PT-2025-28807 · Mruby +1 · Mruby +1

Name of the Vulnerable Software and Affected Versions: mruby versions up to 3.4.0-rc2 Description: A heap-based buffer overflow issue was found in the function scope new of the file mrbgems/mruby-compiler/core/codegen.c of the component nregs Handler. This issue can be exploited locally...

PT-2025-28911 · Jenkins · Jenkins Qmetry Test Management Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins QMetry Test Management Plugin versions 1.13 and earlier Description: The Jenkins QMetry Test Management Plugin stores Qmetry Automation API Keys unencrypted in job config.xml files on the Jenkins controller. These keys are accessible ...

CVE-2025-41224

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X All versions V5.10.0, RUGGEDCOM RMC8388NC V5.X All versions V5.10.0, RUGGEDCOM RS416NCv2 V5.X All versions V5.10.0, RUGGEDCOM RS416PNCv2 V5.X All versions V5.10.0, RUGGEDCOM RS416Pv2 V5.X All versions V5.10.0, RUGGEDCOM RS416v2 V5.X Al...

PT-2025-28416 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: A Reflected Cross-site Scripting XSS issue allows an attacker to execute JavaScript code in a victim's browser. This is achieved by sending a malicious URL through the id factura parameter i...

PT-2025-28327 · Unknown · Phpgurukul Zoo Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A critical issue affects an unknown functionality of the file /admin/manage-animals.php. The manipulation of the ID argument leads to SQL injection. This issue can be exploited remotel...

PT-2025-28335 · Unknown · Phpgurukul/Campcodes Cyber Cafe Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul/Campcodes Cyber Cafe Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /index.php. The manipulation of the Username argument leads to SQL...

PT-2025-28404 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical issue affects the processing of the file "/teacher-issue-book.php". The manipulation of the idn argument leads to SQL injection. The attack can be initiated remotely...

PT-2025-28358 · Unknown · Code-Projects Crime Reporting System

Name of the Vulnerable Software and Affected Versions: code-projects Crime Reporting System version 1.0 Description: A critical issue affects the processing of the file /userlogin.php. The manipulation of the email argument leads to SQL injection. The attack can be initiated remotely...

PT-2025-28428 · Unknown · Code-Projects Food Distributor Site

Name of the Vulnerable Software and Affected Versions: code-projects Food Distributor Site version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /admin/login.php. The manipulation of the Username argument leads to SQL injection. This issue can be...

PT-2025-28481 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file "/pages/customer account.php". The manipulation of the Customer argument leads to SQL...

PT-2025-28376

Name of the Vulnerable Software and Affected Versions: Framework for Galaxy Watch versions prior to SMR Jul-2025 Release 1 Description: The issue is related to incorrect default permissions in the Framework for Galaxy Watch, allowing local attackers to reset some configurations of the Galaxy Watc...

PT-2025-28375 · Unknown · Knoxvault Trustlet

Name of the Vulnerable Software and Affected Versions: KnoxVault trustlet versions prior to SMR Jul-2025 Release 1 Description: The issue is related to an out-of-bounds write in the authentication secret checking process. This allows local privileged attackers to write to memory outside the...

PT-2025-28748 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a high-privileged attacker to inject malicious scripts into vulnerable form fields...

PT-2025-28664 · Itsourcecode · Itsourcecode Agri-Trading Online Shopping System

Name of the Vulnerable Software and Affected Versions: itsourcecode Agri-Trading Online Shopping System version 1.0 Description: A critical issue has been discovered in the itsourcecode Agri-Trading Online Shopping System. The problem affects an unknown function within the...

PT-2025-28408 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue allows an attacker to retrieve, create, update, and delete databases through the campo parameter in the "/FacturaE/BusquedasFacturasSesion" endpoint. Recommendations: For versions...

PT-2025-28747 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a high-privileged attacker to inject malicious scripts into vulnerable form fields...

PT-2025-28332 · Unknown · Phpgurukul Zoo Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A critical issue has been found in the PHPGurukul Zoo Management System, affecting the file /admin/add-foreigners-ticket.php. The manipulation of the cprice argument leads to SQL...

PT-2025-28354 · Unknown · Code-Projects Responsive Blog

Name of the Vulnerable Software and Affected Versions: code-projects Responsive Blog Site version 1.0 Description: A critical issue has been identified, affecting unknown code in the /category.php file. The manipulation of the ID argument leads to SQL injection. This issue can be exploited...

PT-2025-28393 · Sinec Nms · Sinec Nms

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V4.0 Description: A vulnerability has been identified that makes the affected devices vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server...

PT-2025-28657 · Ibm · Ibm Openpages With Watson

Name of the Vulnerable Software and Affected Versions: IBM OpenPages with Watson versions 8.3 through 9.0 Description: The issue concerns information disclosure of sensitive information due to weaker than expected security for certain REST endpoints used for administration. An authenticated user...