PT-2025-23985 · Code Projects · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue affects some unknown processing of the file /Admin/User.php. The manipulation of the txtUserName argument leads to SQL injection. The attack may be...

PT-2025-23986 · Code Projects · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue was found in the code-projects Real Estate Property Management System. The problem affects an unknown function of the file /Admin/Property.php...

PT-2025-30689 · Git +1 · Tarantool

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software suffers from a heap-buffer-overflow write issue. The crash state involves the functions mmcall, lj meta tget, and lj vmeta tgetv. Recommendations...

PT-2025-23954 · Unknown · Campcodes Online Teacher Record Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Teacher Record Management System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /trms/admin/bwdates-reports-details.php. The manipulation of the fromdate and todate arguments...

PT-2025-23943 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Medical Card Generation System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /admin/manage-card.php. The manipulation of the argument ID leads to SQL injection. The...

PT-2025-23839 · Unknown · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Hospital Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /user-login.php. The manipulation of the Username argument leads to SQL injection. The...

PT-2025-23783

Name of the Vulnerable Software and Affected Versions EIBPORT V3 KNX versions 3.9.8 and earlier EIBPORT V3 KNX GSM versions 3.9.8 and earlier Description This issue allows a successful attacker to gain unauthorized access to a configuration web page delivered by the integrated web server of...

PT-2025-23792 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated remote attacker could consume resources uncontrollably in the IEC 61131 program of the affected products, generating large amounts of network traffic that the ILC must...

PT-2025-23756

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 28.0.0.59 Description The issue is related to the improper handling of insufficient permission in the ClientProvider component of Samsung Internet. This allows local attackers to read and write arbitrary file...

PT-2025-23762 · Kro · Kro

Name of the Vulnerable Software and Affected Versions: kro Kube Resource Orchestrator versions 0.1.0 through 0.2.1 Description: The issue allows users with permission to create or modify ResourceGraphDefinition resources to supply arbitrary container images. This can lead to a confused-deputy...

PT-2025-23848 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform version 2.0 Description: The issue allows a remote attacker to escalate privileges via the "/students/edit/id" endpoint. Recommendations: For Unifiedtransform version 2.0, as a temporary workaround, consider restricting acces...

PT-2025-23866 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue has been discovered, affecting an unknown functionality of the file /details.php. The manipulation of the requestid argument leads to SQL injection. This issue...

PT-2025-28091

Name of the Vulnerable Software and Affected Versions: llama index versions v0.12.27 through v0.12.40 Description: A critical deserialization vulnerability exists in the JsonPickleSerializer component of the llama index library. This vulnerability allows remote code execution due to an insecure...

PT-2025-23623 · Unicom · Unicom Focal Point

Name of the Vulnerable Software and Affected Versions: Unicom Focal Point version 7.6.1 Description: An issue was discovered where the database is encrypted with a hardcoded key, making it easier to recover the cleartext data. Recommendations: For Unicom Focal Point version 7.6.1, consider changi...

PT-2025-23678

Name of the Vulnerable Software and Affected Versions aaluoxiang oa system versions up to 5b445a6227b51cee287bd0c7c33ed94b801a82a5 Description A vulnerability was found in the image function of the UserpanelController.java file, which can lead to path traversal. The attack may be launched remotel...

PT-2025-23636

Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10 Description A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via the "failure.aspx" component. Recommendations For versions prior to 10, update to version 10 or later to resolv...

PT-2025-23608

Name of the Vulnerable Software and Affected Versions Python versions 3.12 through 3.13 Description An issue in the tarfile module allows the extraction filter to be ignored when extracting untrusted tar archives. This can enable an attacker to create symbolic links that point outside the...

PT-2025-23607

Name of the Vulnerable Software and Affected Versions Python versions 3.12 through 3.13 Description An issue exists in the tarfile module when extracting untrusted tar archives. When using the TarFile.extractall or TarFile.extract functions with the filter parameter set to data or tar, it is...

PT-2025-23593 · Unknown · Pc Time Tracer

Name of the Vulnerable Software and Affected Versions: PC Time Tracer versions prior to 5.2 Description: The issue is related to incorrect default permissions in PC Time Tracer. If exploited, a local authenticated attacker could execute arbitrary code with SYSTEM privilege on Windows systems wher...

PT-2025-23570 · Unknown · Log Service

Name of the Vulnerable Software and Affected Versions: cplog service affected versions not specified Description: The issue is related to a possible out of bounds write in the cplog service due to a missing bounds check. This could lead to a local denial of service with no additional execution...