PT-2025-27022 · Unknown · Juzawebcms

Name of the Vulnerable Software and Affected Versions: juzaweb CMS version 3.4.2 Description: A critical vulnerability has been found in juzaweb CMS, affecting an unknown function of the file /admin-cp/imports of the component Import Page. The manipulation leads to improper authorization. It is...

PT-2025-27000 · Xuxueli · Xuxueli Xxl-Sso

Name of the Vulnerable Software and Affected Versions: Xuxueli xxl-sso version 1.1.0 Description: A problematic issue has been found in the software, affecting the processing of the file /xxl-sso-server/doLogin. The manipulation of the redirect url argument leads to an open redirect. This issue c...

PT-2025-27001 · Unknown · Linlinjava Litemall

Name of the Vulnerable Software and Affected Versions: linlinjava litemall version 1.8.0 Description: A problematic issue was found in the software, affecting an unknown function of the file /wx/comment/post. The manipulation of the adminComment argument leads to improper authorization, allowing...

PT-2025-26873 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-PoE version 6.2c.884 Description: A critical issue was found, affecting the setUpgradeFW function of the upgrade.so file. The manipulation of the FileName argument leads to os command injection. This issue can be exploited...

PT-2025-26876 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-PoE version 6.2c.884 Description: A critical issue affects the setUpgradeUboot function of the upgrade.so file, allowing os command injection through the manipulation of the FileName argument. This can be exploited remotely...

PT-2025-26827 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue was found in the system, affecting the /panel/edit-staff.php file. The manipulation of the editid argument leads to SQL injection. This issue can be exploit...

PT-2025-26833 · Unknown · Student Record System Using Php/Mysql

Name of the Vulnerable Software and Affected Versions: Student Record system Using PHP and MySQL version 3.20 Description: The issue allows a remote attacker to obtain sensitive information via a crafted payload to the cshortname, cfullname, and cdate variables. This is a SQL Injection...

PT-2025-26826 · Unknown · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /panel/add-staff.php. The manipulation of the Name argument leads to SQL injection. It is possibl...

PT-2025-26828 · Unknown · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /panel/add-services.php. The manipulation of the Type argument leads to SQL injection. Th...

PT-2025-28083 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical issue affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component webs. The manipulation of the argument pppUserName leads to stack-based buffer overflow...

PT-2025-26820 · Unknown · Plc Designer V4

Name of the Vulnerable Software and Affected Versions: PLC Designer V4 Description: A local, low-privileged attacker can learn the password of the connected controller due to an incorrect implementation that results in the password being displayed in plain text under special conditions...

PT-2025-26834 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file /panel/edit-services.php. The manipulation of the editid argument leads to SQ...

PT-2025-26839 · Unknown · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Management System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /admin/editempprofile.php. The manipulation of the FirstName argument leads to SQL injection. It is possib...

PT-2025-26831 · Unknown · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue was found in the software. It affects an unknown function of the file /panel/stock.php. The manipulation of the ID argument leads to SQL injection. This iss...

PT-2025-26844 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue affects the processing of the file /php action/removeCategories.php, where the manipulation of the categoriesId argument leads to SQL injection. The attack ca...

PT-2025-28079 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical issue affects the function formiNICWpsStart of the file /goform/formiNICWpsStart in the webs component. The manipulation of the pinCode argument leads to a stack-based buffer overflow. Th...

PT-2025-26909 · Sublinkx · Sublinkx

Name of the Vulnerable Software and Affected Versions: gooaclok819 sublinkX versions up to 1.8 Description: A vulnerability was found in the unknown code of the file middlewares/jwt.go. The manipulation with the input sublink leads to the use of a hard-coded cryptographic key. The attack can be...

PT-2025-26788 · Unknown · Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Simple Online Hotel Reservation System version 1.0 Description: A critical issue was found in the Simple Online Hotel Reservation System. The problem affects the file /admin/delete account.php, where the manipulation of the admin id argument...

PT-2025-26745 · Unknown · Campcodes Online Recruitment Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Recruitment Management System version 1.0 Description: A critical issue affects the processing of the file Recruitment/admin/view application.php, where the manipulation of the ID argument leads to SQL injection. The attack c...

PT-2025-26755 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: A critical issue has been found in the PHPGurukul Hospital Management System, affecting some unknown functionality of the file /doctor/search.php. The manipulation of the searchda...