PT-2025-15044 · Qinguoyi · Qinguoyi Tinywebserver

Name of the Vulnerable Software and Affected Versions: qinguoyi TinyWebServer version 1.0 Description: A vulnerability has been found in qinguoyi TinyWebServer, classified as critical. This issue affects unknown code of the file http/http conn.cpp. The manipulation of the argument m url real lead...

PT-2025-14837 · Code Projects · Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 code-projects Patient Record Management System version 3.1 Description: A critical issue was found in the Patient Record Management System. The manipulation of the itr no argument in...

PT-2025-14843 · Code Projects · Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue affects an unknown functionality of the file /birthing pending.php. The manipulation of the birth id argument leads to SQL injection. The attack may be...

PT-2025-14904 · Unknown · Elunez Eladmin

Name of the Vulnerable Software and Affected Versions: elunez eladmin version 2.7 Description: A problematic issue has been found in the Maintenance Management Module, affecting some unknown functionality of the file "/api/database/testConnect". This issue leads to deserialization and can be...

PT-2025-14908 · Unknown · Xujiangfei Admintwo

Name of the Vulnerable Software and Affected Versions: xujiangfei admintwo version 1.0 Description: A vulnerability has been found in xujiangfei admintwo, classified as problematic. This issue affects the file /resource/add and is related to the manipulation of the Name argument, leading to...

PT-2025-14636 · Os4Ed · Os4Ed Opensis

Name of the Vulnerable Software and Affected Versions: OS4ED openSIS versions 8.0 through 9.1 Description: The issue allows attackers to execute a directory traversal by sending a crafted POST request to "/Modules.php?modname=messaging/Inbox.php&modfunc=save&filename". This enables attackers to...

PT-2025-14576 · Unknown · Code-Projects Bus Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Bus Reservation System version 1.0 Description: A critical issue was found in the Login function of the Login Form component. The manipulation of the Str1 argument leads to a buffer overflow. It is possible to launch the attack ...

PT-2025-14637 · Opensips · Opensis

Name of the Vulnerable Software and Affected Versions: openSIS versions 7.0 through 9.1 Description: A SQL injection issue was found in the Inbox module via the cp id parameter at the "/modules/messages/Inbox.php" API endpoint. Recommendations: For openSIS versions 7.0 through 9.1, as a temporary...

PT-2025-14740 · Vlad.Olaru · Fonto

Name of the Vulnerable Software and Affected Versions: Fonto versions 1.2.2 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability allows for Path Traversal in the vlad.olaru...

PT-2025-14601 · WordPress · User Submitted Posts

Name of the Vulnerable Software and Affected Versions: User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress versions up to, and including, 20240319 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input...

PT-2025-14702 · Unknown · Code-Projects Matrimonial Site

Name of the Vulnerable Software and Affected Versions: Code-Projects Matrimonial Site version V1.0 Description: The issue concerns SQL Injection. It affects the /view profile.php API endpoint, specifically the id variable. There is no information provided about the estimated number of potentially...

PT-2025-14789 · Unknown · Lbt-T300-T400

Name of the Vulnerable Software and Affected Versions: Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 version 3.2 Description: An issue in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 version 3.2 allows a local attacker to escalate privileges via the tftp image check function of a binar...

PT-2025-14609 · Fancybox +1 · Fancybox +1

Name of the Vulnerable Software and Affected Versions: Modula Image Gallery plugin for WordPress versions prior to 5.0.36 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the bundled FancyBox JavaScript library. This allows...

PT-2025-14585

Name of the Vulnerable Software and Affected Versions PHPGurukul Bus Pass Management System version 1.0 Description A critical issue was found in the PHPGurukul Bus Pass Management System, affecting an unknown part of the file /view-pass-detail.php. The manipulation of the viewid argument leads t...

PT-2025-14627 · Unknown · Project Worlds Online Lawyer Management System

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Lawyer Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /save user edit profile.php. The manipulation of the first Name argument leads ...

PT-2025-14780 · Projeqtor · Projeqtor

Name of the Vulnerable Software and Affected Versions: Projeqtor versions up to 12.0.2 Description: A critical issue affects some unknown functionality of the file /tool/saveAttachment.php, where the manipulation of the attachmentFiles argument leads to unrestricted upload. The attack can be...

PT-2025-14701 · Os4Ed · Os4Ed Opensis

Name of the Vulnerable Software and Affected Versions: OS4ED openSIS versions 8.0 through 9.1 Description: The issue allows attackers to execute a directory traversal by sending a crafted POST request to "/Modules.php?modname=messaging/Inbox.php&modfunc=save&filename". This enables them to...

PT-2025-18656 · Totolink · Totolink Ca600-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA600-PoE version 5.3c.6665 B20180820 Description: A command injection issue was found in the recvUpgradeNewFw function via the fwUrl parameter, allowing attackers to execute arbitrary commands through a crafted request...

PT-2025-14574 · Unknown · Phpgurukul Online Security Guards Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Security Guards Hiring System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Online Security Guards Hiring System. The issue affects an unknown function of the file /admin/changeimage.php. The...

PT-2025-14803 · Unknown · Student-Manage

Name of the Vulnerable Software and Affected Versions: student-manage version 1 Description: The issue allows a local attacker to escalate privileges due to insecure permission verification. This is achieved through the unsafe permission verification process. Recommendations: For version 1,...