PT-2025-27580 · Tenable · Tenable Nessus

Name of the Vulnerable Software and Affected Versions: Tenable Nessus versions prior to 10.8.5 Description: A security issue was discovered where a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege on a Windows host. Recommendations: For...

PT-2025-27449 · Unknown · Devinim Software Library

Name of the Vulnerable Software and Affected Versions: Devinim Software Library Software versions prior to 24.11.02 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

PT-2025-27493 · Unknown · Tiny-Secp256K1

Name of the Vulnerable Software and Affected Versions: tiny-secp256k1 versions prior to 1.1.7 Description: A malicious JSON-stringifyable message can be made to bypass the Buffer.isBuffer check, resulting in strange objects being accepted as a message. This can trick the verify function into...

PT-2025-27476 · Unknown · Ansible Automation Platform

Name of the Vulnerable Software and Affected Versions: Ansible Automation Platform affected versions not specified Description: A flaw was found in Ansible Automation Platform's EDA component where user-supplied Git URLs are passed unsanitized to the git ls-remote command. This issue allows an...

PT-2025-27488 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A remote code execution issue was reported, but the candidate was issued in error. No further details are available about the issue, including the number of potentially affected devices or...

PT-2025-27406 · Tenda · Tenda Ac5

Name of the Vulnerable Software and Affected Versions: Tenda AC5 version 15.03.06.47 Description: A critical issue was found in the file /goform/SetSysTimeCfg, where the manipulation of the time/timeZone argument leads to a stack-based buffer overflow. This issue can be exploited remotely...

PT-2025-27432 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue affects the processing of the file /php action/removeUser.php. The manipulation of the userid argument leads to SQL injection. The attack can be initiated...

PT-2025-27402

Name of the Vulnerable Software and Affected Versions: code-projects Staff Audit System version 1.0 Description: A critical issue was found in the code-projects Staff Audit System. The problem affects the file /update index.php, where the manipulation of the updateid argument leads to SQL...

PT-2025-27343 · Code Projects · Code-Projects Product Inventory System

Name of the Vulnerable Software and Affected Versions: code-projects Product Inventory System version 1.0 Description: A critical issue affects the processing of the file "/admin/edit user.php". The manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely...

PT-2025-27376 · Sourcecodester · Sourcecodester Simple Company Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Company Website version 1.0 Description: A critical issue affects the processing of the file "/admin/services/manage.php". The manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely...

PT-2025-27328

Name of the Vulnerable Software and Affected Versions: zuluCrypt version 6.2.0-1 Description: The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt has insecure PolicyKit settings, including allow any, allow inactive, and allow active, which allow a local user to escalate their privileges to...

PT-2025-27320 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /php action/createProduct.php. The manipulation of the productName argument leads to SQL injection. The attack...

PT-2025-27299 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A Cross-Site Request Forgery issue is mentioned, but details are not provided. No information is available about the estimated number of potentially affected devices or real-world incidents...

PT-2025-27193 · Unknown · Plationline Payments

Name of the Vulnerable Software and Affected Versions: PlatiOnline Payments versions through 6.3.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 6.3.2...

PT-2025-27173 · Unknown · Edwardbock Cron Logger

Name of the Vulnerable Software and Affected Versions: EdwardBock Cron Logger versions 1.3.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For EdwardBock Cron...

PT-2025-27056 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A denial of service issue has been identified. No further details are available regarding the estimated number of potentially affected devices or real-world incidents. Recommendations: At th...

PT-2025-27126 · Designthemes · Designthemes Lms

Name of the Vulnerable Software and Affected Versions: designthemes LMS versions n/a through 9.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject...

PT-2025-27250 · Unknown · Tabberneue

Name of the Vulnerable Software and Affected Versions: TabberNeue versions 3.0.0 through 3.1.0 Description: The issue allows any user to insert arbitrary HTML into the DOM by inserting a payload into any allowed attribute of the tag, posing a significant security risk to user data. Recommendation...

PT-2025-27083 · WordPress · Wp Smartpay

Name of the Vulnerable Software and Affected Versions: WP SmartPay versions 2.7.13 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, allowing authentication abuse. Recommendations: For WP SmartPay versions 2.7.13 and earlier, update to a...

PT-2025-27222 · Unknown · Społecznościowa 6 Pl 2013

Name of the Vulnerable Software and Affected Versions: Społecznościowa 6 PL 2013 versions n/a through 2.0.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...