PT-2025-27485 · Unknown · Wing Ftp Server

Name of the Vulnerable Software and Affected Versions: Wing FTP Server versions through 7.4.4 Description: The administrative web interface listening by default on port 5466 runs with elevated privileges root or SYSTEM by default. The web application provides methods to execute arbitrary system...

PT-2025-20619 · WordPress · The Wordpress Review Plugin

Name of the Vulnerable Software and Affected Versions: The WordPress Review Plugin: The Ultimate Solution for Building a Review Website versions up to, and including, 5.3.5 Description: The WordPress Review Plugin is vulnerable to Local File Inclusion, allowing authenticated attackers with...

PT-2025-20624 · Code Projects · Code-Projects Hotel Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hotel Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Hotel Management System. The issue affects the Edit function of the Edit Room component. The manipulation of the...

PT-2025-20600 · Unknown · Campcodes Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Food Ordering System version 1.0 Description: A critical vulnerability has been found in the Campcodes Online Food Ordering System. This issue affects the processing of the file /routers/ticket-message.php, where the...

PT-2025-20584 · Ibm · Ibm App Connect Enterprise Certified Container

Name of the Vulnerable Software and Affected Versions: IBM App Connect Enterprise Certified Container versions 8.1 through 12.10 Description: The issue concerns the use of weaker than expected cryptographic algorithms to protect the database storing flows in DesignerAuthoring instances. This coul...

RiM: Record, Improve and Maintain Physical Well-Being Using Federated Learning

In academic settings, the demanding environment often forces students to prioritize academic performance over their physical well-being. Moreover, privacy concerns and the inherent risk of data breaches hinder the deployment of traditional machine learning techniques for addressing these health...

PT-2025-20582

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description The software is susceptible to a SQL Injection issue within the user payment update.php file. The issue occurs through the order id POST parameter. The vulnerability allo...

PT-2025-20578

Name of the Vulnerable Software and Affected Versions Jan versions 0.5.14 and earlier Description The software is susceptible to remote code execution RCE when a user clicks on a link displayed within a conversation. This occurs because the application opens external websites and exposes the...

PT-2025-20598 · Unknown · Campcodes Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Food Ordering System version 1.0 Description: A critical issue was found in the system, affecting the file /routers/ticket-status.php. The manipulation of the ticket id argument leads to SQL injection. This issue can be...

PT-2025-20468 · Totolink · Totolink N150Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A problematic issue has been found in the URL Filtering Page component, allowing for cross-site scripting through remote manipulation. The exploit has been publicly disclosed...

PT-2025-20546

Name of the Vulnerable Software and Affected Versions Drag and Drop Multiple File Upload for WooCommerce plugin for WordPress versions up to, and including, 1.1.6 Description The issue allows unauthenticated attackers to upload arbitrary files on the affected site's server, which may make remote...

PT-2025-20544 · Code Projects · Code-Projects Jewelery Store Management System

Name of the Vulnerable Software and Affected Versions: code-projects Jewelery Store Management system version 1.0 Description: A critical issue has been found in the Search Item View component, where the manipulation of the str2 argument leads to a stack-based buffer overflow. This issue can be...

PT-2025-20550 · WordPress · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg plugin for WordPress versions up to, and including, 4.1.1.2 Description: The Groundhogg plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the process export delete and process...

PT-2025-20581

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description The application lacks proper file extension checks, MIME type validation, and authentication when handling file uploads through the user payment update.php script...

PT-2025-20526 · Sourcecodester · Sourcecodester Online Student Clearance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student Clearance System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online Student Clearance System. This issue affects unknown code in the file /admin/edit-admin.php. The...

PT-2025-20552 · Radware · Radware Cloud Web Application Firewall

Name of the Vulnerable Software and Affected Versions: Radware Cloud Web Application Firewall WAF versions before 2025-05-07 Description: The issue allows remote attackers to bypass firewall filters by adding a special character to the request. There is a proof-of-concept demonstration of the...

PT-2025-20577

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description SourceCodester Client Database Management System version 1.0 is susceptible to a SQL Injection issue in the 'user delivery update.php' file. The issue is triggered throug...

PT-2025-27719 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue was related to the ad4851 parse channels common function, where the pointer returned was incremented internally as each...

PT-2025-20559

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description SourceCodester Client Database Management System version 1.0 is susceptible to remote code execution through arbitrary file upload in the user proposal update order.php...

PT-2025-20606 · Ibm · Ibm Storage Scale

Name of the Vulnerable Software and Affected Versions: IBM Storage Scale versions 5.2.2.0 through 5.2.2.1 Description: The issue allows an authenticated user to execute privileged commands due to improper input neutralization. This is related to a command injection issue, specifically improper...