PT-2025-17086 · At Internet · At Internet Smarttag

Name of the Vulnerable Software and Affected Versions: AT Internet SmartTag versions n/a through 0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-17189 · Metagauss · Metagauss Profilegrid

Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions n/a through 5.9.4.8 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows attackers to execute malicious SQL...

PT-2025-18329 · NetGear · Netgear Ex6120

Name of the Vulnerable Software and Affected Versions: Netgear EX6120 version 1.0.0.68 Description: A critical vulnerability was found in the fwAcosCgiInbound function. The manipulation of the host argument leads to a buffer overflow. This issue can be exploited remotely. The vendor was contacted...

PT-2025-17082 · Unknown · Jbhovik Ray Enterprise Translation

Name of the Vulnerable Software and Affected Versions: jbhovik Ray Enterprise Translation versions 1.7.0 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This...

PT-2025-17170 · Unknown · Rtpharry Bulk Page Stub Creator

Name of the Vulnerable Software and Affected Versions: rtpHarry Bulk Page Stub Creator versions n/a through 1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means an attacke...

PT-2025-16961 · Unknown · Codeastro Internet Banking System

Name of the Vulnerable Software and Affected Versions: Code Astro Internet Banking System version 2.0.0 Description: The issue concerns Cross Site Scripting XSS via the name parameter in the "/admin/pages account.php" API endpoint. This allows for potential malicious script injection. No...

PT-2025-17135 · Buildium · Buildium

Name of the Vulnerable Software and Affected Versions: Listings for Buildium versions 0.1.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS. This means an attacker could potentially trick a user into performing unintende...

PT-2025-18271 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Description: A critical issue has been found in the get cur lang ver function, where manipulation of the host argument leads to a buffer overflow. This issue can be exploited remotely. The vendor was...

PT-2025-18385 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server versions up to 2.0.7 Description: A critical vulnerability was found in the ASCII Command Handler component of PCMan FTP Server, leading to a buffer overflow. The attack can be initiated remotely, and the exploit has been...

PT-2025-16960 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.2.0 through 7.4.3.129 Liferay DXP versions 2024.Q4.1 through 2024.Q4.7 Liferay DXP versions 2024.Q3.1 through 2024.Q3.9 Liferay DXP versions 2024.Q2.0 through 2024.Q2.13 Liferay DXP versions 2024.Q1.1 through...

PT-2025-17487 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions 9.1.0 through 9.1.1d6 Description: The issue allows a local user with admin privilege to potentially execute arbitrary code with full root privileges on Brocade Fabric OS. This is a local privilege escalation...

PT-2025-18285 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Description: A critical issue was found in the cmd wireless function, where manipulation of the host argument leads to command injection. This issue can be exploited remotely. The vendor was contacted about...

PT-2025-17008 · Unknown · Dashboard Notepads

Name of the Vulnerable Software and Affected Versions: Dashboard Notepads versions 1.2.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in Dashboard Notepads. Recommendations: For versions 1.2.1 and earlier, update to a version that...

PT-2025-17127 · Unknown · Web2Application

Name of the Vulnerable Software and Affected Versions: Web2application versions n/a through 5.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS in the Web2application. Recommendation...

PT-2025-16935 · WordPress · Icegram Express

Name of the Vulnerable Software and Affected Versions: The Icegram Express formerly known as Email Subscribers WordPress plugin versions prior to 5.7.52 Description: The issue concerns the Icegram Express WordPress plugin, which does not properly sanitise and escape some of its settings. This cou...

PT-2025-17139 · Unknown · Bowo Debug Log Manager

Name of the Vulnerable Software and Affected Versions: Bowo Debug Log Manager versions through 2.3.4 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

PT-2025-17062 · Chatlive · Chatlive

Name of the Vulnerable Software and Affected Versions: CHATLIVE versions n/a through 2.0.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

PT-2025-17227 · Unknown · Datapatrol Screenshot Watermark

Name of the Vulnerable Software and Affected Versions: DataPatrol Screenshot watermark, printing watermark agent version 3.5.2.0 Description: An issue in the software allows a physically proximate attacker to obtain sensitive information. Recommendations: For version 3.5.2.0, at the moment, there...

PT-2025-17059 · Unknown · Shipmozo Courier Tracking

Name of the Vulnerable Software and Affected Versions: Shipmozo Courier Tracking versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This type of issue can occu...

PT-2025-17215 · Unknown · Commercify

Name of the Vulnerable Software and Affected Versions: Commercify version 1.0 Description: A CSRF issue allows remote attackers to perform unauthorized actions on behalf of authenticated users due to missing CSRF protection on sensitive endpoints. Recommendations: For Commercify version 1.0,...