PT-2025-30256 · Helmholz +1 · Rex100 +1

Name of the Vulnerable Software and Affected Versions: versions prior to 2025-41681 Description: A high privileged remote attacker can gain persistent cross-site scripting XSS via POST requests due to improper neutralization of special elements used to create dynamic content. Recommendations: At...

PT-2025-30296 · Code Projects · Church Donation System

Name of the Vulnerable Software and Affected Versions: code-projects Church Donation System version 1.0 Description: A critical issue exists in code-projects Church Donation System 1.0. The manipulation of the fname argument in the /members/edit Members.php file leads to SQL injection. This allow...

PT-2025-30264 · Eslint +1 · @Eslint/Plugin-Kit +1

Name of the Vulnerable Software and Affected Versions: yt-dlp versions 2025.06.25 and below Description: yt-dlp is a command-line audio/video downloader. A flaw exists where, on Windows, using the --exec option with the default placeholder or results in insufficient sanitization of the expanded...

PT-2025-30323 · Ibm · Ibm Cognos Analytics Mobile

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics Mobile iOS versions 1.1.0 through 1.1.22 Description: IBM Cognos Analytics Mobile iOS may expose information due to the use of unencrypted network traffic. Recommendations: IBM Cognos Analytics Mobile iOS versions prior t...

PT-2025-30347 · Hax Cms +1 · Hax Cms +1

Name of the Vulnerable Software and Affected Versions: HAXiam versions 11.0.4 and below Description: HAXiam is a packaging wrapper for HAXcms which allows anyone to spawn their own microsite management platform. The application returns a 200 response when requesting the data of a valid user and a...

PT-2025-30260 · Unknown · Two App Studio Journey

Name of the Vulnerable Software and Affected Versions: Two App Studio Journey version 5.5.6 Description: The local authentication component has insufficient protection against brute-force attacks and runtime manipulation on iOS. This allows local attackers to bypass biometric and PIN-based access...

PT-2025-30354 · Phpgurukul · Phpgurukul Auto Taxi Stand Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Taxi Stand Management System version 1.0 Description: A problematic issue exists in PHPGurukul Taxi Stand Management System 1.0. The manipulation of the searchdata argument in the /search.php file leads to cross-site scripting. The...

PT-2025-30283 · Commscope · Ruckus Unleashed

Name of the Vulnerable Software and Affected Versions: CommScope Ruckus Unleashed versions prior to 200.15.6.212.14 CommScope Ruckus Unleashed versions prior to 200.17.7.0.139 Description: An issue exists where the functions stamgr cfg adpt addStaFavourite and stamgr cfg adpt addStaIot improperly...

PT-2025-30294 · Vsftpd +1 · Vsftpd +1

Name of the Vulnerable Software and Affected Versions: Linksys EA6350 version 2.1.2 Description: The chroot local user option is enabled in the dynamically generated vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised...

PT-2025-30324 · Ibm +1 · Ibm Cognos Analytics Mobile +1

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics Mobile iOS versions 1.1.0 through 1.1.22 Description: The application uses a deprecated or misconfigured AFNetworking library at runtime, potentially allowing malicious actors to view and modify information transmitted to...

PT-2025-30361 · Hax Cms · Hax Cms

Name of the Vulnerable Software and Affected Versions: HAX CMS versions 11.0.7 and below PHP HAX CMS versions 11.0.12 and below NodeJS Description: HAX CMS does not include headers to prevent websites from loading the application within an iframe. This affects both the CMS and generated sites. An...

PT-2025-30267 · Recursor +1 · Recursor +1

Name of the Vulnerable Software and Affected Versions: versions prior to the updated version Description: An attacker spoofing responses to ECS-enabled requests sent by the Recursor may succeed. The updated version includes mitigations against spoofing attempts of ECS-enabled queries by chaining...

PT-2025-30192 · Callapp · Callapp Caller Id App

Name of the Vulnerable Software and Affected Versions: CallApp Caller ID App versions up to 2.0.4 Description: A vulnerability exists in CallApp Caller ID App on Android devices. The issue involves improper export of android application components due to manipulation of an unknown function within...

PT-2025-30205 · Codecanyon · Identsoft

Name of the Vulnerable Software and Affected Versions: Codecanyon iDentSoft version 2.0 Description: A critical issue exists in Codecanyon iDentSoft 2.0, specifically within the Account Setting Page. The vulnerability allows for unrestricted file upload through manipulation of the photo argument ...

PT-2025-30174 · Portabilis · I-Diario

Name of the Vulnerable Software and Affected Versions: Portabilis i-Diario version 1.5.0 Description: A problematic issue exists due to the manipulation of the Justificativa argument, leading to cross site scripting. The issue affects unknown processing of the file /justificativas-de-falta. The...

PT-2025-30145

Name of the Vulnerable Software and Affected Versions eslint-config-prettier versions 8.10.1 through 10.1.7 Description The eslint-config-prettier npm package was compromised through a supply chain attack resulting from a phishing attack on maintainers. Installation of affected versions executes ...

PT-2025-30118 · WordPress · Vchasno Kasa

Name of the Vulnerable Software and Affected Versions: Vchasno Kasa plugin for WordPress versions up to and including 1.0.3 Description: The Vchasno Kasa plugin for WordPress is susceptible to unauthorized data access due to a missing capability check within the mrkv vchasno kasa wc do metabox...

PT-2025-30135 · Phpgurukul · Phpgurukul Apartment Visitors Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Apartment Visitors Management System version 1.0 Description: A cross site scripting issue exists due to the manipulation of the categoryname argument within the HTTP POST Request Handler component’s /category.php file. The attack...

PT-2025-30073 · Bytecode Alliance · Wasmtime

Name of the Vulnerable Software and Affected Versions: Wasmtime versions 24.0.0 through 24.0.3 Wasmtime versions 33.0.0 through 33.0.1 Wasmtime versions 34.0.0 through 34.0.1 Description: Wasmtime is a runtime for WebAssembly. A bug in Wasmtime's implementation of the WASIp1 set of import functio...

PT-2025-30041 · Unknown · File Manager

Name of the Vulnerable Software and Affected Versions: Filemanager version 2.3.0 Description: An arbitrary file upload vulnerability exists in the is allowed file type function. This allows attackers to execute arbitrary code by uploading a crafted PHP file. Recommendations: Filemanager version...