PT-2025-27384 · Sourcecodester · Sourcecodester Simple Company Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Company Website version 1.0 Description: A critical issue was found in the software, affecting the file /classes/SystemSettings.php. The manipulation of the img argument leads to unrestricted upload. This issue can be...

PT-2025-27335 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical issue affects the processing of the file "/student-issue-book.php". The manipulation of the reg argument leads to SQL injection. The attack may be initiated remotely...

PT-2025-27355

Name of the Vulnerable Software and Affected Versions: Langchain-Chatchat versions up to 0.3.1 Description: A problematic vulnerability was found in Langchain-Chatchat, affecting unknown code of the file "/v1/files?purpose=assistants". This issue leads to path traversal and can be initiated...

PT-2025-27382 · Unknown · Sourcecodester Simple Company Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Company Website version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /classes/Login.php. The manipulation of the Username argument leads to SQL injection. This issue can be...

PT-2025-27367 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue affects the processing of the file /panel/add plan.php, where the manipulation of the plan name, description, duration days, and price arguments leads to SQ...

PT-2025-27342 · Code Projects · Code-Projects Product Inventory System

Name of the Vulnerable Software and Affected Versions: code-projects Product Inventory System version 1.0 Description: A critical issue has been discovered, affecting the file /admin/edit product.php. The manipulation of the ID argument leads to SQL injection. This issue can be exploited remotely...

PT-2025-27376 · Sourcecodester · Sourcecodester Simple Company Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Company Website version 1.0 Description: A critical issue affects the processing of the file "/admin/services/manage.php". The manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely...

PT-2025-27349 · Code Projects · Code-Projects Simple Forum

Name of the Vulnerable Software and Affected Versions: code-projects Simple Forum version 1.0 Description: A critical issue was found in the code, affecting the /forum edit.php file. The manipulation of the iii argument leads to SQL injection. This issue can be exploited remotely. Recommendations...

PT-2025-27284 · WordPress · Wp Vr – 360 Panorama/Free Virtual Tour Builder For Wordpress

Name of the Vulnerable Software and Affected Versions: WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress versions up to, and including, 8.5.32 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows...

PT-2025-27504 · Totolink · Totolink A702R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 4.0.0-B20230721.1521 Description: A critical vulnerability affects an unknown functionality of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the submit-url argument...

PT-2025-27294

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.14.6 Description: A vulnerability was found in HDF5, affecting the function H5O fsinfo encode of the file /src/H5Ofsinfo.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local...

PT-2025-28160 · Unknown · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Management System version 1.0 Description: A critical issue was found in the itsourcecode Employee Management System. The issue affects an unknown functionality of the file /admin/editempeducation.php. The manipulation o...

PT-2025-27323 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability affects the unknown code of the file /php action/removeProduct.php. The manipulation of the productId argument leads to SQL injection. The attack can ...

PT-2025-27320 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /php action/createProduct.php. The manipulation of the productName argument leads to SQL injection. The attack...

PT-2025-28162 · Unknown · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Management System versions up to 1.0 Description: A critical issue was found in the itsourcecode Employee Management System. The problem affects the /admin/changepassword.php file, where the manipulation of the...

PT-2025-27322 · Unknown · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /php action/createOrder.php, leading to sql injection. The manipulation can be initiated remotely...

PT-2025-28161 · Itsourcecode · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Management System versions up to 1.0 Description: A critical issue has been found in the itsourcecode Employee Management System. The problem affects some unknown functionality of the file /admin/adminprofile.php. The...

PT-2025-27325 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 versions up to 1.0.0-B20230714.1105 Description: A critical vulnerability has been found in the HTTP POST Request Handler component of TOTOLINK X15. The issue affects an unknown function of the file /boafrm/formParentControl. The...

PT-2025-27331 · Akka · Akka

Name of the Vulnerable Software and Affected Versions: Akka versions through 2.10.6 Description: The issue concerns the use of Java serialization for cluster metrics in the akka-cluster-metrics component. Recommendations: For versions through 2.10.6, consider disabling Java serialization for...

PT-2025-27067 · WordPress · Pack Elementor

Name of the Vulnerable Software and Affected Versions: The Pack Elementor plugin for WordPress versions up to and including 2.1.3 Description: The issue is related to stored cross-site scripting, allowing authenticated attackers with contributor or higher access to inject arbitrary web scripts in...