PT-2025-25586 · Totolink · Totolink T10

Name of the Vulnerable Software and Affected Versions: TOTOLINK T10 version 4.1.8cu.5207 Description: A critical vulnerability has been found in the setWiFiScheduleCfg function of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the desc argument leads...

PT-2025-24480 · Woobewoo · Wbw Product Table Pro

Name of the Vulnerable Software and Affected Versions: woobewoo WBW Product Table PRO versions 2.1.3 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-24544

Name of the Vulnerable Software and Affected Versions Anchor CMS version 0.12.7 Description A stored cross-site scripting XSS issue allows attackers to inject malicious JavaScript via the page description field in the page creation interface, specifically the "/admin/pages/add" API endpoint...

PT-2025-24393 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah Virus Testing Management System version 1.0 Description: A critical issue was found in the PHPGurukul Nipah Virus Testing Management System. The problem affects an unknown function of the file "/patient-report.php". The...

PT-2025-24490 · Amentotech · Amentotech Wp Guppy

Name of the Vulnerable Software and Affected Versions: AmentoTech WP Guppy versions n/a through 4.3.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-24908 · Kde +4 · Konsole +4

Name of the Vulnerable Software and Affected Versions: konsole versions prior to 25.04.2 konsole versions 4:20.12.3 and earlier konsole versions 4:22.12.3 and earlier Description: The vulnerability in KDE Konsole allows remote code execution when loading URLs from scheme handlers such as ssh://,...

PT-2025-24403 · WordPress · The Newsletter

Name of the Vulnerable Software and Affected Versions: The Newsletter WordPress plugin versions prior to 8.85 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because the plugin does not properly sanitise and esca...

PT-2025-25562

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.7 Apache Tomcat versions 10.1.0 through 10.1.41 Apache Tomcat versions 9.0.23 through 9.0.105 Description The issue is related to an Untrusted Search Path vulnerability in the Apache Tomcat install...

PT-2025-25596 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5232 B20210713 Description: A critical vulnerability has been found in the TOTOLINK EX1200T router's embedded boa server, specifically in the /boafrm/formSysCmd file. This issue is related to a buffer overflow...

PT-2025-25595 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5232 B20210713 Description: A critical vulnerability was found in the TOTOLINK EX1200T, affecting an unknown function of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of...

PT-2025-24543 · Vigybag · Vigybag

Name of the Vulnerable Software and Affected Versions: Vigybag versions 1.0 and before Description: The issue is related to Cross Site Scripting XSS via the upload profile picture function under the user's profile. This allows for potential malicious script execution. No information is provided...

PT-2025-24416 · Bagisto · Bagisto

Name of the Vulnerable Software and Affected Versions: Bagisto version 2.0.0 Description: A Reflected Cross-Site Scripting XSS issue has been found, allowing an attacker to execute JavaScript code in the victim's browser by sending a malicious URL using the query parameter in the "/search" API...

PT-2025-24528 · Unknown · Unfoldwp Blogbyte

Name of the Vulnerable Software and Affected Versions: Unfoldwp Blogbyte versions 1.1.1 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-24496 · Unknown · Seofy Core

Name of the Vulnerable Software and Affected Versions: Seofy Core versions 1.4.5 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion in Seofy Core. Recommendations: F...

PT-2025-24531 · Unknown · Unfoldwp Blogty

Name of the Vulnerable Software and Affected Versions: Unfoldwp Blogty versions 1.0.0 through 1.0.11 Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-24582 · Totolink · Totolink T10

Name of the Vulnerable Software and Affected Versions: TOTOLINK T10 version 4.1.8cu.5207 Description: A critical issue affects the setWiFiRepeaterCfg function of the /cgi-bin/cstecgi.cgi file in the POST Request Handler component. The manipulation of the Password argument leads to a buffer...

PT-2025-24347 · Unknown · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Client Database Management System. This issue affects an unknown part of the file /user update customer...

Exploit for Race Condition in Canonical Apport

CVE-2025-5054 Vulnerability Detection Tool A Python tool to c...

PT-2025-24165 · Unknown · Debashish Iframe Widget

Name of the Vulnerable Software and Affected Versions: Debashish IFrame Widget versions n/a through 4.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-24147 · Unknown · Appbanners

Name of the Vulnerable Software and Affected Versions: AppBanners versions 1.5.14 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject...