PT-2025-27618 · Infinera · Infinera G42

Name of the Vulnerable Software and Affected Versions: Infinera G42 version R6.1.3 Description: The issue is related to insufficient input validation in the WebGUI CLI web interface of the Infinera G42 appliance. This allows remote authenticated users to read all OS files via crafted CLI commands...

PT-2025-27533 · Unknown · Campcodes Employee Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Employee Management System version 1.0 Description: A critical issue was found in Campcodes Employee Management System, affecting an unknown part of the file /changepassemp.php. The manipulation of the ID argument leads to SQL...

PT-2025-27539 · Avtech · Avtech Dvr +2

Name of the Vulnerable Software and Affected Versions: AVTECH DVR, NVR, and IP camera devices affected versions not specified Description: An OS command injection issue exists within the "adcommand.cgi" endpoint, which interfaces with the ActionD daemon. Authenticated users can invoke the...

PT-2025-28737 · D Link · D-Link Di-500Wf

Name of the Vulnerable Software and Affected Versions: D-Link DI-500WF version 17.04.10A1T Description: A critical issue affects the sprintf function of the ip position.asp file in the jhttpd component. Manipulation of the ip argument leads to a stack-based buffer overflow. This issue can be...

PT-2025-27522 · WordPress · The Dear Flipbook – Pdf Flipbook

Name of the Vulnerable Software and Affected Versions: The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress versions up to, and including, 2.3.65 Description: The issue is related to DOM-Based Reflected Cross-Site Scripting due to insufficient input sanitizati...

PT-2025-27502 · Unknown · Code-Projects Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Pizza Ordering System version 1.0 Description: A critical issue affects the processing of the file /editcus.php. The manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely. The exploi...

PT-2025-27549 · Campcodes · Campcodes Employee Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Employee Management System version 1.0 Description: A critical issue affects the processing of the file /edit.php, where the manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely...

PT-2025-27558 · Unknown · Campcodes Employee Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Employee Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /myprofileup.php. The manipulation of the ID argument leads to SQL injection. It is possible to...

PT-2025-27576 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server version 3.17 Description: An exposure of sensitive information issue was identified that could allow an attacker to disclose the names of private repositories within an organization. This issue could be exploited by...

PT-2025-27532 · Unknown · Campcodes Employee Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Employee Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file "/process/aprocess.php". The manipulation of the mailuid argument leads to SQL injection...

PT-2025-27541 · Hikvision · Hikvision Streaming Media Management Server

Name of the Vulnerable Software and Affected Versions: Hikvision Streaming Media Management Server version 2.3.5 Description: The issue allows remote attackers to authenticate using default credentials and access restricted functionality. After authentication, an attacker can exploit an arbitrary...

PT-2025-27555 · Unknown · Campcodes Employee Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Employee Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /eloginwel.php. The manipulation of the ID argument leads to SQL injection. It is possible ...

PT-2025-27441 · Unknown · Phpgurukul Old Age Home Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Old Age Home Management System version 1.0 Description: A critical issue was found in the PHPGurukul Old Age Home Management System, affecting an unknown function of the file /admin/edit-services.php. The manipulation of the sertit...

PT-2025-28010

Name of the Vulnerable Software and Affected Versions: Mbed TLS versions prior to 3.6.4 Description: The issue is related to a race condition in AESNI detection that can occur under certain compiler optimizations. This could potentially allow an attacker to extract an AES key from a multithreaded...

PT-2025-27390 · Sourcecodester · Best Salon Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical vulnerability has been found in the system, affecting the file /panel/search-appointment.php. The manipulation of the searchdata argument leads to SQL injection...

PT-2025-27439 · Unknown · Code-Projects Car Rental System

Name of the Vulnerable Software and Affected Versions: code-projects Car Rental System version 1.0 Description: A critical issue has been discovered, affecting the /login.php file. The manipulation of the uname argument leads to SQL injection. This issue can be exploited remotely. Recommendations...

PT-2025-27452 · Unknown · Phpgurukul Student Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 3.2 Description: A critical issue was found in the PHPGurukul Student Record System, affecting an unknown functionality of the file /edit-student.php. The manipulation of the fmarks2 argument leads to...

PT-2025-27454 · Unknown · Phpgurukul Student Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 3.2 Description: A critical vulnerability has been found in the PHPGurukul Student Record System, affecting some unknown functionality of the file /register.php. The manipulation of the session argumen...

PT-2025-27442 · Unknown · Phpgurukul Old Age Home Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Old Age Home Management System version 1.0 Description: A critical issue has been discovered in the PHPGurukul Old Age Home Management System, affecting an unknown functionality of the file /admin/add-scdetails.php. The manipulatio...

PT-2025-27403

Name of the Vulnerable Software and Affected Versions: code-projects Staff Audit System version 1.0 Description: A critical issue has been found in the Staff Audit System, affecting the processing of the file /search index.php. The manipulation of the Search argument leads to SQL injection. This...