PT-2025-18385 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server versions up to 2.0.7 Description: A critical vulnerability was found in the ASCII Command Handler component of PCMan FTP Server, leading to a buffer overflow. The attack can be initiated remotely, and the exploit has been...

PT-2025-17215 · Unknown · Commercify

Name of the Vulnerable Software and Affected Versions: Commercify version 1.0 Description: A CSRF issue allows remote attackers to perform unauthorized actions on behalf of authenticated users due to missing CSRF protection on sensitive endpoints. Recommendations: For Commercify version 1.0,...

PT-2025-17487 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions 9.1.0 through 9.1.1d6 Description: The issue allows a local user with admin privilege to potentially execute arbitrary code with full root privileges on Brocade Fabric OS. This is a local privilege escalation...

PT-2025-16960 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.2.0 through 7.4.3.129 Liferay DXP versions 2024.Q4.1 through 2024.Q4.7 Liferay DXP versions 2024.Q3.1 through 2024.Q3.9 Liferay DXP versions 2024.Q2.0 through 2024.Q2.13 Liferay DXP versions 2024.Q1.1 through...

PT-2025-17190 · Unknown · Stylemix Cost Calculator Builder

Name of the Vulnerable Software and Affected Versions: Stylemix Cost Calculator Builder versions 3.2.65 and earlier Description: The issue is related to an SQL Injection vulnerability, which allows attackers to inject malicious SQL commands. This is due to the improper neutralization of special...

PT-2025-17062 · Chatlive · Chatlive

Name of the Vulnerable Software and Affected Versions: CHATLIVE versions n/a through 2.0.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

PT-2025-16952 · WordPress · Password Protect

Name of the Vulnerable Software and Affected Versions: Password Protected plugin versions up to, and including, 2.7.7 Description: The issue allows unauthenticated attackers to extract sensitive data, including all protected site content, if the 'Use Transient' setting is enabled. This is possibl...

PT-2025-17139 · Unknown · Bowo Debug Log Manager

Name of the Vulnerable Software and Affected Versions: Bowo Debug Log Manager versions through 2.3.4 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

PT-2025-17127 · Unknown · Web2Application

Name of the Vulnerable Software and Affected Versions: Web2application versions n/a through 5.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS in the Web2application. Recommendation...

PT-2025-17227 · Unknown · Datapatrol Screenshot Watermark

Name of the Vulnerable Software and Affected Versions: DataPatrol Screenshot watermark, printing watermark agent version 3.5.2.0 Description: An issue in the software allows a physically proximate attacker to obtain sensitive information. Recommendations: For version 3.5.2.0, at the moment, there...

PT-2025-18285 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Description: A critical issue was found in the cmd wireless function, where manipulation of the host argument leads to command injection. This issue can be exploited remotely. The vendor was contacted about...

PT-2025-16935 · WordPress · Icegram Express

Name of the Vulnerable Software and Affected Versions: The Icegram Express formerly known as Email Subscribers WordPress plugin versions prior to 5.7.52 Description: The issue concerns the Icegram Express WordPress plugin, which does not properly sanitise and escape some of its settings. This cou...

PT-2025-18967 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical vulnerability was found in the HASH Command Handler component of PCMan FTP Server. The manipulation of this component leads to a buffer overflow. This issue can be exploited remotely, and...

PT-2025-17008 · Unknown · Dashboard Notepads

Name of the Vulnerable Software and Affected Versions: Dashboard Notepads versions 1.2.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in Dashboard Notepads. Recommendations: For versions 1.2.1 and earlier, update to a version that...

PT-2025-17093 · Unknown · Terminal Africa

Name of the Vulnerable Software and Affected Versions: Terminal Africa versions 1.13.17 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means that an attacker can...

PT-2025-16925 · Visicut · Visicut

Name of the Vulnerable Software and Affected Versions: VisiCut version 2.1 Description: The issue is related to insecure deserialization, where VisiCut 2.1 allows stack consumption via an XML document with nested set elements. This can be demonstrated by a java.util.HashMap StackOverflowError whe...

PT-2025-17132 · Wooms · Wooms

Name of the Vulnerable Software and Affected Versions: aiiddqd WooMS versions through 9.12 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means an attacker can inject maliciou...

PT-2025-16997 · Mlanguage · Mlanguage

Name of the Vulnerable Software and Affected Versions: mLanguage versions 1.6.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also...

PT-2025-17164 · Unknown · Webbytemplate Office Locator

Name of the Vulnerable Software and Affected Versions: WebbyTemplate Office Locator versions 1.3.0 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-17144

Name of the Vulnerable Software and Affected Versions JoomSky JS Job Manager versions n/a through 2.0.2 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...