PT-2025-23012 · Phpgurukul · Phpgurukul Company Visitor Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Company Visitor Management System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Company Visitor Management System. The issue is related to an unknown function of the file /bwdates-reports-details.php...

PT-2025-23484 · Ibm · Ibm Cognos Analytics

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics versions 11.2.0 through 12.0.4 Description: The issue allows source code stored on the web server to potentially aid in further attacks against the system. Recommendations: For versions 11.2.0 through 12.0.4, consider...

PT-2025-22990

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 139 Firefox ESR versions prior to 115.24 Firefox ESR versions prior to 128.11 Description The issue arises from insufficient escaping of the ampersand character in the "Copy as cURL" feature. This could allow an...

PT-2025-23633 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002RU version 2.1.1-B20230720.1011 Description: A vulnerability was found in the NAT Mapping Page component of the affected software. The issue is related to the manipulation of the Comment argument, which leads to cross-site...

PT-2025-22939 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue has been found in the PHPGurukul Employee Record Management System. This issue affects the file /loginerms.php and is related to SQL injection. The...

PT-2025-23637 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002RU version 2.1.1-B20230720.1011 Description: A vulnerability was found in the MAC Filtering Page component of the affected software. The issue arises from the manipulation of the Comment argument, leading to cross-site scripting...

PT-2025-22912 · Llisoft · Llisoft Mta Maita Training System

Name of the Vulnerable Software and Affected Versions: llisoft MTA Maita Training System version 4.5 Description: A critical vulnerability was found in the llisoft MTA Maita Training System, affecting the AdminShitiListRequestVo function of the file...

PT-2025-22897 · Tcman Gim · Tcman Gim

Name of the Vulnerable Software and Affected Versions: TCMAN GIM version 11 Description: A missing authentication vulnerability in TCMAN GIM version 11 allows an unauthenticated attacker to access resources such as /frmGestionUser.aspx/GetData, /frmGestionUser.aspx/updateUser, and...

PT-2025-22938 · Sourcecodester · Sourcecodester Hospital Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Hospital Management System version 1.0 Description: A critical issue was found in the system, affecting the file /admin/check availability.php. The manipulation of the emailid argument leads to SQL injection. This issue...

PT-2025-22877 · Assimp +1 · Assimp +1

Name of the Vulnerable Software and Affected Versions: Open Asset Import Library Assimp version 5.4.3 Description: A vulnerability was found in the Open Asset Import Library Assimp, affecting the function MDCImporter::ValidateSurfaceHeader of the file assimp/code/AssetLib/MDC/MDCLoader.cpp. The...

PT-2025-23510 · Linksys · Linksys Re9000 +5

Name of the Vulnerable Software and Affected Versions: Linksys RE6500 versions 1.0.013.001 through 1.2.07.001 Linksys RE6250 versions 1.0.013.001 through 1.2.07.001 Linksys RE6300 versions 1.0.013.001 through 1.2.07.001 Linksys RE6350 versions 1.0.013.001 through 1.2.07.001 Linksys RE7000 version...

PT-2025-22864 · Chanjet · Chanjet Crm

Name of the Vulnerable Software and Affected Versions: Chanjet CRM versions up to 20250510 Description: A critical vulnerability was found in Chanjet CRM, affecting the file "/activity/newActivityedit.php" with the gblOrgID argument, leading to SQL injection. The attack can be initiated remotely...

PT-2025-22855 · Unknown · Seeyon Zhiyuan Oa Web Application System

Name of the Vulnerable Software and Affected Versions: Seeyon Zhiyuan OA Web Application System versions up to 8.1 SP2 Description: A critical vulnerability has been found in the Seeyon Zhiyuan OA Web Application System. This issue affects the this.oursNetService.getData function of the...

PT-2025-23517 · Linksys · Linksys Re6300 +5

Name of the Vulnerable Software and Affected Versions: Linksys RE6500 versions 1.0.013.001 through 1.2.07.001 Linksys RE6250 versions 1.0.013.001 through 1.2.07.001 Linksys RE6300 versions 1.0.013.001 through 1.2.07.001 Linksys RE6350 versions 1.0.013.001 through 1.2.07.001 Linksys RE7000 version...

PT-2025-22860 · Wcms · Wcms

Name of the Vulnerable Software and Affected Versions: WCMS versions up to 8.3.11 Description: A critical issue has been found in the Login component, specifically affecting the getMemberByUid function. The manipulation of the uid argument leads to improper authentication, allowing for remote...

PT-2025-22826 · WordPress · Pagelayer

Name of the Vulnerable Software and Affected Versions: The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress versions prior to 2.0.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Button widget due to insufficient input sanitization an...

PT-2025-22829 · Unknown · Process-Sync

Name of the Vulnerable Software and Affected Versions: process-sync crate version 0.2.2 Description: The issue is related to the drop function in the process-sync crate for Rust, which lacks a check to ensure the pthread mutex is unlocked. Recommendations: For process-sync crate version 0.2.2,...

PT-2025-22835 · WordPress · Emagicone Store Manager For Woocommerce

Name of the Vulnerable Software and Affected Versions: eMagicOne Store Manager for WooCommerce plugin for WordPress versions up to, and including, 1.2.5 Description: The issue is related to arbitrary file uploads due to missing file type validation in the set file function. This allows...

PT-2025-27896

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0-rc7-00138-g57483a362741 Description: A use-after-free vulnerability has been identified in the Linux kernel, specifically in the binder devices list. The issue arises when devices are released without bei...

PT-2025-23625 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical vulnerability was found in the TOTOLINK X15, affecting the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the deviceMacAddr argument leads to a...