PT-2025-18254 · Unknown · Phpgurukul Student Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 3.20 Description: A critical issue was found in the PHPGurukul Student Record System. The vulnerability affects the file "add-course.php" and is related to the manipulation of the course-short argument...

PT-2025-18308 · Sourcecodester · Sourcecodester Simple Parking Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Barangay Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. It affects the API endpoint "/barangay management/admin/?page=view household". Recommendations: For SourceCodeste...

PT-2025-18246 · Unknown · Phpgurukul Student Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 3.20 Description: A critical vulnerability was found in PHPGurukul Student Record System. The issue affects an unknown function of the file /add-subject.php. The manipulation of the argument sub1 leads...

PT-2025-18324 · Tesla · Tesla Model S

Name of the Vulnerable Software and Affected Versions: Tesla Model S affected versions not specified Description: This issue allows local attackers to escape the sandbox on affected Tesla Model S vehicles. To exploit this, an attacker must first obtain the ability to execute code within the sandb...

WordPress Widgets as Shortcodes plugin <= 5.9.10 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin Widgets as Shortcodes versions = 5.9.10...

PT-2025-18151

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 138 Firefox ESR versions prior to 128.10 Firefox ESR versions prior to 115.23 Thunderbird versions prior to 138 Thunderbird ESR versions prior to 128.10 Description Modification of specific WebGL shader attributes cou...

PT-2025-18187

Name of the Vulnerable Software and Affected Versions AngularJS versions prior to the end of life, as no specific fixed version is mentioned and the project is End-of-Life. Description The issue is related to improper sanitization of the href and xlink:href attributes in SVG elements, allowing...

PT-2025-18205 · Modernwms · Modernwms

Name of the Vulnerable Software and Affected Versions: modernwms version 1.0 Description: The issue allows an attacker to view the MD5 hash of the administrator password and other attributes without authentication. This is due to excessive exposure of information and the lack of adequate access...

PT-2025-18173 · Bookgy · Bookgy

Name of the Vulnerable Software and Affected Versions: Bookgy affected versions not specified Description: A Reflected Cross-Site Scripting XSS issue allows an attacker to execute JavaScript code in the victim's browser. This is achieved by sending a malicious URL through the TEXTO parameter in t...

PT-2025-18121

Name of the Vulnerable Software and Affected Versions gosnowflake versions 1.7.0 through 1.13.3 Description The issue is related to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS, the driver reads logging configuration from a...

PT-2025-18055 · Sick Ag · Sick Flx3-Cpuc200

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to inadequate salting of device passwords, making them susceptible to password extraction attacks. Recommendations: At the moment, there is no information about a newer...

PT-2025-18081 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Placement Management System version 1.0 Description: A critical vulnerability has been found in the iSourcecode Placement Management System. The issue affects an unknown function of the file /add drive.php, where the manipulation ...

PT-2025-18094 · Net::Imap +3 · Net::Imap +3

Name of the Vulnerable Software and Affected Versions: Net::IMAP versions prior to 0.5.7, 0.4.20, 0.3.9, and 0.2.5 Description: The issue allows for denial of service by memory exhaustion when Net::IMAP reads server responses. A malicious server can send a "literal" byte count, which is...

PT-2025-18113 · Novel · Novel

Name of the Vulnerable Software and Affected Versions: 201206030 Novel version 3.5.0 Description: A critical issue affects the function updateBookChapter of the file src/main/java/io/github/xxyopen/novel/controller/author/AuthorController.java of the component Chapter Handler, leading to improper...

PT-2025-18012 · Unknown · Amtt Hotel Broadband Operation System

Name of the Vulnerable Software and Affected Versions: AMTT Hotel Broadband Operation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /manager/system/nlog down.php. The manipulation of the ProtocolType argument leads to...

PT-2025-17970

Name of the Vulnerable Software and Affected Versions NASA CryptoLib versions prior to 1.3.2 Description The issue is related to NASA CryptoLib not checking whether the SA is in an operational state before use. This could possibly lead to a bypass of the Space Data Link Security protocol SDLS...

PT-2025-17965

Name of the Vulnerable Software and Affected Versions python-markdownify aka markdownify versions prior to 0.14.1 Description The issue allows large headline prefixes, such as , in addition to the standard through tags. This can cause excessive memory consumption. Recommendations For versions pri...

PT-2025-17924 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2025.03.1 Description: The issue is related to improper path validation in the loggingPreset parameter. This could potentially allow for unauthorized access or manipulation of files. Recommendations: For...

PT-2025-17879

Name of the Vulnerable Software and Affected Versions CNCF K3s versions 1.32.0-rc1 through 1.32.4-rc1+k3s1 Description A change in the Kubernetes kubelet configuration within the 1.32 branch transitioned from legacy CLI flags to the v1beta1.KubeletConfiguration structure. Due to the use of...

PT-2025-17892 · Quantum · Stornext Ryo +2

Name of the Vulnerable Software and Affected Versions: StorNext RYO versions prior to 7.2.4 StorNext Xcellis Workflow Director versions prior to 7.2.4 ActiveScale Cold Storage versions prior to 7.2.4 Description: The issue allows access to internal configuration and unauthorized modification of...