PT-2025-17939 · Netscout · Ngeniusone

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 Description: The issue allows local users to leverage Insecure Permissions for the nGeniusCLI File, potentially leading to unauthorized access or modifications. Recommendations: For versions...

PT-2025-17926

Name of the Vulnerable Software and Affected Versions Halo versions prior to 2.20.13 Description The issue allows attackers to bypass file type validation controls, enabling the upload of malicious files, including executables and HTML files. This can lead to stored cross-site scripting attacks a...

PT-2025-17944 · Netscout · Ngeniusone

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 Description: The issue concerns a Sensitive File Accessible Without Proper Authentication to an endpoint. No information is provided about the estimated number of potentially affected devices...

PT-2025-17896 · Alphaefficiencyteam · Custom Login/Registration

Name of the Vulnerable Software and Affected Versions: AlphaEfficiencyTeam Custom Login and Registration versions 1.0.0 and earlier Description: The issue is related to a Missing Authorization vulnerability that allows exploiting incorrectly configured access control security levels. This affects...

PT-2025-17738

Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue concerns multiple vectors in HCL Leap that allow client-side script injection in the authoring environment and deployed applications. Recommendations At the moment, there is no...

PT-2025-17752 · Magepeople Team · Magepeopleteam Booking/Rental Manager

Name of the Vulnerable Software and Affected Versions: magepeopleteam Booking and Rental Manager versions 2.3.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For...

PT-2025-17763 · Angelo Mandato · Powerpress Podcasting

Name of the Vulnerable Software and Affected Versions: Angelo Mandato PowerPress Podcasting versions prior to 11.12.6 Description: The issue allows attackers to upload dangerous files, potentially leading to the upload of a web shell to a web server. This can be exploited through unrestricted fil...

PT-2025-17785 · Unknown · Smart Hashtags

Name of the Vulnerable Software and Affected Versions: Smart Hashtags versions through 7.2.3 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions through 7.2.3,...

PT-2025-17822 · WordPress · Blog Manager Wp

Name of the Vulnerable Software and Affected Versions: Blog Manager WP versions 1.0.0 through 1.0.5 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a Stored XSS...

PT-2025-17823 · Unknown · Media Library Downloader

Name of the Vulnerable Software and Affected Versions: Media Library Downloader versions 1.3.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Media Library...

PT-2025-17754 · Unknown · Popup Anything

Name of the Vulnerable Software and Affected Versions: Anything Popup versions n/a through 7.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS, where an attacker can inject maliciou...

PT-2025-17827 · Devignstudiosltd · Devignstudiosltd Covid-19 (Coronavirus) Update Your Customers

Name of the Vulnerable Software and Affected Versions: devignstudiosltd COVID-19 Coronavirus Update Your Customers versions 1.5.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Store...

PT-2025-17820 · Unknown · Milat Jquery Automatic Popup

Name of the Vulnerable Software and Affected Versions: Milat jQuery Automatic Popup versions 1.3.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-17800 · Unknown · Matthew Muro Multi-Column Taxonomy List

Name of the Vulnerable Software and Affected Versions: Matthew Muro Multi-Column Taxonomy List versions 1.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker c...

PT-2025-17792 · Unknown · Metaloha Dropdown Content

Name of the Vulnerable Software and Affected Versions: metaloha Dropdown Content versions n/a through 1.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS in metaloha Dropdown Content...

PT-2025-17865 · Albedo Telecom · Albedo Telecom Net.Time

Name of the Vulnerable Software and Affected Versions: ALBEDO Telecom Net.Time - PTP/NTP clock Serial No. NBC0081P version 1.4.4 Description: The issue is related to an insufficient session expiration, which could allow an attacker to transmit passwords over unencrypted connections, resulting in...

PT-2025-17764 · Unknown · Yash Binani Time Based Greeting

Name of the Vulnerable Software and Affected Versions: Yash Binani Time Based Greeting versions 2.2.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For Yash Binani Time Based Greeting versions 2.2.2 and earlier, upda...

PT-2025-17784 · Send From · Send From

Name of the Vulnerable Software and Affected Versions: Benjamin Buddle Send From versions n/a through 2.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

PT-2025-17760 · Unknown · M A Vinoth Kumar Frontend Dashboard

Name of the Vulnerable Software and Affected Versions: M A Vinoth Kumar Frontend Dashboard versions 2.2.5 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attack...

PT-2025-17778 · Unknown · Confirm User Registration

Name of the Vulnerable Software and Affected Versions: Confirm User Registration versions through 2.1.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject...