PT-2025-23885 · Unknown · Code-Projects/Anirbandutta9 Content Management System +1

Name of the Vulnerable Software and Affected Versions: code-projects/anirbandutta9 Content Management System and News-Buzz version 1.0 Description: A critical issue was found in the Content Management System and News-Buzz. The problem affects an unknown function of the file /publicposts.php...

PT-2025-23842 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical issue affects the formSetIptv function of the file /goform/SetIPTVCfg. The manipulation of the list argument leads to command injection. This issue can be exploited remotely...

PT-2025-23812 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical vulnerability was found in FreeFloat FTP Server, affecting an unknown part of the HOST Command Handler component. The manipulation leads to buffer overflow and can be initiated remotely...

PT-2025-23860 · Unknown · Codeastro Real Estate Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /submitpropertydelete.php. The manipulation of the ID argument leads to SQL...

PT-2025-23858 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical vulnerability has been found in the function formsetreboottimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to a buffer overflow. It is...

PT-2025-23839 · Unknown · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Hospital Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /user-login.php. The manipulation of the Username argument leads to SQL injection. The...

PT-2025-23772 · D Link · D-Link Dcs-932L

Name of the Vulnerable Software and Affected Versions: D-Link DCS-932L version 2.18.01 Description: A critical issue affects the setSystemWizard/setSystemControl function of the file /setSystemWizard. The manipulation of the AdminID argument leads to os command injection. The attack can be launch...

PT-2025-23688 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue was found in the NOOP Command Handler component, affecting an unknown function, which leads to a buffer overflow. This issue can be exploited remotely. The exploit has been...

PT-2025-23776 · Delta Electronics · Cncsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft affected versions not specified Description: The issue is related to a lack of proper validation of user-supplied files in Delta Electronics CNCSoft. If a user opens a malicious file, an attacker can execute code in...

PT-2025-23830 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue affects the PROGRESS Command Handler component, leading to a buffer overflow. This can be exploited remotely. Recommendations: For FreeFloat FTP Server version 1.0, consider...

PT-2025-23739 · Unknown · Phpgurukul Teacher Subject Allocation Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Teacher Subject Allocation Management System version 1.0 Description: A critical issue has been discovered in the unknown code of the file /admin/edit-course.php. The manipulation of the editid argument leads to SQL injection. This...

PT-2025-23732 · Unknown · Billboard.Js

Name of the Vulnerable Software and Affected Versions: billboard.js versions prior to 3.15.1 Description: The issue is related to a prototype pollution via the generate function, which could allow attackers to execute arbitrary code or cause a Denial of Service DoS by injecting arbitrary...

PT-2025-23997 · Ibm · Ibm Verify Identity Access Digital Credentials

Name of the Vulnerable Software and Affected Versions: IBM Verify Identity Access Digital Credentials version 24.06 Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in...

PT-2025-23853 · Freshrss · Freshrss

Name of the Vulnerable Software and Affected Versions: FreshRSS versions prior to 1.26.2 Description: The issue is related to improper HTML sanitization inside the attribute, leading to cross-site scripting XSS by loading an attacker's UserJS inside . To execute the attack, the attacker needs to...

PT-2025-23857 · Auth0 · Auth0 Next.Js Sdk

Name of the Vulnerable Software and Affected Versions: Auth0 Next.js SDK versions 4.0.1 through 4.6.0 Description: The issue concerns the caching of session cookies set by auth0.middleware in CDN environments due to missing Cache-Control headers. Three preconditions must be met for the...

PT-2025-23781 · Unknown · Phpgurukul Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A critical issue has been found in the PHPGurukul Dairy Farm Shop Management System, affecting the processing of the file /bwdate-report-details.php. The manipulation of th...

PT-2025-23841 · Deno · Deno

Name of the Vulnerable Software and Affected Versions: Deno versions prior to 2.1.13 and prior to 2.2.13 Description: The issue affects Deno, a JavaScript, TypeScript, and WebAssembly runtime. It involves the Deno.env.toObject method, which ignores variables listed in the --deny-env option of the...

PT-2025-23863 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue affects the processing of the file "/request-details.php". The manipulation of the requestid argument leads to SQL injection. The attack can be initiated...

PT-2025-23763 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a Cross-Site Request Forgery in the Apache HTTP Server. No specific details about affected devices or real-world incidents are provided. Recommendations: At th...

PT-2025-26221

Name of the Vulnerable Software and Affected Versions Meshtastic versions 2.5.0 through 2.6.10 Description Meshtastic is an open source mesh networking solution. The flashing procedure of several hardware vendors was resulting in duplicated public/private keys. Additionally, Meshtastic was failin...