PT-2025-22049 · Checkbot · Checkbot

Name of the Vulnerable Software and Affected Versions: CheckBot versions 1.05 and earlier Description: A Cross-Site Request Forgery CSRF issue in Ref CheckBot allows for Stored XSS. This means an attacker can execute malicious scripts on the victim's browser, potentially leading to unauthorized...

PT-2025-22103 · Mojoomla · Mojoomla Hospital Management System

Name of the Vulnerable Software and Affected Versions: mojoomla Hospital Management System versions n/a through 47.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-21933 · Hugging Face · Transformers

Name of the Vulnerable Software and Affected Versions: huggingface/transformers version v4.48.3 Description: A vulnerability in the preprocess string function of the transformers.testing utils module allows for a Regular Expression Denial of Service ReDoS attack. The regular expression used to...

PT-2025-21844 · Unknown · Phpgurukul News Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul News Portal version 4.1 Description: A critical issue has been found in the Login component of the affected software, specifically in the file /admin/index.php. The manipulation of the Username argument leads to SQL injection. This...

PT-2025-21861 · Unknown · Coinexchange Cryptoexchange Java

Name of the Vulnerable Software and Affected Versions: CoinExchange CryptoExchange Java up to 8adf508b996020d3efbeeb2473d7235bd01436fa Description: A critical vulnerability has been found in CoinExchange CryptoExchange Java, affecting the uploadLocalImage function of the File Upload Endpoint. The...

PT-2025-21848 · Unknown · Sourcecodester Restaurant Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Restaurant Management System version 1.0 Description: A critical issue was found in the iSourcecode Restaurant Management System, affecting an unknown functionality of the file /admin/user save.php. The manipulation of the...

PT-2025-21847 · Unknown · Phpgurukul News Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul News Portal version 4.1 Description: A critical issue has been discovered, affecting an unknown functionality of the file /admin/aboutus.php. The manipulation of the pagetitle argument leads to SQL injection. This issue can be...

PT-2025-21867 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue affects the processing of the file /pages/transaction update.php in Campcodes Sales and Inventory System. The manipulation of the ID argument leads to SQL injectio...

PT-2025-21768 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /pages/supplier add.php. The manipulation of the Name argument leads to SQL injection...

PT-2025-21796 · Totolink · Totolink A702R +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R, A3002R, and A3002RU version 3.0.0-B20230809.1615 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically affecting an unknown functionality of the file /boafrm/formSysCmd. The...

PT-2025-21805 · Totolink · Totolink A702R +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 3.0.0-B20230809.1615 TOTOLINK A3002R version 3.0.0-B20230809.1615 TOTOLINK A3002RU version 3.0.0-B20230809.1615 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically...

PT-2025-21816 · D Link · D-Link Dcs-932L

Name of the Vulnerable Software and Affected Versions: D-Link DCS-932L version 2.18.01 Description: A critical issue affects the function SubUPnPCSInit of the file /sbin/udev. The manipulation of the argument CameraName leads to a stack-based buffer overflow. It is possible to initiate the attack...

PT-2025-21814 · D Link · D-Link Dcs-932L

Name of the Vulnerable Software and Affected Versions: D-Link DCS-932L version 2.18.01 Description: A critical issue affects the function sub 404780 of the file /bin/gpio. The manipulation of the argument CameraName leads to a stack-based buffer overflow. The attack may be launched remotely. The...

PT-2025-21807 · Unknown · Project Worlds Student Project Allocation System

Name of the Vulnerable Software and Affected Versions: projectworlds Student Project Allocation System version 1.0 Description: A critical vulnerability has been found in the projectworlds Student Project Allocation System. This issue affects the file /make group sql.php and is related to SQL...

PT-2025-21776

Name of the Vulnerable Software and Affected Versions: Crawlomatic Multipage Scraper Post Generator plugin for WordPress versions up to, and including, 2.6.8.1 Description: The issue is related to arbitrary file uploads due to missing file type validation in the crawlomatic generate featured imag...

PT-2025-21775 · WordPress · Wpbot Pro

Name of the Vulnerable Software and Affected Versions: WPBot Pro Wordpress Chatbot plugin versions up to, and including, 13.6.2 Description: The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the qcld openai...

PT-2025-21803 · Unknown · Cocotais Bot

Name of the Vulnerable Software and Affected Versions: Cocotais Bot versions 1.5.0-test2-hotfix through 1.6.2 Description: The issue allows unauthorized users to indirectly trigger privileged behavior by injecting special platform tags, potentially leading to spam, disruption, or abuse of...

Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK

Overview Session cookies of applications using the Auth0-PHP SDK configured with CookieStore have authentication tags that can be brute forced, which may result in unauthorized access. Am I Affected? You are affected by this vulnerability if you meet the following pre-conditions: 1. Applications...

PT-2025-21732 · Aptivada · Aptivada

Name of the Vulnerable Software and Affected Versions: Aptivada for WP versions n/a through 2.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker could...

PT-2025-21596 · Unknown · Projectworlds Hospital Database Management System

Name of the Vulnerable Software and Affected Versions: projectworlds Hospital Database Management System version 1.0 Description: A critical issue was found in the projectworlds Hospital Database Management System. This issue affects an unknown part of the file /medicines info.php. The manipulati...