SUSE CVE-2025-49125

Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat. When using PreResources or PostResources mounted other than at the root of the web application, it was possible to access those resources via an unexpected path. That path was likely not to be protected by th...

PT-2025-25612 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hostel Management System version 1.0 Description: A critical issue affects the processing of the file /includes/login.inc.php, where the manipulation of the student roll no argument leads to SQL injection. The attack can be initiat...

PT-2025-25755 · Fortra · Ca Privileged Access Manager

Name of the Vulnerable Software and Affected Versions: Fortra's Core Privileged Access Manager BoKS versions 7.2.0 through 7.2.0.17 Fortra's Core Privileged Access Manager BoKS versions 8.1.0 through 8.1.0.22 Fortra's Core Privileged Access Manager BoKS versions 8.1.1 through 8.1.1.7 Fortra's Cor...

PT-2025-25681 · Unknown · Mojoomla School Management

Name of the Vulnerable Software and Affected Versions: mojoomla School Management versions n/a through 93.0.0 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File...

PT-2025-25725 · Unknown · Helmut Wandl Advanced Settings

Name of the Vulnerable Software and Affected Versions: Helmut Wandl Advanced Settings versions n/a through 3.0.1 Description: A Cross-Site Request Forgery CSRF issue affects Helmut Wandl Advanced Settings, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For...

PT-2025-25774

Name of the Vulnerable Software and Affected Versions Linux PAM pam-config affected versions not specified Description A Local Privilege Escalation LPE flaw exists in pam-config within Linux Pluggable Authentication Modules PAM. This issue allows an unprivileged local attacker, such as one...

PT-2025-25752 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: A SQL Injection issue allows a remote attacker to obtain sensitive information via the "admin datarelate.php" component. Recommendations: For SeaCMS version 12.9, update to a version that fixes this issue, as...

PT-2025-25613 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hostel Management System version 1.0 Description: A critical issue was found in the PHPGurukul Hostel Management System, affecting an unknown function of the file /includes/login-hm.inc.php. The manipulation of the Username argumen...

PT-2025-25702 · Unknown · Thembay Aora

Name of the Vulnerable Software and Affected Versions: thembay Aora versions 1.3.9 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

PT-2025-25617 · Unknown · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hostel Management System version 1.0 Description: A critical vulnerability was found in the code-projects Hostel Management System. This issue affects unknown code of the file /allocate room.php. The manipulation of the search b...

PT-2025-25651

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller versions prior to 12.1-55.328 Citrix NetScaler Application Delivery Controller versions prior to 13.1-37.235 Citrix NetScaler Application Delivery Controller versions prior to 13.1-58.32 Citrix...

PT-2025-25750

Name of the Vulnerable Software and Affected Versions: Sitecore Experience Manager XM, Experience Platform XP, and Experience Commerce XC versions 9.0 through 9.3 and 10.0 through 10.4 Description: A Zip Slip vulnerability affects the software. A remote, authenticated attacker can exploit this...

PT-2025-25740 · Unknown · Miliaris Amigdala

Name of the Vulnerable Software and Affected Versions: Miliaris Amigdala version 2.2.6 Description: A cross-site scripting XSS issue in the report manager function allows attackers to execute arbitrary HTML in the context of a user's browser via a crafted payload. Recommendations: For Miliaris...

PT-2025-25693 · Unknown · Thembay Fana

Name of the Vulnerable Software and Affected Versions: thembay Fana versions 1.1.28 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

PT-2025-25764 · Unknown +3 · Portainer Community Edition +4

Name of the Vulnerable Software and Affected Versions: Portainer Community Edition versions prior to 2.31.0 STS and prior to 2.27.7 LTS Description: The issue affects a lightweight service delivery platform for containerized applications, allowing management of Docker, Swarm, Kubernetes, and ACI...

PT-2025-25679 · WordPress · Rextheme Wp Vr

Name of the Vulnerable Software and Affected Versions: RexTheme WP VR versions through 8.5.26 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can lead to further exploitation and potential...

UBUNTU-CVE-2025-48988

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. The following versions were EOL at the time the CVE was created but are known to be...

PT-2025-25554 · Liferay · Liferay Portal +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.2 fix pack 8 through fix pack 20 Liferay Portal versions 7.3 GA through update 35 Liferay Portal versions 7.4.0 through 7.4.3.97 Liferay DXP versions 7.4 GA through update 92 Liferay DXP versions 2023.Q3.1 through...

PT-2025-25534 · Unknown · Customer Support System

Name of the Vulnerable Software and Affected Versions: Customer Support System version 1.0 Description: The issue is related to a Reflected Cross-Site Scripting XSS in the /customer support/index.php endpoint, which allows remote attackers to execute arbitrary code via the page parameter. This...

PT-2025-25538 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical issue affects the form macfilter function. The manipulation of the argument mac hostname %d/sched name %d leads to a stack-based buffer overflow. This issue can be exploited remotely. Th...