PT-2025-4370

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.8 Description: A critical issue was identified in the "/WeGIA/html/socio/sistema/controller/controla xlsx.php" endpoint, which accepts file uploads without proper validation. This allows the upload of malicious...

PT-2025-1014

Name of the Vulnerable Software and Affected Versions go-git versions prior to v5.13 Description An argument injection vulnerability was discovered in go-git. The successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only...

PT-2025-3001 · Unknown · Com.Windymob.Callscreen.Ringtone.Callcolor.Colorphone +1

Name of the Vulnerable Software and Affected Versions: com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes versions 1.1.2 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via th...

PT-2025-4480 · Optimizely · Optimizely Configured Commerce

Name of the Vulnerable Software and Affected Versions: Optimizely Configured Commerce versions prior to 5.2.2408 Description: A medium-severity issue concerning business logic exists in the Commerce B2B application, which allows storefront visitors to purchase discontinued products in specific...

PT-2025-3131 · Centreon · Centreon Web

Name of the Vulnerable Software and Affected Versions: Centreon centreon-web versions 24.10.x prior to 24.10.3 Centreon centreon-web versions 24.04.x prior to 24.04.9 Centreon centreon-web versions 23.10.x prior to 23.10.19 Centreon centreon-web versions 23.04.x prior to 23.04.24 Description: A...

PT-2025-1991 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical vulnerability was found in the code of code-projects Job Recruitment. This issue affects the unknown code of the file / parse/ call job/search ajax.php of the component Job Pos...

PT-2025-1490 · Unknown · Kali Forms

Name of the Vulnerable Software and Affected Versions: Kali Forms versions through 2.3.28 Description: The issue is related to a Missing Authorization vulnerability in the Kali Forms Contact Form builder with drag & drop, allowing exploitation of incorrectly configured access control security...

PT-2025-3180 · Foliovision · Fv Descriptions

Name of the Vulnerable Software and Affected Versions: Foliovision FV Descriptions versions n/a through 1.4 Description: The issue affects Foliovision FV Descriptions, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-site Scripting...

PT-2025-1492 · Unknown · Idx Impress Listings

Name of the Vulnerable Software and Affected Versions: IDX IMPress Listings versions n/a through 2.6.2 Description: The issue is related to a Missing Authorization vulnerability in IDX IMPress Listings, which allows exploiting incorrectly configured access control security levels. Recommendations...

PT-2025-1259 · Fortinet · Fortiweb

Name of the Vulnerable Software and Affected Versions: FortiWeb versions 7.2.0 through 7.2.7 FortiWeb versions 7.4.0 through 7.4.1 Description: A stack-based buffer overflow in the command-line interface CLI of FortiWeb may allow a privileged user to execute arbitrary code via specially crafted C...

PT-2025-1486 · Wpdeveloper · Wpdeveloper Betterlinks

Name of the Vulnerable Software and Affected Versions: WPDeveloper BetterLinks versions 1.6.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in WPDeveloper BetterLinks, which allows exploiting incorrectly configured access control security levels...

PT-2025-11343

Name of the Vulnerable Software and Affected Versions PHP versions 8.1. through 8.1.31 PHP versions 8.2. through 8.2.27 PHP versions 8.3. through 8.3.18 PHP versions 8.4. through 8.4.4 Description The issue is related to the incorrect parsing of folded headers in HTTP responses by the http reques...

PT-2024-17916 · Unknown · 1000 Projects Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical issue affects an unknown functionality of the file /admin/add-customer-services.php in the Customer Detail Handler component. The manipulation of the argument...

PT-2024-36739 · Social · Sinking Dropdowns

Name of the Vulnerable Software and Affected Versions: Sinking Dropdowns versions n/a through 1.25 Description: A Cross-Site Request Forgery CSRF vulnerability is present in Yonatan Reinberg of Social Ink's Sinking Dropdowns, allowing Privilege Escalation. Recommendations: For versions n/a throug...

PT-2024-37048

Name of the Vulnerable Software and Affected Versions GNU GRUB aka GRUB2 versions 2.12 and earlier Description The issue is related to the use of a non-constant time algorithm for grub crypto memcmp, which allows side-channel attacks. This means that an attacker could potentially exploit the...

PT-2024-17861 · Unknown · Phpgurukul Small Crm

Name of the Vulnerable Software and Affected Versions: PHPGurukul Small CRM version 1.0 Description: A critical issue has been found in the software, affecting an unknown function of the file /admin/index.php. The manipulation of the email argument leads to SQL injection. It is possible to launch...

PT-2024-17882 · Unknown · Phpgurukul Maid Hiring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Maid Hiring Management System version 1.0 Description: A problem has been found in the code of the file /admin/search-maid.php of the component Search Maid Page. The manipulation of the searchdata argument leads to cross site...

PT-2024-34399 · Unknown · Smart Agent

Name of the Vulnerable Software and Affected Versions: Smart Agent version 1.1.0 Description: The issue allows a remote attacker to execute arbitrary code via the id parameter in the "/sendPushManually.php" component. This is a SQL injection vulnerability that can be exploited to run arbitrary...

PT-2024-36964 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.74 Description: The issue is related to the netfilter component of the Linux kernel, specifically with the nf tables subsystem. The problem arises when the nf tables chain destroy function is used from call...

PT-2024-17822 · Code Projects · Code-Projects Travel Management System

Name of the Vulnerable Software and Affected Versions: code-projects Travel Management System version 1.0 Description: A critical issue affects the processing of the file /subcat.php, where the manipulation of the catid argument leads to sql injection. The attack can be initiated remotely. The...