PT-2025-20542 · Unknown · Sourcecodester Online Student Clearance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student Clearance System version 1.0 Description: A problematic issue has been found in the system, where the manipulation of the Username argument leads to cross-site scripting. This can be launched remotely. The issue...

PT-2025-20414 · D Link · Dns-320L +1

Name of the Vulnerable Software and Affected Versions: dlink DNS-320 version 1.00 dlink DNS-320LW version 1.01.0914.20212 Description: An issue allows an attacker to execute arbitrary code via the account mgr.cgi component, specifically through the cgi chg admin pw function. Recommendations: For...

PT-2025-20389 · Phpjabbers · Phpjabbers Cleaning Business

Name of the Vulnerable Software and Affected Versions: PHPJabbers Cleaning Business Software version 1.0 Description: The issue concerns Multiple Stored Cross-Site Scripting XSS in the c name and name parameters. This allows for the injection of malicious scripts, potentially leading to...

PT-2025-20372 · Netis Systems · Wf2220

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The endpoint /cgi-bin-igd/netcore set.cgi is used for changing device configuration and is accessible without authentication, posing a significant security threat. This could allow for...

PT-2025-20456 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.04B04 Description: A critical issue affects the formSysCmd function, where manipulation of the sysCmd argument leads to command injection. This can be initiated remotely. The vendor was contacted about this disclosur...

PT-2025-20365 · Halo · Halo

Name of the Vulnerable Software and Affected Versions: Halo versions up to 2.174.101 Halo versions 2.175.1 through 2.184.21 Description: The issue is related to improper input validation, specifically with the returnUrl parameter in Account Security Settings. This lack of validation allows...

PT-2025-19906 · Peprodev · Peprodev Ultimate Profile Solutions

Name of the Vulnerable Software and Affected Versions: PeproDev Ultimate Profile Solutions versions 1.9.1 through 7.5.2 Description: The issue is related to the lack of proper authentication in the handel ajax req function, specifically with the change user meta functionality. This allows attacke...

PT-2025-20181 · Flowdee · Flowdee Clickwhale

Name of the Vulnerable Software and Affected Versions: flowdee ClickWhale versions 2.4.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For flowdee ClickWhale...

PT-2025-20027 · Rt · Rt-Labs P-Net

Name of the Vulnerable Software and Affected Versions: RT-Labs P-Net versions 1.0.1 and earlier Description: The issue allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet. This is due to an out-of-bounds write in the affected software...

PT-2025-20183 · Unknown · Flowdee Amazon Product In A Post

Name of the Vulnerable Software and Affected Versions: flowdee Amazon Product in a Post versions n/a through 5.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-19902 · Ibm · Ibm I

Name of the Vulnerable Software and Affected Versions: IBM i versions 7.2 through 7.6 Description: The issue concerns authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could exploit these weaknesses, in conjunction with brute for...

PT-2025-20094 · Unknown · Ohidul Islam Challan

Name of the Vulnerable Software and Affected Versions: Ohidul Islam Challan versions 3.7.58 and earlier Description: A Cross-Site Request Forgery CSRF issue allows Privilege Escalation. Recommendations: For Ohidul Islam Challan versions 3.7.58 and earlier, as a temporary workaround, consider...

PT-2025-20186 · Unknown · Martins Free Monetized Ad Exchange Network

Name of the Vulnerable Software and Affected Versions: Martins Free Monetized Ad Exchange Network versions 1.0.0 through 1.0.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS. Recommendations: For versions 1.0.0 through 1.0.5, update to a versio...

PT-2025-20119 · Eventon · Eventon

Name of the Vulnerable Software and Affected Versions: EventON versions n/a through 2.4.1 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This is a...

PT-2025-20124 · Unknown · Jeff Starr Simple Blog Stats

Name of the Vulnerable Software and Affected Versions: Jeff Starr Simple Blog Stats versions from n/a through 20250416 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-20230 · Unknown · Ultimate Member

Name of the Vulnerable Software and Affected Versions: Ultimate Member versions through 2.10.3 Description: The issue is related to an Improper Control of Generation of Code, also known as 'Code Injection'. This allows for Code Injection in Ultimate Member. Recommendations: For versions through...

PT-2025-20224 · Ability · Ability

Name of the Vulnerable Software and Affected Versions: Ability, Inc Web Accessibility with Max Access versions 2.0.9 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For...

PT-2025-20157 · Woocommerce · Acowebs Dynamic Pricing With Discount Rules For Woocommerce

Name of the Vulnerable Software and Affected Versions: acowebs Dynamic Pricing With Discount Rules for WooCommerce versions prior to 4.5.9 Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This...

PT-2025-20073 · Lemeconsultoria · Galera.App

Name of the Vulnerable Software and Affected Versions: lemeconsultoria HCM galera.app version 4.58.0 Description: The issue allows an attacker to execute arbitrary code via the Data export and filters functions. This is due to a SQL Injection vulnerability. Recommendations: For version 4.58.0,...

PT-2025-20314 · Rack +5 · Rack +5

Name of the Vulnerable Software and Affected Versions: Rack versions prior to 2.2.14 Description: The issue affects Rack, a modular Ruby web server interface, when using the Rack::Session::Pool middleware. Simultaneous rack requests can restore a deleted rack session, allowing an unauthenticated...