PT-2025-22672 · Unknown · Techspawn Whatscart

Name of the Vulnerable Software and Affected Versions: Techspawn WhatsCart - Whatsapp Abandoned Cart Recovery, Order Notifications, Chat Box, OTP for WooCommerce versions 1.1.0 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of specia...

PT-2025-22654 · I-Filter · I-Filter

Name of the Vulnerable Software and Affected Versions: i-FILTER affected versions not specified Description: The issue is related to improper pattern file validation in the optional feature 'Anti-Virus & Sandbox' of i-FILTER. If exploited, the product may treat an unauthorized pattern file as...

PT-2025-22825 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.5.11 Description: A critical issue has been discovered, affecting the /include/controller/api controller.php file. The manipulation of the tag argument leads to SQL injection. This issue can be exploited remotely...

CVE-2022-2363

A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Parking Management System 1.0. Affected by this issue is some unknown functionality of the file /cispms/admin/search/searching/. The manipulation of the argument search with the input " leads to cross si...

CVE-2021-28269

Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users group with Full permissions...

CVE-2021-23054

On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting XSS vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system...

CVE-2021-23037

On all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note:...

CVE-2021-25864

node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file...

CVE-2020-1018

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a mask...

CVE-2020-22209

SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...

PT-2025-22542 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3. NEXUS Series versions through 3. MATRIX Series versions through 3. Description: 2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if...

PT-2025-22539 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3. NEXUS Series versions through 3. MATRIX Series versions through 3. Description: Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator...

PT-2025-22535 · Unknown +1 · Nexus Series +3

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3. NEXUS Series versions through 3. MATRIX Series versions through 3. Description: The issue is related to insufficient security of Windows permissions for ASPECT configuration toolsets, leading to exposure ...

PT-2025-22510 · Msp360 · Msp360 Backup

Name of the Vulnerable Software and Affected Versions: MSP360 Backup version 8.0 Description: An insecure file system permissions issue allows a low privileged user to execute commands with SYSTEM level privileges using a specially crafted file with an arbitrary file backup target. Recommendation...

PT-2025-22504 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: The issue allows access and modification of unintended resources due to Absolute File Traversal vulnerabiliti...

PT-2025-22532 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: Relative Path Traversal vulnerabilities in ASPECT allow access to file resources if session administrator...

PT-2025-22537 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3. NEXUS Series versions through 3. MATRIX Series versions through 3. Description: The issue allows attackers to inject malicious browser scripts if administrator credentials become compromised, providing...

PT-2025-23554

Name of the Vulnerable Software and Affected Versions tar-fs versions prior to 3.0.9 tar-fs versions prior to 2.1.3 tar-fs versions prior to 1.16.5 Description The issue in tar-fs allows an extract to write outside the specified directory with a specific tarball. This is due to improper limitatio...

PT-2025-22563 · Schule · Schule

Name of the Vulnerable Software and Affected Versions: Schule versions prior to 1.0.1 Description: The issue concerns the Schule open-source school management system software, which relies on client-side JavaScript to redirect users to different panels based on their role. This implementation pos...

PT-2025-22521 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: Exposure of file path, file size, or file existence vulnerabilities in ASPECT provide attackers access to fil...