PT-2025-53767

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The software is susceptible to a cross-site scripting XSS issue due to improper neutralization of input during web page generation. XSS occurs when an applicati...

PT-2025-53712

Name of the Vulnerable Software and Affected Versions code-projects Refugee Food Management System version 1.0 Description A flaw exists in code-projects Refugee Food Management System 1.0, specifically within an unknown functionality of the /home/refugeesreport.php file. Manipulation of the a...

PT-2025-53765

Name of the Vulnerable Software and Affected Versions affected versions not specified Description The software suffers from an unrestricted file upload issue, allowing the upload of files with dangerous types. This could potentially lead to malicious code execution or other security compromises...

PT-2025-53711

Name of the Vulnerable Software and Affected Versions code-projects Refugee Food Management System version 1.0 Description A flaw exists in code-projects Refugee Food Management System 1.0 that allows for SQL injection. The issue is located in an unknown function within the...

PT-2025-53763

Name of the Vulnerable Software and Affected Versions code-projects/anirbandutta9 Content Management System and News-Buzz version 1.0 Description A security flaw exists in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. The issue involves unrestricted upload due to...

PT-2025-53768

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description A buffer overflow issue exists in the strcat function within the asan interceptors.cpp file of libming. This could potentially allow for unexpected behavior or code execution. Recommendations Update to a newer...

PT-2025-53764

Name of the Vulnerable Software and Affected Versions affected versions not specified Description The software suffers from an open redirect issue, allowing an attacker to redirect users to a malicious website. This occurs due to improper validation of user-supplied URLs. The issue involves...

PT-2025-53802

Name of the Vulnerable Software and Affected Versions Campcodes Supplier Management System version 1.0 Description A SQL injection issue exists in Campcodes Supplier Management System 1.0. The issue is located in an unknown function of the /admin/view products.php file. Manipulating the chkId...

PT-2025-53651

Name of the Vulnerable Software and Affected Versions TinyFileManager versions up to 2.6 Description A path traversal flaw exists in TinyFileManager due to manipulation of the fullpath argument within the tinyfilemanager.php file. This allows for remote exploitation. The vendor was contacted...

PT-2025-53657

Name of the Vulnerable Software and Affected Versions 9786 phpok3w versions prior to 901d96a06809fb28b17f3a4362c59e70411c933c Description A flaw exists in 9786 phpok3w. The issue is related to the manipulation of the ID argument, which can lead to SQL injection within the show.php file. The attac...

PT-2025-53625

Name of the Vulnerable Software and Affected Versions jackq XCMS versions prior to 3fab5342cc509945a7ce1b8ec39d19f701b89261 Description A flaw exists in jackq XCMS that allows for unrestricted file upload. This issue impacts an unknown function within the file...

PT-2025-53627

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-800MB version 1.0.1.0 Description A security issue has been identified in TRENDnet TEW-800MB version 1.0.1.0. The issue resides in the Management Interface component, specifically within the do setWizard asp function located in th...

PT-2025-53591

Name of the Vulnerable Software and Affected Versions FluentCMS version 1.2.3 Description The application does not properly sanitize input in the section, which can allow remote attackers to inject arbitrary script tags. This issue was identified after logging in as an administrator and navigatin...

PT-2025-53449

Name of the Vulnerable Software and Affected Versions Nozomi Networks Device Manager affected versions not specified Description A hardcoded encryption key exists for sensitive information within Nozomi Networks Device Manager. An attacker could leverage this key to decrypt sensitive data...

PT-2025-53453

Name of the Vulnerable Software and Affected Versions Eaton UPS Companion affected versions not specified Description A flaw exists in the Eaton UPS Companion software installer related to improper handling of quotation marks in search paths. This could allow an attacker with file system access t...

PT-2025-53432

Name of the Vulnerable Software and Affected Versions FlyCMS affected versions not specified Description A flaw exists in the User Login functionality of FlyCMS. Specifically, manipulation of the redirectUrl argument within the userLogin function in the file...

PT-2025-53446

Name of the Vulnerable Software and Affected Versions Camera Video Analytics Software affected versions not specified Description A flaw exists in camera video analytics software related to improper input validation. This could allow an attacker to execute commands on a user’s host PC...

PT-2025-53601

Name of the Vulnerable Software and Affected Versions Yealink T21P E2 Phone version 52.84.0.15 Description A flaw exists in the Yealink T21P E2 Phone that could allow a remote attacker with normal privileges to execute arbitrary code. This is possible through a crafted request targeting the ping...

PT-2025-53592

Name of the Vulnerable Software and Affected Versions libxmljs version 1.0.11 Description A flaw exists in libxmljs when processing a specifically designed XML document. Accessing the internal ref property on entity ref and entity decl nodes can result in a segmentation fault, potentially causing...

PT-2025-53596

Name of the Vulnerable Software and Affected Versions DEV Systemtechnik GmbH DEV 7113 RF over Fiber Distribution System 32-0078 H.01 Description An issue exists in DEV Systemtechnik GmbH DEV 7113 RF over Fiber Distribution System 32-0078 H.01 related to access control. An unauthenticated attacker...