PT-2025-23943 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Medical Card Generation System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /admin/manage-card.php. The manipulation of the argument ID leads to SQL injection. The...

PT-2025-23954 · Unknown · Campcodes Online Teacher Record Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Teacher Record Management System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /trms/admin/bwdates-reports-details.php. The manipulation of the fromdate and todate arguments...

PT-2025-23986 · Code Projects · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue was found in the code-projects Real Estate Property Management System. The problem affects an unknown function of the file /Admin/Property.php...

PT-2025-23985 · Code Projects · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue affects some unknown processing of the file /Admin/User.php. The manipulation of the txtUserName argument leads to SQL injection. The attack may be...

PT-2025-24061 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical issue affects some unknown functionality of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the submit-url argument leads to buffer...

PT-2025-23839 · Unknown · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Hospital Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /user-login.php. The manipulation of the Username argument leads to SQL injection. The...

PT-2025-23848 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform version 2.0 Description: The issue allows a remote attacker to escalate privileges via the "/students/edit/id" endpoint. Recommendations: For Unifiedtransform version 2.0, as a temporary workaround, consider restricting acces...

PT-2025-23792 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated remote attacker could consume resources uncontrollably in the IEC 61131 program of the affected products, generating large amounts of network traffic that the ILC must...

PT-2025-23762 · Kro · Kro

Name of the Vulnerable Software and Affected Versions: kro Kube Resource Orchestrator versions 0.1.0 through 0.2.1 Description: The issue allows users with permission to create or modify ResourceGraphDefinition resources to supply arbitrary container images. This can lead to a confused-deputy...

PT-2025-28091

Name of the Vulnerable Software and Affected Versions: llama index versions v0.12.27 through v0.12.40 Description: A critical deserialization vulnerability exists in the JsonPickleSerializer component of the llama index library. This vulnerability allows remote code execution due to an insecure...

PT-2025-23756

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 28.0.0.59 Description The issue is related to the improper handling of insufficient permission in the ClientProvider component of Samsung Internet. This allows local attackers to read and write arbitrary file...

PT-2025-23866 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue has been discovered, affecting an unknown functionality of the file /details.php. The manipulation of the requestid argument leads to SQL injection. This issue...

PT-2025-23783

Name of the Vulnerable Software and Affected Versions EIBPORT V3 KNX versions 3.9.8 and earlier EIBPORT V3 KNX GSM versions 3.9.8 and earlier Description This issue allows a successful attacker to gain unauthorized access to a configuration web page delivered by the integrated web server of...

PT-2025-23677 · Deno · Deno

Name of the Vulnerable Software and Affected Versions: Deno versions 1.46.0 through 2.1.6 Description: The issue affects AES-256-GCM and AES-128-GCM in Deno, where the authentication tag is not being validated. This means tampered ciphertexts or incorrect keys might not be detected, which breaks...

PT-2025-23675 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R version 1.0.0-B20230726.1108 Description: The issue is related to a cross-site scripting vulnerability in the Virtual Server Page of the TOTOLINK X2000R router. This vulnerability can be exploited remotely by manipulating the...

PT-2025-23593 · Unknown · Pc Time Tracer

Name of the Vulnerable Software and Affected Versions: PC Time Tracer versions prior to 5.2 Description: The issue is related to incorrect default permissions in PC Time Tracer. If exploited, a local authenticated attacker could execute arbitrary code with SYSTEM privilege on Windows systems wher...

PT-2025-23570 · Unknown · Log Service

Name of the Vulnerable Software and Affected Versions: cplog service affected versions not specified Description: The issue is related to a possible out of bounds write in the cplog service due to a missing bounds check. This could lead to a local denial of service with no additional execution...

PT-2025-23678

Name of the Vulnerable Software and Affected Versions aaluoxiang oa system versions up to 5b445a6227b51cee287bd0c7c33ed94b801a82a5 Description A vulnerability was found in the image function of the UserpanelController.java file, which can lead to path traversal. The attack may be launched remotel...

PT-2025-23668 · Unknown · Jrohy Trojan

Name of the Vulnerable Software and Affected Versions: Jrohy trojan versions up to 2.15.3 Description: A critical issue affects the LogChan function in the file trojan/util/linux.go. The manipulation of the argument c leads to os command injection. This issue can be initiated remotely, but the...

PT-2025-23636

Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10 Description A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via the "failure.aspx" component. Recommendations For versions prior to 10, update to version 10 or later to resolv...