PT-2025-22068

Name of the Vulnerable Software and Affected Versions: Multer versions prior to 2.0.0 Description: The issue is related to improper stream handling in Multer, a node.js middleware for handling multipart/form-data. This leads to a resource exhaustion and memory leak issue when the HTTP request...

PT-2025-22076 · Mojoomla · Wpams

Name of the Vulnerable Software and Affected Versions: WPAMS versions prior to 44.0 Description: The issue affects the mojoomla WPAMS, allowing PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion'...

PT-2025-22104 · Unknown · Analyticswp

Name of the Vulnerable Software and Affected Versions: AnalyticsWP versions n/a through 2.1.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

PT-2025-22061 · Unknown · Binti76 Total Donations

Name of the Vulnerable Software and Affected Versions: binti76 Total Donations versions 3.0.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers ...

PT-2025-22021 · Unknown · Themes4Wp Bulk

Name of the Vulnerable Software and Affected Versions: Themes4WP Bulk versions 1.0.11 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 1.0.11 and earlier,...

PT-2025-22039 · Unknown · Charly Leetham Enhanced Paypal Shortcodes

Name of the Vulnerable Software and Affected Versions: Charly Leetham Enhanced Paypal Shortcodes versions 0.5a and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-22029 · WordPress · Sanjeev Mohindra Author Box Plugin With Different Description

Name of the Vulnerable Software and Affected Versions: Sanjeev Mohindra Author Box Plugin With Different Description versions 1.3.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For Sanjeev Mohindra...

PT-2025-22034 · Unknown · Analyticswp

Name of the Vulnerable Software and Affected Versions: AnalyticsWP versions 2.0.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For AnalyticsWP versions 2.0.0 and...

PT-2025-21988 · Falang · Falang

Name of the Vulnerable Software and Affected Versions: Falang multilanguage versions 1.3.61 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 1.3.61 and earlier,...

PT-2025-21992 · 10Web · 10Web Form Maker

Name of the Vulnerable Software and Affected Versions: 10Web Form Maker by 10Web versions 1.15.33 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2025-1575)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-21823 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue affects the RECV Command Handler component, leading to a buffer overflow. This can be exploited remotely. The issue has been publicly disclosed. Recommendations: For FreeFloat FTP...

PT-2025-21836 · Unknown · Sourcecodester Restaurant Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Restaurant Management System version 1.0 Description: A critical issue affects the processing of the file "/admin/member save.php". The manipulation of the last argument leads to SQL injection. The attack may be initiated remotel...

PT-2025-21838 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A vulnerability was found in the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been...

PT-2025-21820 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical vulnerability has been found in the TRACE Command Handler component of FreeFloat FTP Server, leading to a buffer overflow. The attack can be launched remotely, and the exploit has been...

PT-2025-21871 · D Link · D-Link Di-7003Gv2

Name of the Vulnerable Software and Affected Versions: D-Link DI-7003GV2 version 24.04.18D1 R68125 Description: A critical issue was found, affecting the function sub 41F4F0 of the file "/H5/webgl.asp?tggl port=0&remote management=0&http passwd=game&exec service=admin-restart". This leads to an...

PT-2025-21833 · Unknown · Phpgurukul Directory Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Directory Management System version 2.0 Description: A problematic issue has been found in the PHPGurukul Directory Management System, affecting some unknown functionality of the file /searchdata.php. The manipulation of the...

PT-2025-21854 · Unknown · Itsourcecode Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: iSourcecode Sales and Inventory System version 1.0 Description: A critical vulnerability was found in the iSourcecode Sales and Inventory System, affecting an unknown functionality of the file /pages/product update.php. The manipulation of th...

PT-2025-21857 · Unknown · Code-Projects Courier Management System

Name of the Vulnerable Software and Affected Versions: code-projects Tourism Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Tourism Management System. This issue affects the AddUser function of the User Registration component. The...

GHSA-9WG9-93H9-J8CH Auth0 Symfony SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions

Overview Session cookies of applications using the Auth0 symfony SDK configured with CookieStore have authentication tags that can be brute forced, which may result in unauthorized access. Am I Affected? You are affected by this vulnerability if you meet the following pre-conditions: 1...