PT-2025-26562 · Unknown · Code-Projects Online Shopping Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shopping Store version 1.0 Description: A critical issue affects an unknown functionality of the file /action.php. The manipulation of the arguments cat id, brand id, keyword, proId, pid leads to SQL injection. The attack...

PT-2025-26553 · Unknown · Sourcecodester Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Result Management System version 1.0 Description: A vulnerability was found in the Manage Students Module, affecting some unknown processing of the file /script/admin/manage students. This issue leads to cross-site...

PT-2025-26851 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical vulnerability was found in the D-Link DIR-619L, affecting the function formAutoDetecWAN wizard4 of the file /goform/formAutoDetecWAN wizard4. The manipulation of the argument curTime lea...

PT-2025-26569 · Marktext · Marktext

Name of the Vulnerable Software and Affected Versions: MarkText versions up to 0.17.1 Description: A vulnerability has been found in MarkText, affecting the function getRecommendTitleFromMarkdownString of the file marktext/src/main/utils/index.js. The manipulation leads to inefficient regular...

PT-2025-26537 · Unknown · Code-Projects Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A critical vulnerability was found in the code-projects Simple Online Hotel Reservation System. This issue affects the file /admin/delete pending.php, where the...

Human-Centred AI in FinTech: Developing a User Experience (UX) Research Point of View (PoV) Playbook

Advancements in Artificial Intelligence AI have significantly transformed the financial industry, enabling the development of more personalized and adaptable financial products and services. This research paper explores various instances where Human-Centred AI HCAI has facilitated these...

PT-2025-26505 · Campcodes · Campcodes Online Teacher Record Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Teacher Record Management System version 1.0 Description: A critical vulnerability was found in the Campcodes Online Teacher Record Management System. The issue affects an unknown functionality of the file...

PT-2025-26529 · Yealink · Yealink Ymcs

Name of the Vulnerable Software and Affected Versions: Yealink YMCS versions prior to 2025-05-26 Description: The issue allows unauthorized access to deactivated interfaces due to the lack of prevention of OpenAPI access by frozen enterprise accounts. Recommendations: For Yealink YMCS versions...

PT-2025-26524 · Unknown · Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A critical vulnerability affects the unknown code of the file /admin/add room.php in the Simple Online Hotel Reservation System. The manipulation of the room type...

PT-2025-26521 · Unknown · Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Simple Online Hotel Reservation System version 1.0 Description: A critical issue was found in the Simple Online Hotel Reservation System, affecting some unknown functionality of the file /admin/edit query account.php. The manipulation of the...

PT-2025-26503 · Ibm · Ibm Process Mining

Name of the Vulnerable Software and Affected Versions: IBM Process Mining versions 2.0.1 through 2.0.1 IF001 Description: The issue allows a remote attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker...

PT-2025-26506 · Campcodes · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /hms/forgot-password.php. The manipulation of the fullname argument leads to...

PT-2025-26508 · Campcodes · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue has been found in the system, affecting the /doctor/search.php file. The manipulation of the searchdata argument leads to SQL injection. This issue can be...

PT-2025-26381 · Truong Thanh · Truong Thanh Atp Call Now

Name of the Vulnerable Software and Affected Versions: Truong Thanh ATP Call Now versions 1.0.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables attackers to inje...

PT-2025-26326 · Unknown · Cloudclassroom-Php Project

Name of the Vulnerable Software and Affected Versions: CloudClassroom-PHP Project version 1.0 Description: A SQL Injection issue was discovered in the askquery.php file. The squeryx parameter accepts unsanitized input, which is passed directly into backend SQL queries. Recommendations: For...

PT-2025-26419 · Unknown · Knowledge Base Maker

Name of the Vulnerable Software and Affected Versions: Knowledge Base – Knowledge Base Maker versions 1.1.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS. This means an attacker can trick a user into performing unintended actions...

PT-2025-26371 · Unknown · Iamapinan Pdpa Consent For Thailand

Name of the Vulnerable Software and Affected Versions: iamapinan PDPA Consent for Thailand versions 1.1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-26327 · Sourcecodester · Sourcecodester My Food Recipe

Name of the Vulnerable Software and Affected Versions: SourceCodester My Food Recipe version 1.0 Description: A vulnerability was found in the function addRecipeModal of the file /endpoint/add-recipe.php of the component Add Recipe Page. The manipulation of the argument Name leads to cross site...

PT-2025-26308 · Unknown · Ponaravindb Hospital Management System

Name of the Vulnerable Software and Affected Versions: ponaravindb Hospital Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /func3.php. The manipulation of the username1 argument leads to SQL injection. The attack may be launched remotely...

PT-2025-26416 · Unknown · Bluff Post

Name of the Vulnerable Software and Affected Versions: Bluff Post versions 1.1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web application,...