PT-2025-14884 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Web-based Pharmacy Product Management System. The issue affects an unknown functionality of the file...

PT-2025-22379 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE version 3.4 Description: A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause a denial of service DoS...

PT-2025-14885 · Unknown · Sourcecodester Library Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Library Management System version 1.0 Description: A critical issue was found in the Search function of the file library management/src/Library Management/Forgot.java. The manipulation of the txtuname argument leads to sql...

PT-2025-14875 · Bitdefender · Bitdefender Gravityzone Update Server

Name of the Vulnerable Software and Affected Versions: Bitdefender GravityZone Update Server affected versions not specified Description: A server-side request forgery SSRF issue exists in the Bitdefender GravityZone Update Server when operating in Relay Mode. The HTTP proxy component on port 707...

PT-2025-14941 · Unknown +1 · Beds24 Online Booking +1

Name of the Vulnerable Software and Affected Versions: Beds24 Online Booking versions n/a through 2.0.26 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Loca...

PT-2025-14861 · WordPress · Woffice Core

Name of the Vulnerable Software and Affected Versions: Woffice Core plugin for WordPress versions up to, and including, 5.4.21 Description: The issue is related to arbitrary file uploads due to missing file type validation in the saveFeaturedImage function. This allows authenticated attackers, wi...

PT-2025-14854 · WordPress · Mapsvg Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Maps WordPress plugin versions 1.0.0 through 1.0.6 Description: The issue concerns the Maps WordPress plugin, which does not properly validate and escape some of its shortcode attributes before outputting them in a page or post. This could...

PT-2025-15030 · Ateeq Rafeeq · Repairbuddy

Name of the Vulnerable Software and Affected Versions: Ateeq Rafeeq RepairBuddy versions n/a through 3.8211 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a...

PT-2025-15038 · Tenda · Tenda Rx3

Name of the Vulnerable Software and Affected Versions: Tenda RX3 version 16.03.13.11 Description: A critical issue has been found, affecting the formSetDeviceName function of the file /goform/SetOnlineDevName. The manipulation of the devName argument leads to a stack-based buffer overflow. This...

PT-2025-14879 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical vulnerability was found in the PHPGurukul Online Fire Reporting System. The issue affects an unknown functionality of the file /admin/edit-guard-detail.php. The...

PT-2025-14968 · Elementor · Turbo Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Turbo Addons for Elementor versions 1.7.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacke...

PT-2025-15020 · Unknown · 404 Image Redirection

Name of the Vulnerable Software and Affected Versions: 404 Image Redirection Replace Broken Images versions n/a through 1.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This is a type of attack where an attacker tricks a user in...

PT-2025-14942 · Unknown · Just Post Preview Widget

Name of the Vulnerable Software and Affected Versions: Just Post Preview Widget versions 1.1.1 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' or PHP Local File Inclusion. This...

PT-2025-14911 · Unknown · Libro De Reclamaciones Y Quejas

Name of the Vulnerable Software and Affected Versions: Libro de Reclamaciones y Quejas versions 0.9 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions 0.9 and earlier, consider implementing...

PT-2025-14870 · Unknown · Phpgurukul Old Age Home Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Old Age Home Management System version 1.0 Description: A critical issue affects an unknown part of the file /admin/profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to initiate the atta...

DoS (Denial of Service) io.netty:netty-handler Dependency in Confluence Data Center and Server

This High severity io.netty:netty-handler Dependency vulnerability was introduced in versions 7.19 of Confluence Data Center and Server. This io.netty:netty-handler Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

PT-2025-14793 · Netwrix · Netwrix Password Secure

Name of the Vulnerable Software and Affected Versions: Netwrix Password Secure version 9.2.0.32454 Description: The issue allows OS command injection and authenticated remote code execution. This means an attacker can execute system commands and run code on other users' systems. The vulnerability...

PT-2025-14753 · Unknown · Labib Ahmed Team Builder

Name of the Vulnerable Software and Affected Versions: Labib Ahmed Team Builder versions n/a through 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means that an attacker...

PT-2025-14714 · Unknown · Notfound Search Engine Keywords Highlighter

Name of the Vulnerable Software and Affected Versions: NotFound Search engine keywords highlighter versions 0.1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in the NotFoun...

PT-2025-14795

Name of the Vulnerable Software and Affected Versions Gladinet CentreStack versions prior to 16.4.10315.56368 Gladinet Triofox versions prior to 16.4.10317.56372 Description Gladinet CentreStack and Triofox are affected by a deserialization vulnerability due to the use of a hardcoded machineKey i...