PT-2025-22080 · Highwarden · Highwarden Super Store Finder

Name of the Vulnerable Software and Affected Versions: highwarden Super Store Finder versions n/a through 7.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2025-1575)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-21833 · Unknown · Phpgurukul Directory Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Directory Management System version 2.0 Description: A problematic issue has been found in the PHPGurukul Directory Management System, affecting some unknown functionality of the file /searchdata.php. The manipulation of the...

PT-2025-21857 · Unknown · Code-Projects Courier Management System

Name of the Vulnerable Software and Affected Versions: code-projects Tourism Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Tourism Management System. This issue affects the AddUser function of the User Registration component. The...

PT-2025-21836 · Unknown · Sourcecodester Restaurant Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Restaurant Management System version 1.0 Description: A critical issue affects the processing of the file "/admin/member save.php". The manipulation of the last argument leads to SQL injection. The attack may be initiated remotel...

PT-2025-21854 · Unknown · Itsourcecode Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: iSourcecode Sales and Inventory System version 1.0 Description: A critical vulnerability was found in the iSourcecode Sales and Inventory System, affecting an unknown functionality of the file /pages/product update.php. The manipulation of th...

PT-2025-21820 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical vulnerability has been found in the TRACE Command Handler component of FreeFloat FTP Server, leading to a buffer overflow. The attack can be launched remotely, and the exploit has been...

PT-2025-21823 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue affects the RECV Command Handler component, leading to a buffer overflow. This can be exploited remotely. The issue has been publicly disclosed. Recommendations: For FreeFloat FTP...

PT-2025-21838 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A vulnerability was found in the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been...

PT-2025-21871 · D Link · D-Link Di-7003Gv2

Name of the Vulnerable Software and Affected Versions: D-Link DI-7003GV2 version 24.04.18D1 R68125 Description: A critical issue was found, affecting the function sub 41F4F0 of the file "/H5/webgl.asp?tggl port=0&remote management=0&http passwd=game&exec service=admin-restart". This leads to an...

GHSA-9WG9-93H9-J8CH Auth0 Symfony SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions

Overview Session cookies of applications using the Auth0 symfony SDK configured with CookieStore have authentication tags that can be brute forced, which may result in unauthorized access. Am I Affected? You are affected by this vulnerability if you meet the following pre-conditions: 1...

PT-2025-21769 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /pages/supplier update.php. The manipulation of the Name argument leads to SQL injection...

PT-2025-21780 · WordPress · Csv Mass Importer

Name of the Vulnerable Software and Affected Versions: CSV Mass Importer WordPress plugin versions 1.2 and earlier Description: The issue concerns the CSV Mass Importer WordPress plugin, which does not properly validate uploaded files. This allows high-privilege users, such as administrators, to...

PT-2025-21812 · Unknown · Kanwangzjm Funiture

Name of the Vulnerable Software and Affected Versions: kanwangzjm Funiture versions up to 71ca0fb0658b3d839d9e049ac36429207f05329b Description: A problematic issue was found in the doPost function of the LoginServlet.java file, affecting the Login component. The manipulation of the ret argument...

PT-2025-21802 · Donetick · Donetick

Name of the Vulnerable Software and Affected Versions: Donetick versions prior to 0.1.44 Description: The issue concerns the use of JSON Web Tokens JWT for authentication in Donetick, an open-source task management application. Prior to version 0.1.44, the application uses a weak default signing...

PT-2025-21786 · WordPress · Wise Chat

Name of the Vulnerable Software and Affected Versions: Wise Chat plugin for WordPress versions prior to 3.3.4 Description: The issue allows unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory, which can contain file attachments included in ch...

PT-2025-21771 · Unknown · Audio Comments Plugin

Name of the Vulnerable Software and Affected Versions: Audio Comments Plugin versions up to, and including, 1.0.4 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'audio-comments/audior-settings.php' page. This allows...

PT-2025-21811

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 138.0.4 Firefox ESR versions prior to 128.10.1 Description: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. Recommendations: For Firefox versions...

PT-2025-21777

Name of the Vulnerable Software and Affected Versions: The Echo RSS Feed Post Generator plugin for WordPress versions up to, and including, 5.4.8.1 Description: The issue is related to arbitrary file uploads due to missing file type validation in the echo generate featured image function. This...

PT-2025-21864 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 16.03.10.13 Description: A critical issue affects an unknown functionality of the file /goform/UserCongratulationsExec. The manipulation of the getuid argument leads to a buffer overflow. This issue can be exploited remotel...