PT-2025-14941 · Unknown +1 · Beds24 Online Booking +1

Name of the Vulnerable Software and Affected Versions: Beds24 Online Booking versions n/a through 2.0.26 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Loca...

PT-2025-15020 · Unknown · 404 Image Redirection

Name of the Vulnerable Software and Affected Versions: 404 Image Redirection Replace Broken Images versions n/a through 1.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This is a type of attack where an attacker tricks a user in...

PT-2025-14911 · Unknown · Libro De Reclamaciones Y Quejas

Name of the Vulnerable Software and Affected Versions: Libro de Reclamaciones y Quejas versions 0.9 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions 0.9 and earlier, consider implementing...

PT-2025-14854 · WordPress · Mapsvg Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Maps WordPress plugin versions 1.0.0 through 1.0.6 Description: The issue concerns the Maps WordPress plugin, which does not properly validate and escape some of its shortcode attributes before outputting them in a page or post. This could...

PT-2025-14875 · Bitdefender · Bitdefender Gravityzone Update Server

Name of the Vulnerable Software and Affected Versions: Bitdefender GravityZone Update Server affected versions not specified Description: A server-side request forgery SSRF issue exists in the Bitdefender GravityZone Update Server when operating in Relay Mode. The HTTP proxy component on port 707...

PT-2025-14968 · Elementor · Turbo Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Turbo Addons for Elementor versions 1.7.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacke...

PT-2025-14861 · WordPress · Woffice Core

Name of the Vulnerable Software and Affected Versions: Woffice Core plugin for WordPress versions up to, and including, 5.4.21 Description: The issue is related to arbitrary file uploads due to missing file type validation in the saveFeaturedImage function. This allows authenticated attackers, wi...

PT-2025-14885 · Unknown · Sourcecodester Library Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Library Management System version 1.0 Description: A critical issue was found in the Search function of the file library management/src/Library Management/Forgot.java. The manipulation of the txtuname argument leads to sql...

PT-2025-14879 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical vulnerability was found in the PHPGurukul Online Fire Reporting System. The issue affects an unknown functionality of the file /admin/edit-guard-detail.php. The...

PT-2025-15038 · Tenda · Tenda Rx3

Name of the Vulnerable Software and Affected Versions: Tenda RX3 version 16.03.13.11 Description: A critical issue has been found, affecting the formSetDeviceName function of the file /goform/SetOnlineDevName. The manipulation of the devName argument leads to a stack-based buffer overflow. This...

PT-2025-14870 · Unknown · Phpgurukul Old Age Home Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Old Age Home Management System version 1.0 Description: A critical issue affects an unknown part of the file /admin/profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to initiate the atta...

PT-2025-14884 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Web-based Pharmacy Product Management System. The issue affects an unknown functionality of the file...

DoS (Denial of Service) io.netty:netty-handler Dependency in Confluence Data Center and Server

This High severity io.netty:netty-handler Dependency vulnerability was introduced in versions 7.19 of Confluence Data Center and Server. This io.netty:netty-handler Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

PT-2025-14639 · Os4Ed · Os4Ed Opensis

Name of the Vulnerable Software and Affected Versions: OS4ED openSIS versions 7.0 through 9.1 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the groupid parameter at the "/messaging/Group.php" endpoint. Recommendations: For OS4ED openSI...

PT-2025-14737 · Woocommerce · Plugin Devs Shopify To Woocommerce Migration

Name of the Vulnerable Software and Affected Versions: Plugin Devs Shopify to WooCommerce Migration versions 1.3.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations...

PT-2025-14793 · Netwrix · Netwrix Password Secure

Name of the Vulnerable Software and Affected Versions: Netwrix Password Secure version 9.2.0.32454 Description: The issue allows OS command injection and authenticated remote code execution. This means an attacker can execute system commands and run code on other users' systems. The vulnerability...

PT-2025-14608 · WordPress · Luckywp Table Of Contents

Name of the Vulnerable Software and Affected Versions: LuckyWP Table of Contents plugin for WordPress versions up to, and including, 2.1.10 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the ajaxEdit function. This allows...

PT-2025-14703 · Unknown · Notfound Include-File

Name of the Vulnerable Software and Affected Versions: NotFound include-file versions n/a through 1 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability, in the NotFound include-file. This vulnerability...

PT-2025-14575 · Unknown · Phpgurukul Online Security Guards Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Security Guards Hiring System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Online Security Guards Hiring System. The issue affects an unknown functionality of the file...

PT-2025-14786

Name of the Vulnerable Software and Affected Versions Vite versions 6.0.0 through 6.0.13 Vite versions 6.1.0 through 6.1.3 Vite versions 6.2.0 through 6.2.4 Vite version 4.5.11 and earlier Vite version 5.4.16 and earlier Description The issue allows the contents of arbitrary files to be returned ...