PT-2025-19792

Name of the Vulnerable Software and Affected Versions MobSF versions up to and including 4.3.2 Description MobSF is a mobile application security testing tool used by security teams across numerous organizations, typically deployed on centralized internal or cloud-based servers. The tool provides...

PT-2025-19729 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: foxcms version 1.2.5 Description: The issue is a SQL injection vulnerability via the executeCommand method in DataBackup.php. This vulnerability allows for potential SQL injection attacks. Recommendations: For foxcms version 1.2.5, consider...

PT-2025-18957

Name of the Vulnerable Software and Affected Versions Browser Use versions prior to 0.1.45 Description The issue arises from the mishandling of URL parsing of allowed domains, allowing userinfo to be placed in the authority component. This can lead to a whitelist bypass, exposing internal service...

PT-2025-18930 · WordPress · Subpage List

Name of the Vulnerable Software and Affected Versions: Subpage List plugin for WordPress versions up to, and including, 1.3.3 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'subpages' shortcode due to insufficient input sanitization and output escaping on...

PT-2025-18941 · Unknown +1 · Mojolicious +1

Name of the Vulnerable Software and Affected Versions: Mojolicious versions 7.28 through 9.39 Description: The issue concerns the generation of weak HMAC session secrets in Mojolicious for Perl. When creating a default app, a weak secret is written to the application's configuration file using th...

PT-2025-18937 · WordPress · The Motors – Car Dealer

Name of the Vulnerable Software and Affected Versions: The Motors - Car Dealer, Rental & Listing WordPress theme versions up to, and including, 5.6.65 Description: The issue is related to arbitrary shortcode execution due to improper validation of a value before running do shortcode, allowing...

PT-2025-18942 · Unknown · Phpgurukul Cyber Cafe Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Cyber Cafe Management System version 1.0 Description: A critical vulnerability has been found in PHPGurukul Cyber Cafe Management System. This affects an unknown part of the file /add-computer.php. The manipulation of the compname...

PT-2025-18947 · Unknown +1 · Mojolicious +1

Name of the Vulnerable Software and Affected Versions: Mojolicious versions 0.999922 through 9.39 Description: The issue concerns the use of a hard-coded string or the application's class name as a HMAC session secret by default in Mojolicious for Perl. This predictable default secret can be...

PT-2025-18960 · Unknown · Fastify/View

Name of the Vulnerable Software and Affected Versions: @fastify/view affected versions not specified Description: The issue concerns a potential Remote Code Execution RCE vulnerability in the @fastify/view plugin for Fastify, which allows the use of template engines for generating HTML pages on t...

PT-2025-18769

Name of the Vulnerable Software and Affected Versions Mydata Informatics Ticket Sales Automation versions prior to 03.04.2025 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for Blind SQL...

PT-2025-18751 · WordPress · Advance Seat Reservation Management

Name of the Vulnerable Software and Affected Versions: Advance Seat Reservation Management for WooCommerce plugin for WordPress versions up to, and including, 3.3 Description: The issue allows for SQL Injection via the profileId parameter due to insufficient escaping on the user-supplied paramete...

PT-2025-18740 · WordPress · Yame | Link In Bio

Name of the Vulnerable Software and Affected Versions: The Yame | Link In Bio plugin for WordPress versions 0.9.0 and earlier Description: The issue allows unauthenticated attackers to view potentially sensitive information contained in an exposed file through the publicly accessible phpinfo.php...

PT-2025-18775 · WordPress · Ultimate Auction Pro

Name of the Vulnerable Software and Affected Versions: Ultimate Auction Pro plugin for WordPress versions up to, and including, 1.5.2 Description: The issue is related to SQL Injection via the auction id parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient...

PT-2025-18764 · WordPress · Sureforms

Name of the Vulnerable Software and Affected Versions: SureForms WordPress plugin versions prior to 1.4.4 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, for...

PT-2025-18743 · WordPress · Gmapsmania

Name of the Vulnerable Software and Affected Versions: GmapsMania plugin for WordPress versions up to, and including, 1.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's gmap shortcode due to insufficient input sanitization and output escaping on user-supplied...

PT-2025-18730 · Ibm · Ibm Concert

Name of the Vulnerable Software and Affected Versions: IBM Concert Software versions 1.0.0 through 1.0.5 Description: The issue allows an authenticated user to cause a denial of service due to the expansion of archive files without controlling resource consumption. Recommendations: For IBM Concer...

PT-2025-18734 · Ibm · Ibm Concert

Name of the Vulnerable Software and Affected Versions: IBM Concert Software versions 1.0.0 through 1.0.5 Description: The issue allows a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view...

PT-2025-18857

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A bug in the Linux kernel's histogram code allowed histogram values to have certain modifiers, which caused a bug. The issue occurred when attempting to set a histogram value to a...

PT-2025-18919 · H2O.Ai · H2O-3

Name of the Vulnerable Software and Affected Versions: h2oai/h2o-3 affected versions not specified Description: A vulnerability in the S3 bucket configuration allows public write access to the 'h2o-release' bucket. This could enable an attacker to overwrite any file in the bucket, potentially...

PT-2025-18708 · Tenda · Tenda Rx2 Pro

Name of the Vulnerable Software and Affected Versions: Tenda RX2 Pro version 16.03.30.14 Description: The web management portal of the Tenda RX2 Pro transmits sensitive information, including the hash of the user's password, in cleartext. This could allow an unauthenticated attacker to collect...