PT-2025-16193 · Crushftp · Crushftp

Name of the Vulnerable Software and Affected Versions: CrushFTP versions 9.x through 11.3.1 Description: The issue allows for Server-Side Request Forgery SSRF via the host and port parameters in a command=telnetSocket request to the "/WebInterface/function/" URI. This vulnerability can be exploit...

PT-2025-26862 · Incus · Incus

Name of the Vulnerable Software and Affected Versions: Incus versions 6.12 through 6.13 Description: Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, it generates nftables rules for local services, such as DHCP and DNS, that partially...

CVE-2017-20197

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

CVE-2017-20197

CVE-2017-20197 affects propanetank Roommate-Bill-Tracking; vulnerable component is unknown code in /includes/login.php where manipulating the Username parameter leads to SQL injection. Attack can be remotely initiated. Patch name: b32bb1b940f82d38fb9310cd66ebe349e20a1d0a. Remediation: apply the p...

PT-2025-15418 · Dell · Dell Common Event Enabler

Name of the Vulnerable Software and Affected Versions: Dell Common Event Enabler version 9.0.0.0 Description: The issue is related to an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA of the Dell Common Event Enabler. This cou...

PT-2025-15246 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the jobLogId parameter. Recommendations: For RUoYi version 4.8.0, consider restricting access to the jobLogId parameter to minimize the ris...

PT-2025-15097 · Sourcecodester · Sourcecodester Apartment Visitor Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Apartment Visitor Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Apartment Visitor Management System, affecting some unknown functionality of the file /view-report.php. The...

PT-2025-15092 · Unknown · Phpgurukul Men Salon Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 1.0 Description: A critical issue has been found in the processing of the file /admin/add-customer-services.php. The manipulation of the argument sids leads to SQL injection. The attack may be...

PT-2025-15102 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical issue was found in the codeprojects Online Restaurant Management System. This issue affects the /reservation save.php file, where the manipulation of the fir...

PT-2025-15094 · Unknown · Phpgurukul Men Salon Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Men Salon Management System. The issue affects an unknown function of the file /admin/add-customer.php. The manipulation of t...

PT-2025-15056 · WordPress · Lafka Plugin

Name of the Vulnerable Software and Affected Versions: Lafka Plugin for WordPress versions up to, and including, 7.1.0 Description: The issue is related to unauthorized access due to a missing capability check on the lafka options upload AJAX function. This allows authenticated attackers with...

PT-2025-14823 · Gnu +1 · Gnu Binutils +1

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.43 through 2.44 Description: A vulnerability has been found in GNU Binutils and classified as problematic. Affected by this vulnerability is the function display info of the file binutils/bucomm.c of the component...

PT-2025-14821 · Unknown · Itsourcecode Online Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Blood Bank Management System version 1.0 Description: A critical issue has been found in the itsourcecode Online Blood Bank Management System, affecting the processing of the file /bbms.php. The manipulation of the Search...

CVE-2025-3160

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::SceneCombiner::AddNodeHashes of the file code/Common/SceneCombiner.cpp of the component File Handler. The manipulation leads to out-of-bounds rea...

WordPress CF7 Spreadsheets plugin <= 2.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin CF7 Spreadsheets versions = 2.3.2...

WordPress LuckyWP Table of Contents plugin <= 2.1.10 - Cross-Site Request Forgery to Reflected Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Reflected Cross-Site Scripting vulnerability discovered by mikemyers in WordPress Plugin LuckyWP Table of Contents versions = 2.1.10...

PT-2025-14771

Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions up to 0.7.1 Description A critical vulnerability was found in InternLM LMDeploy, affecting the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection, and it is possible to launc...

PT-2025-14595 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the version with the applied patch Description: The issue arises when the invalidate cache method is called on filesystems that do not implement it, such as NFS and Ceph. If writing to the cache NETFS WRITE TO...

PT-2025-14631 · Unknown · Projectworlds Online Doctor Appointment Booking System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Doctor Appointment Booking System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the ic argument in the /doctor/deletepatient.php file. This can be...

PT-2025-18665 · Totolink · Totolink Ca600-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA600-PoE version 5.3c.6665 B20180820 Description: A command injection issue was discovered in the setUpgradeFW function through the FileName parameter. This issue allows attackers to execute arbitrary commands via a manipulated...