PT-2025-4192 · Dell · Dell Vxrail

Name of the Vulnerable Software and Affected Versions: Dell VxRail versions 7.0.000 through 7.0.532 Description: The issue concerns a plaintext storage of a password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information...

PT-2025-3115 · Motorola · Motorola Sm56 Modem Wdm Driver

Name of the Vulnerable Software and Affected Versions: Motorola SM56 Modem WDM Driver version 6.12.23.0 Description: A vulnerability exists in the SmSerl64.sys driver, allowing low-privileged users to map physical memory via specially crafted IOCTL requests. This can be exploited for privilege...

PT-2025-4529 · Unknown · Ofek Nakar Virtual Bot

Name of the Vulnerable Software and Affected Versions: Ofek Nakar Virtual Bot versions n/a through 1.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can perform actions on behalf of a user without their knowledge,...

PT-2025-3764 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Shop version 1.0 Description: A problem has been found in the code that affects the /view.php file. Manipulating the name/details argument leads to cross site scripting attacks. These attacks can be started from a remote...

PT-2024-17890 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A problematic issue has been found in the code-projects Chat System, affecting some unknown functionality of the file /admin/chatroom.php. The manipulation of the id argument leads to cross...

PT-2024-17885 · Unknown · Antabot White-Jotter

Name of the Vulnerable Software and Affected Versions: Antabot White-Jotter versions up to 0.2.2 Description: A problematic issue has been found in Antabot White-Jotter, affecting some unknown processing of the file "/login". The manipulation of the argument username leads to observable response...

PT-2025-3476 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version V15.03.05.19 Description: The issue is related to a stack overflow in the formSetPPTPServer function when handling the startIP parameter. This can allow a remote attacker to impact the confidentiality, integrity, and...

PT-2024-36814 · Openfhe · Openfhe

Name of the Vulnerable Software and Affected Versions: OpenFHE versions 1.2.3 and earlier Description: The issue is related to a NULL pointer dereference in the BinFHEContext::EvalFloor function located in lib/binfhe-base-scheme.cpp. This problem can lead to a crash or potentially allow an attack...

PT-2024-36633 · Unknown · Webriderz Wr Age Verification

Name of the Vulnerable Software and Affected Versions: Webriderz Wr Age Verification versions n/a through 2.0.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially...

PT-2024-36481 · Unknown · Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: Online Nurse Hiring System version 1.0 Description: A SQL injection issue was discovered in the /admin/profile.php component through the fullname parameter. This allows for potential exploitation. Recommendations: For Online Nurse Hiring Syst...

PT-2024-36223 · Geoflickr · Geoflickr

Name of the Vulnerable Software and Affected Versions: geoFlickr versions n/a through 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This problem causes Reflected XSS...

PT-2024-9873 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID19.5, ID18.5.4 and earlier Description: The issue is related to a NULL Pointer Dereference that could result in an application denial-of-service. An attacker could exploit this to crash the application, leading to ...

PT-2024-9906 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.21 and earlier Description: The issue is related to insufficient protection of the web page structure in Adobe Experience Manager, which could allow a remote attacker to execute arbitrary code...

CVE-2024-12306 Access Control Vulnerabilities Allow Unauthorized Access to User Profiles in Unifiedtransform

Multiple access control vulnerabilities in Unifiedtransform version 2.0 and potentially earlier versions allow unauthorized access to personal information of students and teachers. The vulnerabilities include both function-level access control issues in list viewing endpoints and object-level...

PT-2024-17565 · Sourcecodester · Sourcecodester Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: A vulnerability was found in the system, classified as problematic, affecting some unknown functionality of the file /index.php. The manipulation of the page argument...

PT-2024-36448 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: Kashipara E-Learning Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability in the /admin/delete student.php endpoint. This vulnerability allows for potential exploitation. Recommendations: For Kashipara...

PT-2024-17454 · Horilla · Horilla

Name of the Vulnerable Software and Affected Versions: horilla versions up to 1.2.1 Description: A critical vulnerability was found in horilla, affecting the function request new/get employee shift/create reimbursement/key result current value update/create meetings/create skills. The manipulatio...

PT-2024-35339 · Softpulse Infotech · Sp Blog Designer

Name of the Vulnerable Software and Affected Versions: Softpulse Infotech SP Blog Designer versions 1.0.0 and earlier Description: The issue is related to a Path Traversal vulnerability, specifically '.../...//' in Softpulse Infotech SP Blog Designer, allowing PHP Local File Inclusion...

PT-2024-17170 · Code Projects · Code-Projects Farmacia

Name of the Vulnerable Software and Affected Versions: code-projects Farmacia version 1.0 Description: A vulnerability was found in the file usuario.php, where the manipulation of the name argument leads to cross-site scripting. It is possible to initiate the attack remotely. Other parameters mig...

PT-2024-27749 · Gladinet · Gladinet Centrestack

Name of the Vulnerable Software and Affected Versions: Gladinet CentreStack version 13.12.9934.54690 Description: The issue allows attackers to access sensitive data or execute arbitrary commands via a crafted payload injected into the username field in the login page. Recommendations: For Gladin...