PT-2025-26410 · Unknown · Anon::Form

Name of the Vulnerable Software and Affected Versions: ANON::form embedded secure form versions 1.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS in the ANON::form...

PT-2025-26290 · WordPress · Euro Fxref Currency Converter

Name of the Vulnerable Software and Affected Versions: Euro FxRef Currency Converter plugin for WordPress versions up to, and including, 2.0.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's currency shortcode due to insufficient input sanitization and output...

PT-2025-26344 · Unknown · Wanotifier

Name of the Vulnerable Software and Affected Versions: WANotifier versions through 2.7.7 Description: The issue is related to a Missing Authorization vulnerability in WANotifier, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions...

PT-2025-26277 · Unknown · Phpgurukul Emergency Ambulance Hiring Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description: A critical issue was found in the PHPGurukul Emergency Ambulance Hiring Portal. The manipulation of the ambregnum argument in the /admin/add-ambulance.php file leads to SQL...

PT-2025-26411 · Unknown · Virtual Moderator

Name of the Vulnerable Software and Affected Versions: Adnan Haque a11n Virtual Moderator versions 1.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Cross-Site Scripting XSS. This means an attacker could potentially trick a user into...

PT-2025-26403 · Unknown · Firelight Lightbox

Name of the Vulnerable Software and Affected Versions: Firelight Lightbox versions through 2.3.16 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This means an attacker can inject malicious scripts into the...

PT-2025-26354 · Unknown · Thanhtungtnt Video List Manager

Name of the Vulnerable Software and Affected Versions: thanhtungtnt Video List Manager versions 1.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For thanhtungtnt Vide...

PT-2025-26504 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 Description: The issue allows an authenticated user to delete another user's comments due to improper ownership management. Recommendations: For versions 11.7.0.0 through...

PT-2025-26396 · Woocommerce · Related Products Manager For Woocommerce

Name of the Vulnerable Software and Affected Versions: Related Products Manager for WooCommerce versions 1.6.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means...

PT-2025-26343 · Jobwp · Jobwp

Name of the Vulnerable Software and Affected Versions: JobWP versions n/a through 2.4.0 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions n/a through 2.4.0, update to a versio...

PT-2025-26336 · Oganro · Oganro Xml Travel Portal Widget

Name of the Vulnerable Software and Affected Versions: Oganro XML Travel Portal Widget versions n/a through 2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. Recommendations: For Oganro XML Travel Portal Widget versions n/a throu...

PT-2025-26350 · WordPress · Wp Customer Area

Name of the Vulnerable Software and Affected Versions: WP Customer Area versions 8.2.5 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For WP Customer Area...

PT-2025-26442 · Itsourcecode · Itsourcecode Employee Record Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Record Management System version 1.0 Description: A critical issue affects the processing of the file /editprofile.php. The manipulation of the emp1name argument leads to SQL injection. The attack may be initiated...

PT-2025-26445 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical vulnerability has been found in the code-projects Online Shoe Store. The issue affects an unknown functionality of the file /function/customer signup.php. The manipulation of...

PT-2025-26472 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical issue affects the function formSetEmail of the file /goform/formSetEmail. The manipulation of the argument curTime/config.smtp email subject leads to stack-based buffer overflow. The...

PT-2025-26275 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue affects the processing of the file /function/edit customer.php, where the manipulation of the firstname argument leads to SQL injection. The attack can be initiated...

CVE-2025-6283

A vulnerability was found in xataio Xata Agent up to 0.3.0. It has been classified as problematic. This affects the function GET of the file apps/dbagent/src/app/api/evals/route.ts. The manipulation of the argument passed leads to path traversal. Upgrading to version 0.3.1 is able to address this...

CVE-2025-6283

The CVE-2025-6283 entry concerns xataio Xata Agent up to version 0.3.0. A path traversal flaw in the GET handler of apps/dbagent/src/app/api/evals/route.ts arises from argument manipulation. Upgrading to version 0.3.1 mitigates the issue; the patch is named 03f27055e0cf5d4fa7e874d34ce8c74c7b9086c...

CVE-2025-6283 xataio Xata Agent route.ts GET path traversal

A vulnerability was found in xataio Xata Agent up to 0.3.0. It has been classified as problematic. This affects the function GET of the file apps/dbagent/src/app/api/evals/route.ts. The manipulation of the argument passed leads to path traversal. Upgrading to version 0.3.1 is able to address this...

CVE-2025-32896

Summary Unauthorized users can perform Arbitrary File Read and Deserialization attack by submit job using restful api-v1. Details Unauthorized users can access /hazelcast/rest/maps/submit-job to submit job. An attacker can set extra params in mysql url to perform Arbitrary File Read and...