PT-2025-31325 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 Description: A path handling issue was addressed with improved validation. An application may be able to break out of its sandbox. Recommendations:...

PT-2025-31278

Name of the Vulnerable Software and Affected Versions WebKitGTK affected versions not specified WPE WebKit affected versions not specified Safari versions prior to 18.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 macOS Sequoia versions prior to 15.6 tvOS versions prior to 18.6 vision...

PT-2025-31319 · Apple · Macos Ventura 13.7.7 +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.6 macOS versions prior to Sonoma 14.7.7 macOS versions prior to Ventura 13.7.7 Description: A race condition existed due to improper state handling, potentially allowing an application to cause unexpected...

PT-2025-31252 · Unknown · Phpgurukul Pre-School Enrollment System

Name of the Vulnerable Software and Affected Versions: Phpgurukul Pre-School Enrollment System version 1.0 Description: The application contains a SQL injection vulnerability in the /admin/password-recovery.php file. This is due to insufficient validation of the username parameter. Recommendation...

PT-2025-31315 · Apple · Macos Ventura 13.7.7 +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.6 macOS versions prior to Sonoma 14.7.7 macOS versions prior to Ventura 13.7.7 Description: An out-of-bounds access issue exists due to insufficient bounds checking. Processing a maliciously crafted file may...

PT-2025-31328 · Apple · Macos Sequoia 15.6 +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.6 macOS versions prior to Sonoma 14.7.7 Description: A malicious application may be able to launch arbitrary binaries on a trusted device due to inadequate input validation. Recommendations: Update to macOS...

PT-2025-31292 · Apple · Macos Sonoma 14.7.7 +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.6 macOS versions prior to Sonoma 14.7.7 Description: An application may be able to access protected user data due to vulnerable code. This issue was addressed by removing the vulnerable code. Recommendations...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a denial of service (CVE-2025-36097)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a denial of service with the jsonp-1.0, jsonp-1.1, or jsonp-2.0 features enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

PT-2025-31059 · Optimizely · Episerver Cms

Name of the Vulnerable Software and Affected Versions: Episerver CMS versions prior to 11.21.4 and prior to 11.37.5 Episerver CMS versions prior to 12.22.1 and prior to 11.37.3 Description: The Episerver Content Management System CMS by Optimizely was affected by multiple Stored Cross-Site...

PT-2025-31045 · Code Projects · Online Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Online Ordering System version 1.0 Description: A critical issue exists in code-projects Online Ordering System 1.0, specifically within the /admin/product.php file. The manipulation of the image argument allows for unrestricted...

PT-2025-31043 · Campcodes · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Courier Management System version 1.0 Description: A critical issue exists in Campcodes Courier Management System 1.0. The vulnerability is due to SQL injection, stemming from manipulation of the ID argument within the /view...

PT-2025-31037 · Unknown · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A vulnerability exists in an unknown functionality of the file /admin/delete s4.php. Manipulation of the ID argument leads to SQL injection, allowing for remote attacks. The exploit...

PT-2025-31150

Name of the Vulnerable Software and Affected Versions copyparty versions up to and including 1.18.4 Description copyparty is a portable file server susceptible to cross-site scripting XSS. An unauthenticated attacker can execute arbitrary JavaScript code in a victim’s browser due to improper...

PT-2025-31136 · Phpgurukul · Phpgurukul E-Diary Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1 Description: The application suffers from improper session invalidation in the /edms/change-password.php component, which could allow attackers to execute a session hijacking attack...

MINI-5JJC-JH3C-JWMJ

Bulletin has no description...

PT-2025-31015 · Code Projects · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A critical issue exists in code-projects Exam Form Submission 1.0. The vulnerability is due to SQL injection, which can be triggered by manipulating the email argument in the /admin/...

PT-2025-31014 · Code Projects · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A critical issue exists in code-projects Exam Form Submission 1.0. The vulnerability is due to a SQL injection flaw in the /admin/update s2.php file. Manipulation of the credits...

PT-2025-31013 · Code Projects · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A critical issue exists due to SQL injection. The manipulation of the credits argument in the processing of the file /admin/update s1.php can lead to exploitation. The attack can be...

PT-2025-30988 · Roothub · Roothub

Name of the Vulnerable Software and Affected Versions: Roothub versions up to 2.6 Description: A vulnerability exists in Roothub that allows for cross site scripting. The issue is located in the Edit function within the src/main/java/cn/roothub/web/admin/SystemConfigAdminController.java file. The...

PT-2025-30973 · Campcodes · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Courier Management System version 1.0 Description: A critical issue exists in Campcodes Courier Management System version 1.0 due to a SQL injection vulnerability. The vulnerability is located in an unknown functionality of the /edi...