PT-2025-24375 · Quantenna · Quantenna Wi-Fi Chipset

Name of the Vulnerable Software and Affected Versions: Quantenna Wi-Fi chipset versions through 8.0.0.28 Description: The issue concerns an unauthenticated telnet interface that ships by default with the Quantenna Wi-Fi chips, classified as CWE-306, "Missing Authentication for Critical Function."...

PT-2025-25570 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5232 B20210713 Description: A critical vulnerability was found in the HTTP POST Request Handler component, affecting the file /boafrm/formSaveConfig. The manipulation of the submit-url argument leads to a buff...

PT-2025-25567 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5232 B20210713 Description: A critical vulnerability has been found in the TOTOLINK EX1200T, affecting an unknown part of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The...

PT-2025-24601 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T versions up to 4.1.2cu.5232 B20210713 Description: A critical issue has been found in the HTTP POST Request Handler component, affecting the processing of the file /boafrm/formIpQoS. This leads to a buffer overflow. The attac...

PT-2025-24348 · Mops App +1 · Mops App +1

Name of the Vulnerable Software and Affected Versions: moPS App versions 1.8.618 and earlier moPS App Engine version 1.8.618 Description: The issue allows all users to access administrative API endpoints, such as "/api/admin", without requiring additional authentication. This results in...

PT-2025-24343 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue has been found in the PHPGurukul Employee Record Management System. The problem affects an unknown function of the file /admin/allemployees.php. Manipulati...

PT-2025-24335 · Christiaan Pieterse · Maxiblocks

Name of the Vulnerable Software and Affected Versions: MaxiBlocks versions 2.1.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows Privilege Escalation. This vulnerability is due to missing authorization in Christiaan Pieterse MaxiBlocks...

Nodes can bypass dynamic resource allocation authorization checks

CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L - Low 2.7 A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks. When the DynamicResourceAllocation feature gate is enabled, the controller properly...

CVE-2025-3321

A predefined administrative account is not documented and cannot be deactivated. This account cannot be misused from the network, only by local users on the server...

PT-2025-24206 · Unknown · Shiftnav – Responsive Mobile Menu

Name of the Vulnerable Software and Affected Versions: ShiftNav – Responsive Mobile Menu versions 1.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means an attacker c...

PT-2025-24247 · Unknown · Themefic Hydra Booking

Name of the Vulnerable Software and Affected Versions: Themefic Hydra Booking versions 1.1.10 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-24319 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5232 B20210713 Description: A critical issue has been found in the HTTP POST Request Handler component, affecting the processing of the file /boafrm/formWlanRedirect. The manipulation of the redirect-url...

PT-2025-24075 · Sourcecodester · Sourcecodester Open Source Clinic Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Open Source Clinic Management System version 1.0 Description: A critical issue has been discovered, affecting the /doctor.php file. The manipulation of the doctorname argument leads to SQL injection. This issue can be exploited...

PT-2025-23993 · Code Projects · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue has been discovered, affecting the /Admin/NewsReport.php file. The txtFrom argument is vulnerable to sql injection, allowing for remote attacks. Th...

PT-2025-24244 · Wptouch · Wptouch

Name of the Vulnerable Software and Affected Versions: WPtouch versions 4.3.60 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For WPtouch version...

PT-2025-24164 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: Broadly for WordPress versions 3.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to...

PT-2025-24070 · Unknown · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /Admin/EditCity.php. This issue leads to sql injection and can be exploited...

PT-2025-24322 · Tenda · Tenda Ac5

Name of the Vulnerable Software and Affected Versions: Tenda AC5 version 1.0/15.03.06.47 Description: A critical vulnerability was found in the Tenda AC5 router. This issue affects the fromadvsetlanip function of the file /goform/AdvSetLanip. The manipulation of the lanMask argument leads to a...

PT-2025-24000 · Code Projects · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue has been found in the processing of the file /Admin/InsertState.php. The manipulation of the txtStateName argument leads to SQL injection. This iss...

PT-2025-24082 · Idf +1 · Idf +1

Name of the Vulnerable Software and Affected Versions: IDF versions 0.10.0-0C03-03 ZLF versions 0.10.0-0C03-04 Description: The issue is a Stored Cross-Site Scripting XSS vulnerability that allows an attacker to store malicious JavaScript payload in the software, which will run in the victim's...