PT-2025-26598 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2025.03.3 Description: A DOM-based XSS issue was found at the Performance Monitor page. Recommendations: For versions prior to 2025.03.3, update to version 2025.03.3 or later to resolve the issue...

PT-2025-26590

Name of the Vulnerable Software and Affected Versions Meridian Technique Materialise OrthoView versions through 7.5.1 Description Meridian Technique Materialise OrthoView through version 7.5.1 is susceptible to an OS Command Injection when servlet sharing is enabled. This allows for potential...

PT-2025-26562 · Unknown · Code-Projects Online Shopping Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shopping Store version 1.0 Description: A critical issue affects an unknown functionality of the file /action.php. The manipulation of the arguments cat id, brand id, keyword, proId, pid leads to SQL injection. The attack...

PT-2025-26551 · Unknown · Code-Projects School Fees Payment System

Name of the Vulnerable Software and Affected Versions: code-projects School Fees Payment System version 1.0 Description: A problematic issue was found in the code-projects School Fees Payment System, affecting an unknown part of the file /fees.php. The manipulation of the transcation remark...

PT-2025-26541 · Unknown · Code-Projects Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Online Hotel Reservation System version 1.0 Description: A critical issue has been found in the code-projects Online Hotel Reservation System. The problem affects some unknown functionality of the file /reservation/order.php. Th...

PT-2025-26499 · Code Projects · School Fees Payment System

Name of the Vulnerable Software and Affected Versions: code-projects School Fees Payment System version 1.0 Description: A critical issue affects the processing of the file /student.php in the School Fees Payment System. The manipulation of the ID argument leads to SQL injection. This issue can b...

PT-2025-26492

Name of the Vulnerable Software and Affected Versions: FastGPT versions prior to 4.9.12 Description: The issue concerns the LastRoute Parameter on the login page, which is vulnerable to open redirect and DOM-based XSS due to improper validation and lack of sanitization. This allows attackers to...

PT-2025-26274 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue has been discovered in the code, specifically affecting the /admin/admin index.php file. The manipulation of the Username argument leads to a SQL injection. This issue...

PT-2025-26430 · Unknown · Code-Projects Responsive Blog

Name of the Vulnerable Software and Affected Versions: code-projects Responsive Blog versions 1.0, 1.12.4, and 3.3.4 Description: A cross-site scripting issue exists in code-projects Responsive Blog. The vulnerability affects unknown code within the...

PT-2025-26338 · Unknown · Hello Fse Blog

Name of the Vulnerable Software and Affected Versions: Hello FSE Blog versions 1.0.0 through 1.0.6 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Hello FSE Blog version...

PT-2025-26420 · WordPress · Wp User Stylesheet Switcher

Name of the Vulnerable Software and Affected Versions: WP User Stylesheet Switcher versions through v2.2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-26424 · WordPress · Import Youtube Videos As Wp Posts

Name of the Vulnerable Software and Affected Versions: Import YouTube videos as WP Posts versions n/a through 2.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This can be used to gain...

PT-2025-26419 · Unknown · Knowledge Base Maker

Name of the Vulnerable Software and Affected Versions: Knowledge Base – Knowledge Base Maker versions 1.1.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS. This means an attacker can trick a user into performing unintended actions...

PT-2025-27393 · Git +1 · Glaze

Name of the Vulnerable Software and Affected Versions: glz affected versions not specified Description: The software contains a stack-buffer-overflow vulnerability. The crash occurs during the glz::from and glz::visit functions when processing data, potentially leading to a read error. The crash...

PT-2025-26409 · Metagauss · Metagauss Profilegrid

Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions through 5.9.5.2 Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, enabling the retrieval of embedded sensitive data. Recommendations: For Metagauss...

PT-2025-26299 · Unknown · Phpgurukul Directory Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Directory Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Directory Management System. The issue affects an unknown function of the file /searchdata.php, where the manipulation o...

PT-2025-26381 · Truong Thanh · Truong Thanh Atp Call Now

Name of the Vulnerable Software and Affected Versions: Truong Thanh ATP Call Now versions 1.0.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables attackers to inje...

PT-2025-26403 · Unknown · Firelight Lightbox

Name of the Vulnerable Software and Affected Versions: Firelight Lightbox versions through 2.3.16 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This means an attacker can inject malicious scripts into the...

PT-2025-26331 · Unknown · Nasatheme Elessi

Name of the Vulnerable Software and Affected Versions: NasaTheme Elessi versions n/a through 6.3.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations: For versions n/a...

PT-2025-26275 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue affects the processing of the file /function/edit customer.php, where the manipulation of the firstname argument leads to SQL injection. The attack can be initiated...