PT-2025-18341 · NetGear · Netgear Ex6200

Name of the Vulnerable Software and Affected Versions: Netgear EX6200 version 1.0.3.94 Description: A critical vulnerability has been found, affecting the function sub 3C8EC. The manipulation of the argument host leads to a buffer overflow. This issue can be initiated remotely. The vendor was...

PT-2025-17079 · D Link · Dir 832

Name of the Vulnerable Software and Affected Versions: dlink DIR 832x version 240802 Description: The issue allows a remote attacker to execute arbitrary code via the function 0x417234. Recommendations: For dlink DIR 832x version 240802, as a temporary workaround, consider disabling the function...

PT-2025-16971 · Unknown · Rachanas Sponsered Link

Name of the Vulnerable Software and Affected Versions: rachanaS Sponsered Link versions n/a through 4.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in rachanaS Sponsered Link...

PT-2025-18379 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server versions up to 2.0.7 Description: A critical vulnerability has been found in PCMan FTP Server, affecting an unknown part of the VERBOSE Command Handler component. The manipulation of this vulnerability leads to a buffer...

PT-2025-16966 · Think201 · Think201 Data Dash

Name of the Vulnerable Software and Affected Versions: Think201 Data Dash versions 1.2.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can injec...

PT-2025-17004 · Unknown · Anthologize

Name of the Vulnerable Software and Affected Versions: Anthologize versions 0.8.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For Anthologize versions 0.8.3 an...

PT-2025-17169 · WordPress · Wp Speedo Team Members

Name of the Vulnerable Software and Affected Versions: WP Speedo Team Members versions 3.4.0 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For WP Speedo Team Members versions 3.4.0 and earlier, update to a versi...

PT-2025-17168 · Unknown · Mapsvg Lite

Name of the Vulnerable Software and Affected Versions: MapSVG Lite versions prior to 8.5.35 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can lead to further exploitation and potential...

PT-2025-17186 · Unknown · Taskbuilder

Name of the Vulnerable Software and Affected Versions: Taskbuilder versions prior to 4.0.1 Description: The issue is related to improper neutralization of special elements used in an SQL command, which allows Blind SQL Injection. This means that an attacker can inject malicious SQL code into the...

PT-2025-17053 · Unknown · Saoshyant Slider

Name of the Vulnerable Software and Affected Versions: Saoshyant Slider versions n/a through 3.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 3.0, update to a version that fixes the Deserialization...

PT-2025-17001 · Unknown · Scott Taylor Avatar

Name of the Vulnerable Software and Affected Versions: Scott Taylor Avatar versions 0.1.4 and earlier Description: The issue affects the access control security levels in Scott Taylor Avatar, allowing exploitation through incorrectly configured security levels. This is due to an Authorization...

PT-2025-17070 · Woocommerce · 17Track For Woocommerce

Name of the Vulnerable Software and Affected Versions: 17TRACK for WooCommerce versions 1.2.10 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacker can...

PT-2025-17024 · Unknown · Totalcontest Lite

Name of the Vulnerable Software and Affected Versions: TotalContest Lite versions through 2.8.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations: For versions through...

PT-2025-17119 · Unknown · License For Envato

Name of the Vulnerable Software and Affected Versions: License For Envato versions 1.0.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS, which can be exploited by attackers...

PT-2025-17204 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: FOXCMS versions prior to V1.25 Description: The issue allows for SQL Injection via the title parameter in the /admin/util/Field.php file. Recommendations: For versions prior to V1.25, consider restricting access to the title parameter in the...

PT-2025-18267 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Description: A critical issue has been discovered, affecting the check language file function. The manipulation of the host argument leads to a buffer overflow. This issue can be exploited remotely. The...

PT-2025-17166 · Unknown · Mark Parnell Spark Gf Failed Submissions

Name of the Vulnerable Software and Affected Versions: Mark Parnell Spark GF Failed Submissions versions 1.3.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This mea...

PT-2025-17160 · Devrix · Devrix Restrict User Registration

Name of the Vulnerable Software and Affected Versions: DevriX Restrict User Registration versions 1.0.1 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actio...

PT-2025-17159 · Unknown · Cart66 Cloud

Name of the Vulnerable Software and Affected Versions: Cart66 Cloud versions 2.3.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacker can inject...

PT-2025-16973 · Unknown · Crudlab Scroll To Top

Name of the Vulnerable Software and Affected Versions: CRUDLab Scroll to Top versions 1.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in CRUDLab Scroll to Top...