PT-2025-15245 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the changeStatus method. Recommendations: For RUoYi version 4.8.0, consider disabling the changeStatus method until a patch is available...

PT-2025-15134

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 5.0.2 Description The issue allows a local attacker to cause a denial of service DOS through an out-of-bounds write. Recommendations For versions prior to 5.0.2, update to a version that contains a fix for this...

PT-2025-29001

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue was identified in the mt7996 thermal init function within the mt7996 driver of the Linux kernel. The devm kasprintf function can return a NULL pointer ...

PT-2025-15231

Name of the Vulnerable Software and Affected Versions WildFly affected versions not specified JBoss Enterprise Application Platform EAP affected versions not specified Description A security flaw exists within the Enterprise JavaBeans EJB remote invocation mechanism, stemming from untrusted data...

PT-2025-15208

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A transient Denial of Service DOS may occur while parsing extended Information Elements IE in a beacon. Recommendations At the moment, there is no information about a newer version that contai...

PT-2025-15305 · Unknown · Linzhaoguan Pb-Cms

Name of the Vulnerable Software and Affected Versions: LinZhaoguan pb-cms version 2.0 Description: A vulnerability was found in the file /adminlinks of the component Friendship Link Handler, leading to cross-site scripting. The attack may be launched remotely. The exploit has been disclosed to th...

PT-2025-15240 · Unknown · Tarteaucitron.Js

Name of the Vulnerable Software and Affected Versions: tarteaucitron.js versions prior to 1.20.1 Description: A vulnerability was identified in tarteaucitron.js, allowing a user with high privileges to enter a URL containing an insecure scheme, such as javascript:alert. Insufficient URL validatio...

PT-2025-18032 · Totolink · Totolink N150Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A vulnerability was found in the LAN Settings Page component, specifically in the /boafrm/fromStaticDHCP file. The manipulation of the Hostname argument leads to cross-site scripting. The...

PT-2025-15127 · Iteaj · Iteaj Iboot

Name of the Vulnerable Software and Affected Versions: iteaj iboot 物联网网关 version 1.1.3 Description: A vulnerability has been found in the File Upload component, specifically affecting the /common/upload file. The manipulation of the File argument leads to cross-site scripting. The attack can be...

PT-2025-15113 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical issue affects the processing of the file /admin/reservation update.php. The manipulation of the ID argument leads to SQL injection. The attack may be initiat...

PT-2025-18031 · Totolink · Totolink N150Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A problematic issue has been found, affecting an unknown function of the file /home.htm of the IP Port Filtering component. The manipulation of the Comment argument leads to cross-site...

PT-2025-15111 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical vulnerability was found in codeprojects Online Restaurant Management System. This affects an unknown part of the file /admin/reservation view.php. The...

PT-2025-15051 · WordPress · Email Notifications For Updates

Name of the Vulnerable Software and Affected Versions: Email Notifications for Updates plugin for WordPress versions up to, and including, 1.1.6 Description: The issue allows unauthorized modification of data, potentially leading to privilege escalation, due to a missing capability check on the...

PT-2025-15116 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: A critical issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument pptp server start ip/pptp server end ip leads to buffer overflow. The...

PT-2025-15068

Name of the Vulnerable Software and Affected Versions Net::Xero versions 0.044 and earlier Description The issue concerns the use of the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically, Net::Xero uses the Data::Rando...

PT-2025-15052 · Zendto · Zendto

Name of the Vulnerable Software and Affected Versions: ZendTo versions 5.24-3 through 6.x before 6.10-7 Description: An OS command injection issue in lib/NSSDropoff.php allows unauthenticated remote attackers to execute arbitrary commands via shell metacharacters in the tmp name parameter when...

PT-2025-15074 · Code Projects · Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue has been found in the Patient Record Management System, affecting some unknown functionality of the file /birthing record.php. The manipulation of the it...

PT-2025-14885 · Unknown · Sourcecodester Library Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Library Management System version 1.0 Description: A critical issue was found in the Search function of the file library management/src/Library Management/Forgot.java. The manipulation of the txtuname argument leads to sql...

PT-2025-14870 · Unknown · Phpgurukul Old Age Home Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Old Age Home Management System version 1.0 Description: A critical issue affects an unknown part of the file /admin/profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to initiate the atta...

PT-2025-14942 · Unknown · Just Post Preview Widget

Name of the Vulnerable Software and Affected Versions: Just Post Preview Widget versions 1.1.1 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' or PHP Local File Inclusion. This...