PT-2025-7389 · WordPress · Ravpage

Name of the Vulnerable Software and Affected Versions: Ravpage plugin for WordPress versions up to, and including, 2.31 Description: The issue concerns a PHP Object Injection vulnerability via deserialization of untrusted input from the paramsv2 parameter. This allows unauthenticated attackers to...

PT-2025-7566 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 V1.0 V15.03.06.23 Description: The issue is related to a buffer overflow in form fast setting wifi set via the ssid parameter. This can potentially be exploited, although specific details about the number of affected devices or...

PT-2025-7508 · Baiyi · Baiyi Cloud Asset Management System

Name of the Vulnerable Software and Affected Versions: Baiyi Cloud Asset Management System versions up to 20250204 Description: A critical issue has been found in the Baiyi Cloud Asset Management System, affecting some unknown processing of the file /wuser/admin.house.collect.php. The manipulatio...

PT-2025-7338 · WordPress · The Wordpress Portfolio Builder – Portfolio Gallery

Name of the Vulnerable Software and Affected Versions: The WordPress Portfolio Builder – Portfolio Gallery plugin for WordPress versions up to, and including, 1.1.7 Description: The issue is related to unauthorized modification of data due to a missing capability check on the add video function...

PT-2025-6822

Name of the Vulnerable Software and Affected Versions Komtera Technolgies KLog Server versions prior to 3.1.1 Description The issue is related to an improper limitation of a pathname to a restricted directory, also known as 'Path Traversal'. This allows for manipulating web input to make calls to...

PT-2025-14113 · D Link · D-Link Di-8100

Name of the Vulnerable Software and Affected Versions: D-LINK DI-8100 version 16.07.26A1 Description: The issue concerns a buffer overflow in the ipsec net asp function, which can be exploited through the remot ip parameter. Recommendations: For D-LINK DI-8100 version 16.07.26A1, consider...

PT-2025-7214 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.14 Description: A Path Traversal vulnerability was discovered in the WeGIA application, affecting the examples.php endpoint. This issue could allow an attacker to gain unauthorized access to sensitive information...

PT-2025-6722 · Unknown · Seventhqueen K Elements

Name of the Vulnerable Software and Affected Versions: SeventhQueen K Elements versions prior to 5.4.0 Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation. This vulnerability potentially affects over 23,000 sites. It has been...

PT-2025-7221 · Unknown · Bplugins Timeline Block

Name of the Vulnerable Software and Affected Versions: bPlugins Timeline Block versions n/a through 1.1.1 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-7064 · Unknown · Luxcal Web Calendar

Name of the Vulnerable Software and Affected Versions: LuxCal Web Calendar versions prior to 5.3.3M MySQL version LuxCal Web Calendar versions prior to 5.3.3L SQLite version Description: The issue concerns a missing authentication vulnerability in the dloader.php file. This vulnerability can be...

PT-2025-7062 · Unknown · Luxcal Web Calendar

Name of the Vulnerable Software and Affected Versions: LuxCal Web Calendar versions prior to 5.3.3M MySQL version LuxCal Web Calendar versions prior to 5.3.3L SQLite version Description: The issue concerns an SQL injection vulnerability in the retrieve.php file. If exploited, this vulnerability m...

PT-2025-7211 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.13 Description: A SQL Injection vulnerability was discovered in the WeGIA application, adicionar almoxarife.php endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing...

PT-2025-6946 · Unknown · Ltl Freight Quotes – Unishippers Edition

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – Unishippers Edition versions 2.5.8 and earlier Description: The issue is related to a Missing Authorization vulnerability in LTL Freight Quotes – Unishippers Edition, which allows exploiting incorrectly configured access...

PT-2025-7018 · Unknown · Notfound Botnet Attack Blocker

Name of the Vulnerable Software and Affected Versions: NotFound Botnet Attack Blocker versions prior to 2.0.0 Description: The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means that an attacker can inject...

PT-2025-6889 · Unknown · Needyamin Library Card System

Name of the Vulnerable Software and Affected Versions: needyamin Library Card System version 1.0 Description: A critical issue affects some unknown functionality of the file card.php. The manipulation of the id argument leads to SQL injection. The attack may be launched remotely. The exploit has...

PT-2025-7541

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for this issue Description A memory corruption issue exists due to incorrect handling of control transfer buffer sizes in the usb: cdc-acm module. When the first fragment is...

PT-2025-7193

Name of the Vulnerable Software and Affected Versions: Post Thumbs versions n/a through 1.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

PT-2025-7194

Name of the Vulnerable Software and Affected Versions: Glance That versions n/a through 4.9 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended actions on a web...

CVE-2025-0108

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PH...

PT-2025-6852 · Unknown · Code-Projects Wazifa System

Name of the Vulnerable Software and Affected Versions: code-projects Wazifa System version 1.0 Description: A critical issue has been found in the code-projects Wazifa System, affecting an unknown functionality of the file /controllers/control.php. The manipulation of an argument leads to a SQL...