PT-2025-30204 · Unknown · Moneyprinterturbo

Name of the Vulnerable Software and Affected Versions: harry0703 MoneyPrinterTurbo versions through 1.2.6 Description: A critical issue exists in the verify token function within the app/controllers/base.py file of the API Endpoint component. This allows for missing authentication and may be...

PT-2025-30202 · Harry0703 · Moneyprinterturbo

Name of the Vulnerable Software and Affected Versions: harry0703 MoneyPrinterTurbo versions through 1.2.6 Description: A critical issue exists in harry0703 MoneyPrinterTurbo. The upload bgm file function within the File Extension Handler component, located in the app/controllers/v1/video.py file,...

PT-2025-30355 · D Link · D-Link Dir-513

Name of the Vulnerable Software and Affected Versions: D-Link DIR-513 versions up to 20190831 Description: A critical issue exists in D-Link DIR-513. The vulnerability is due to a buffer overflow in the formSetWanDhcpplus function within the /goform/formSetWanDhcpplus file. The curTime argument c...

PT-2025-30115 · WordPress +1 · Integration For Google Sheets/Contact Form 7 +1

Name of the Vulnerable Software and Affected Versions: Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin for WordPress versions up to and including 1.1.1 Description: The plugin is susceptible to PHP Object Injection due to deserialization of untrusted input...

PT-2025-30141 · Unknown · Church Donation System

Name of the Vulnerable Software and Affected Versions: Church Donation System version 1.0 Description: A critical vulnerability exists in Church Donation System 1.0. The issue is a SQL injection vulnerability located in the /members/Tithes.php file. Manipulation of the trcode argument allows for...

PT-2025-30140 · Unknown · Church Donation System

Name of the Vulnerable Software and Affected Versions: Church Donation System version 1.0 Description: A vulnerability exists in the Church Donation System software. The issue affects an unknown functionality within the /reg.php file. Manipulation of the mobile argument can lead to a SQL injectio...

PT-2025-30145

Name of the Vulnerable Software and Affected Versions eslint-config-prettier versions 8.10.1 through 10.1.7 Description The eslint-config-prettier npm package was compromised through a supply chain attack resulting from a phishing attack on maintainers. Installation of affected versions executes ...

PT-2025-30114 · Unknown +1 · Contact Form 7 +1

Name of the Vulnerable Software and Affected Versions: Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms plugin for WordPress versions up to and including 1.2.3 Description: The Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms plugin for...

PT-2025-30039 · Unknown · Gnuboard G6

Name of the Vulnerable Software and Affected Versions: Gnuboard g6 versions up to 6.0.10 Description: A problematic issue has been identified in Gnuboard g6. The issue affects processing of the /bbs/scrap popin update/qa/ file within the Post Reply Handler component, leading to cross site...

PT-2025-30045 · Unknown · File Manager

Name of the Vulnerable Software and Affected Versions: Filemanager version 2.5.0 Description: An arbitrary file upload vulnerability exists in the /rsc/filemanager.rsc.class.php component. Attackers can execute arbitrary code by uploading a crafted SVG file. Recommendations: Filemanager version...

PT-2025-30086 · Hotelmis · Hotelmis

Name of the Vulnerable Software and Affected Versions: cgpandey hotelmis versions prior to c572198e6c4780fccc63b1d3e8f3f72f825fc94e Description: A problematic issue exists in the admin.php file's HTTP GET Request Handler component. Manipulation of the Search argument can lead to cross-site...

PT-2025-30091 · Unknown · Student-Manage

Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: The software contains a cross-site scripting XSS issue via the Add A New Teacher module. Recommendations: Address the issue in the Add A New Teacher module in StudentManage version 1.0...

PT-2025-30080 · Agorum · Agorum Core Open

Name of the Vulnerable Software and Affected Versions: Agorum core open versions 11.9.2 and 11.10.1 Description: An incorrect access control issue exists in Agorum core open. Authenticated attackers can escalate privileges to Administrator and access sensitive components and information...

PT-2025-30024 · Rsjoomla · Rsmail!

Name of the Vulnerable Software and Affected Versions: RSMail! versions 1.19.20 through 1.22.26 Description: A reflected cross-site scripting XSS issue exists in the RSMail! component for Joomla. The issue allows remote attackers to inject arbitrary web script or HTML via a manipulated parameter...

PT-2025-29911 · Maxkb · Maxkb

Name of the Vulnerable Software and Affected Versions: MaxKB versions prior to 2.0.0 Description: MaxKB is an open-source AI assistant for enterprise. Prior to version 2.0.0, the sandbox design rules can be bypassed because the software only restricts the execution permissions of files in a...

PT-2025-29972 · Unknown · Code-Projects Online Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Online Ordering System version 1.0 Description: A critical issue exists in the processing of the /admin/edit product.php file. Manipulation of the image argument allows for unrestricted file upload. This issue may be initiated...

PT-2025-29912

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 1.10.9-lts MaxKB versions prior to 2.0.0 Description A Remote Command Execution issue exists in the MCP call. Recommendations Update to version 1.10.9-lts or later. Update to version 2.0.0 or later...

PT-2025-29977

Name of the Vulnerable Software and Affected Versions Brocade ASCG versions prior to 3.3.0 Description Brocade ASCG versions prior to 3.3.0 allow the use of medium strength cryptography algorithms on internal ports 9000 and 8036. Recommendations Update Brocade ASCG to version 3.3.0 or later...

PT-2025-29917 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.6 Description: WeGIA is an open source web manager. A SQL Injection vulnerability exists in the idatendido familiares parameter of the /html/funcionario/dependente editarDoc.php endpoint. This allows manipulation o...

PT-2025-29692 · WordPress · Events Manager – Calendar

Name of the Vulnerable Software and Affected Versions: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce versions up to and including 3.1.49 Description: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress contai...