PT-2025-25098 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. When ...

PT-2025-25002 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing an attacker with elevated privileges to inject malicious scripts into vulnerable form fields. This could...

PT-2025-25102 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. When ...

PT-2025-24614 · Zendto · Zendto

Name of the Vulnerable Software and Affected Versions: Zend.To versions 6.10-6 Beta and earlier Description: A critical vulnerability has been found in Zend.To, affecting the function exec of the file NSSDropoff.php. The manipulation of the argument file 1 leads to os command injection. The attac...

PT-2025-24938 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing an attacker with limited privileges to inject malicious scripts into vulnerable form fields. This could...

PT-2025-24718 · Fortinet · Fortiadc

Name of the Vulnerable Software and Affected Versions: FortiADC versions 6.1 through 7.6.1 FortiADC version 7.0 FortiADC versions 7.1.0 through 7.1.4 FortiADC versions 7.2.0 through 7.2.7 FortiADC versions 7.4.0 through 7.4.6 FortiADC versions 7.6.0 through 7.6.1 FortiADC version 6.2 Description:...

PT-2025-24650 · WordPress · The Ultimate Blocks

Name of the Vulnerable Software and Affected Versions: The Ultimate Blocks – WordPress Blocks Plugin versions up to, and including, 3.3.3 Description: The issue is related to Stored Cross-Site Scripting via multiple widgets due to insufficient input sanitization and output escaping. This allows...

PT-2025-24680 · Keyoti · Keyoti Searchunit

Name of the Vulnerable Software and Affected Versions: Keyoti SearchUnit versions prior to 9.0.0. Description: The issue is related to Server-Side Request Forgery SSRF in the /Keyoti SearchEngine Web Common/SearchService.svc/GetResults and /Keyoti SearchEngine Web...

PT-2025-24892 · Redcap · Redcap

Name of the Vulnerable Software and Affected Versions: REDCap versions 13.1.9 Description: A stored cross-site scripting XSS issue in the Project Dashboards allows authenticated users to execute arbitrary web script or HTML by injecting a crafted payload into the Dashboard title and Dashboard...

PT-2025-25620 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5232 B20210713 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically in the file /boafrm/formMultiAP. The manipulation of the submit-url argument leads to a buff...

PT-2025-25168 · Apache · Apache Cloudstack

Name of the Vulnerable Software and Affected Versions: Apache CloudStack versions prior to 4.19.3.0 Apache CloudStack versions prior to 4.20.1.0 Description: A flaw in access control affects the "listTemplates" and "listIsos" APIs. A malicious Domain Admin or Resource Admin can exploit this issue...

CVE-2025-48267

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThimPress WP Pipes allows Path Traversal. This issue affects WP Pipes: from n/a through 1.4.2...

PT-2025-24481 · Redqteam · Wishlist

Name of the Vulnerable Software and Affected Versions: redqteam Wishlist versions n/a through 2.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-25590 · Totolink · Totolink T10

Name of the Vulnerable Software and Affected Versions: TOTOLINK T10 version 4.1.8cu.5207 Description: A problematic issue has been found, affecting some unknown functionality of the file /etc/shadow.sample. This issue leads to the use of a hard-coded password. The attack can only be initiated...

PT-2025-24426 · Tp Link · Tp-Link Tl-Ipc544Ep-W4

Name of the Vulnerable Software and Affected Versions: TP-Link TL-IPC544EP-W4 version 1.0.9 Build 240428 Rel 69493n Description: A critical vulnerability has been found in the TP-Link TL-IPC544EP-W4 camera. The issue affects the sub 69064 function of the /bin/main file. The manipulation of the te...

PT-2025-24465 · Bzotheme · Bzotheme Craftxtore

Name of the Vulnerable Software and Affected Versions: BZOTheme CraftXtore versions n/a through 1.7 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-24428 · Tcman · Tcman'S Gim

Name of the Vulnerable Software and Affected Versions: TCMAN's GIM version 11 Description: The issue is related to an incorrect authorization vulnerability. This vulnerability allows an attacker with a low privilege level to change the password of other users through a POST request using the...

PT-2025-24443

Name of the Vulnerable Software and Affected Versions Konica Minolta Bizhub versions up to 20250202 Description A problem has been detected that affects unknown code, leading to cross-site request forgery. The attack can be initiated remotely. Recommendations For versions up to 20250202, consider...

PT-2025-25600 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002RU version 3.0.0-B20230809.1615 Description: A critical issue affects the HTTP POST Request Handler component due to a buffer overflow when processing the file /boafrm/formSysLog. The manipulation of the submit-url argument lead...

PT-2025-25603 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical vulnerability was found in the HTTP POST Request Handler component of the affected software. The issue is related to an unknown functionality of the file /boafrm/formMultiAP. T...