PT-2025-21825 · Totolink · Totolink N300Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N300RH version 6.1c.1390 B20191101 Description: A critical vulnerability has been found in the TOTOLINK N300RH router. This issue affects the setUnloadUserData function of the /cgi-bin/cstecgi.cgi file. The manipulation of the plugin...

PT-2025-20879 · Unknown · Domainspro

Name of the Vulnerable Software and Affected Versions: DomainsPRO version 1.2 Description: The issue is an SQL injection vulnerability that could allow an attacker to retrieve, create, update, and delete databases. This is achieved via the d parameter in the "/article.php" endpoint...

PT-2025-20605 · Unknown · Jadmin-Java

Name of the Vulnerable Software and Affected Versions: JAdmin-JAVA JAdmin version 1.0 Description: A vulnerability has been found in JAdmin-JAVA, affecting an unknown functionality of the file "/memoAjax/save". The manipulation of the ID argument leads to cross-site scripting. The attack can be...

PT-2025-18009 · Wowjoy 浙江湖州华卓信息科技有限公司 · Internet Doctor Workstation System

Name of the Vulnerable Software and Affected Versions: wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System version 1.0 Description: A problematic issue has been found in the system, affecting some unknown processing of the file "/v1/prescription/details/". This leads to improper authorizatio...

PT-2025-18001 · Unknown · Phpgurukul Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul COVID19 Testing Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul COVID19 Testing Management System. This issue affects unknown code of the file /edit-phlebotomist.php?pid=11. The...

PT-2025-16787 · Sourcecodester · Sourcecodester Online Id Generator System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online ID Generator System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability. This is achieved through the id...

PT-2025-16173 · Apache · Apache Seatunnel

Name of the Vulnerable Software and Affected Versions: Apache SeaTunnel versions =2.3.10 Description: Unauthorized users can perform Arbitrary File Read and Deserialization attack by submitting a job using the restful api-v1. An attacker can access the /hazelcast/rest/maps/submit-job endpoint to...

PT-2025-15098 · Unknown · Phpgurukul Men Salon Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 1.0 Description: A critical issue affects some unknown processing of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to SQL injection. The attack may be...

PT-2025-14817 · Unknown · Projectworlds Online Doctor Appointment Booking System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Doctor Appointment Booking System version 1.0 Description: A critical issue was discovered in the projectworlds Online Doctor Appointment Booking System, affecting an unknown function of the file...

PT-2025-14570 · Unknown · Fcba Zzm Ics-Park Smart Park Management System

Name of the Vulnerable Software and Affected Versions: fcba zzm ics-park Smart Park Management System version 2.1 Description: A critical vulnerability was found in the fcba zzm ics-park Smart Park Management System. This issue affects unknown code of the file "/api/system/dept/update" and leads ...

PT-2025-12573 · Zhijiantianya · Ruoyi-Vue-Pro

Name of the Vulnerable Software and Affected Versions: zhijiantianya ruoyi-vue-pro version 2.4.1 Description: A critical issue has been found in the file /app-api/infra/file/upload of the component Front-End Store Interface. The manipulation of the path argument leads to path traversal. The attac...

PT-2025-12544 · Unknown · Project Worlds Online Time Table Generator

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Time Table Generator version 1.0 Description: A critical vulnerability was found in Project Worlds Online Time Table Generator. This affects an unknown part of the file /student/index.php. The manipulation of the argumen...

PT-2025-12154 · Unknown · Infiniflow/Ragflow

Name of the Vulnerable Software and Affected Versions: infiniflow/ragflow version RAGFlow-0.13.0 Description: A vulnerability in infiniflow/ragflow allows for partial account takeover via insecure data querying. The issue arises from the way tenant IDs are handled in the application. If a user ha...

PT-2025-9101 · Opencart · Opencart

Name of the Vulnerable Software and Affected Versions: OpenCart versions prior to 4.1.0 Description: The issue allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL using the search in the "/product/search" endpoint. This could be exploited to steal...

PT-2025-9104 · Opencart · Opencart

Name of the Vulnerable Software and Affected Versions: OpenCart versions prior to 4.1.0 Description: The issue allows an attacker to modify the HTML of the victim's browser by sending a malicious URL and modifying the parameter name in the "/account/voucher" API endpoint. This could potentially...

PT-2025-7803 · Benner · Benner Modernanet

Name of the Vulnerable Software and Affected Versions: Benner ModernaNet versions up to 1.1.0 Description: A critical issue affects some unknown functionality of the file /Home/JS CarregaCombo?formName=DADOS PESSOAIS PLANO&additionalCondition=&insideParameters=&elementToReturn=DADOS PESSOAIS...

PT-2025-7591

Name of the Vulnerable Software and Affected Versions DDSN Interactive cm3 Acora CMS version 10.1.1 Description The issue concerns an improper access control vulnerability. An editor-privileged user can access sensitive information, such as system administrator credentials, by force browsing the...

PT-2025-6101 · Unknown · Xxyopen Novel

Name of the Vulnerable Software and Affected Versions: xxyopen Novel versions up to 3.4.1 Description: A critical issue has been found in the software, affecting some unknown functionality of the file "/api/front/search/books". The manipulation of the sort argument leads to SQL injection. The...

PT-2025-5939 · Unknown +1 · Link To Url +1

Name of the Vulnerable Software and Affected Versions: sudipto Link to URL / Post versions n/a through 1.3 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This allows for Blind SQL Injection...

PT-2025-3406 · Unknown · Campcodes Cybercafe Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Cybercafe Management System version 1.0 Description: The issue is related to SQL Injection in the "/ccms/view-user-detail.php" endpoint. This allows for potential exploitation of the system. No information is provided about the...