PT-2025-24299 · Synology · File Station

Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4847 Description: A NULL pointer dereference issue allows a remote attacker with a user account to launch a denial-of-service DoS attack. Recommendations: For versions prior to 5.5.6.4847, update to...

PT-2025-24306 · Synology · File Station

Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4847 Description: An improper certificate validation issue has been reported, allowing a remote attacker with a user account to compromise the system's security. Recommendations: For versions prior to...

PT-2025-24201 · Unknown · Everest Backup

Name of the Vulnerable Software and Affected Versions: Everest Backup versions n/a through 2.3.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions n/a through 2.3.3, update to a version later than 2.3....

PT-2025-24036 · WordPress · Wp Knowledgebase

Name of the Vulnerable Software and Affected Versions: Knowledge Base plugin for WordPress versions prior to 2.3.0 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the kbalert shortcode. This allows authenticated attackers with...

PT-2025-24157 · WordPress · Wp Biographia

Name of the Vulnerable Software and Affected Versions: WP Biographia versions prior to 4.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-24198 · Unknown · Rtmkit Addons For Elementor

Name of the Vulnerable Software and Affected Versions: RTMKit Addons for Elementor versions 1.6.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

PT-2025-24011 · Unknown · Sourcecodester Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Result Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Student Result Management System, classified as problematic. This issue affects unknown code of the file...

PT-2025-24033 · WordPress · Hive Support

Name of the Vulnerable Software and Affected Versions: Hive Support plugin for WordPress affected versions not specified Description: The issue concerns unauthorized access and modification of data due to a missing capability check. This allows for an authentication bypass, enabling unauthorized...

PT-2025-24162 · Unknown · Nickduncan Contact Form

Name of the Vulnerable Software and Affected Versions: NickDuncan Contact Form versions n/a through 2.0.12 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker...

PT-2025-24177 · Unknown · Booqable Rental

Name of the Vulnerable Software and Affected Versions: Booqable Rental versions through 2.4.20 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the user into...

PT-2025-24054 · Apache · Apache

Name of the Vulnerable Software and Affected Versions: Apache versions prior to the fixed version Description: A missing protection against path traversal allows access to any file on the server. This issue affects the Apache software, allowing unauthorized access to files. Recommendations: For...

PT-2025-24189

Name of the Vulnerable Software and Affected Versions ThemeHunk versions 1.1.1 and earlier Description The issue is related to missing authorization, allowing exploitation of incorrectly configured access control security levels. Recommendations For ThemeHunk versions 1.1.1 and earlier, update to...

PT-2025-24148 · Unknown · Elegant Visitor Counter

Name of the Vulnerable Software and Affected Versions: Elegant Visitor Counter versions n/a through 3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-24146 · Wordlift · Wordlift

Name of the Vulnerable Software and Affected Versions: WordLift versions 3.54.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For WordLift versions 3.54.4 and...

PT-2025-24325 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.09 Description: A critical issue has been found, affecting the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument timeType leads to a stack-based buffer overflow. This issue...

PT-2025-24279 · Unknown · Code-Projects Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /birthing.php. The manipulation of the itr no and comp id arguments leads to SQL...

PT-2025-24292 · Qnap · Qnap Quts Hero +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.2.4.3079 build 20250321 QNAP QuTS hero versions prior to h5.2.4.3079 build 20250321 Description: A command injection issue has been reported, affecting several QNAP operating system versions. This could allow remo...

PT-2025-24293 · Qnap · Qsync Central

Name of the Vulnerable Software and Affected Versions: Qsync Central versions prior to 4.5.0.6 Description: A use of externally-controlled format string vulnerability has been reported. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data ...

PT-2025-24300 · Synology · File Station

Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4847 Description: A NULL pointer dereference issue allows a remote attacker with a user account to launch a denial-of-service DoS attack. Recommendations: For versions prior to 5.5.6.4847, update to...

PT-2025-24308 · Synology · File Station

Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4847 Description: A path traversal issue has been reported, allowing a remote attacker with a user account to read the contents of unexpected files or system data. Recommendations: For versions prior to...