exploi...

PT-2025-14943 · Unknown · Jakub Glos Sparkle Elementor Kit

Name of the Vulnerable Software and Affected Versions: Jakub Glos Sparkle Elementor Kit versions 2.0.9 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local...

PT-2025-14941 · Unknown +1 · Beds24 Online Booking +1

Name of the Vulnerable Software and Affected Versions: Beds24 Online Booking versions n/a through 2.0.26 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Loca...

PT-2025-14867 · Unknown · Phpgurukul Restaurant Table Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Restaurant Table Booking System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Restaurant Table Booking System. This issue affects unknown code in the file /edit-subadmin.php. The manipulation of the...

PT-2025-14819 · Unknown · Phpgurukul E-Diary Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1.0 Description: A critical issue affects an unknown functionality of the /login.php file. The manipulation of the logindetail argument leads to SQL injection. This issue can be exploited remotely...

PT-2025-14890 · WordPress · Woffice Crm Theme

Name of the Vulnerable Software and Affected Versions: Woffice CRM theme for WordPress versions up to, and including, 5.4.21 Description: The issue is due to a misconfiguration of excluded roles during registration, making it possible for unauthenticated attackers to register with an Administrato...

PT-2025-14849 · WordPress · Product Filter By Wbw

Name of the Vulnerable Software and Affected Versions: Product Filter by WBW plugin for WordPress versions up to, and including, 2.7.9 Description: The issue allows unauthenticated attackers to perform time-based SQL Injection via the filtersDataBackend parameter due to insufficient escaping of...

PT-2025-15041 · Unknown · Phpgurukul E-Diary Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1.0 Description: A critical issue was found in the PHPGurukul e-Diary Management System, affecting an unknown functionality of the file "add-category.php". The manipulation of the Category argument...

PT-2025-14909 · Unknown · Xujiangfei Admintwo

Name of the Vulnerable Software and Affected Versions: xujiangfei admintwo version 1.0 Description: A vulnerability was found in the processing of the file /ztree/insertTree, where the manipulation of the Name argument leads to cross-site scripting. The attack may be initiated remotely...

PT-2025-14866 · Unknown · Phpgurukul E-Diary Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /dashboard.php. The manipulation of the Category argument leads to SQL injection. This issu...

PT-2025-14853 · M Files · M-Files Server Admin Tool

Name of the Vulnerable Software and Affected Versions: M-Files Server Admin tool versions prior to 25.3.14681.7 Description: The issue concerns a stored XSS in the desktop UI of the M-Files Server Admin tool. This allows authenticated local users to execute scripts through the UI. Recommendations...

PT-2025-14877 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue has been discovered, affecting an unknown function of the file /search-request.php. The manipulation of the searchdata argument leads to SQL injection. It is...

PT-2025-14878 · WordPress · Epc Ez Form Calculator

Name of the Vulnerable Software and Affected Versions: EPC ez Form Calculator - WordPress plugin versions 2.14.1.2 and earlier Description: The issue affects the EPC ez Form Calculator - WordPress plugin, allowing Reflected XSS due to improper neutralization of input during web page generation...

PT-2025-15036 · Unknown · Xujiangfei Admintwo

Name of the Vulnerable Software and Affected Versions: xujiangfei admintwo version 1.0 Description: A problematic issue has been found in xujiangfei admintwo, affecting an unknown part of the file /user/updateSet. The manipulation leads to cross-site request forgery. It is possible to initiate th...

PT-2025-15046

Name of the Vulnerable Software and Affected Versions Apache Airflow Common SQL Provider versions prior to 1.24.1 Description The issue is related to an SQL Injection vulnerability in the Apache Airflow Common SQL Provider. This vulnerability allows an authenticated UI user to inject arbitrary SQ...