PT-2025-23892

Name of the Vulnerable Software and Affected Versions llama index versions prior to 0.12.28 Description Multiple vector store integrations in run-llama/llama index have SQL injection vulnerabilities, allowing an attacker to read and write data using SQL. This could lead to unauthorized access to...

PT-2025-23942 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Medical Card Generation System version 1.0 Description: A critical issue was found in the PHPGurukul Medical Card Generation System. This issue affects the file /admin/unreadenq.php and is related to the manipulation of the ID...

PT-2025-23895 · WordPress · Wp User Frontend Pro

Name of the Vulnerable Software and Affected Versions: WP User Frontend Pro plugin for WordPress versions up to, and including, 4.1.3 Description: The issue is related to insufficient file path validation in the delete avatar ajax function, allowing authenticated attackers with Subscriber-level...

PT-2025-23983 · Unknown · Brilliance Golden Link Secondary System

Name of the Vulnerable Software and Affected Versions: Brilliance Golden Link Secondary System up to 20250424 Description: A critical vulnerability was found in the Brilliance Golden Link Secondary System. The issue affects an unknown function of the file /sysframework/logSelect.htm. The...

PT-2025-23887 · Unknown · Code-Projects/Anirbandutta9 Content Management System/News-Buzz

Name of the Vulnerable Software and Affected Versions: code-projects/anirbandutta9 Content Management System and News-Buzz version 1.0 Description: A critical issue was found in the code-projects/anirbandutta9 Content Management System and News-Buzz. The problem affects an unknown functionality o...

PT-2025-23976 · Unknown · Phpgurukul Human Metapneumovirus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description: A critical issue has been identified in the system, affecting an unknown functionality of the file /bwdates-report-result.php. The manipulation of the fromdat...

PT-2025-23954 · Unknown · Campcodes Online Teacher Record Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Teacher Record Management System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /trms/admin/bwdates-reports-details.php. The manipulation of the fromdate and todate arguments...

PT-2025-23980 · Flir · Flir Ax8

Name of the Vulnerable Software and Affected Versions: FLIR AX8 versions up to 1.46.16 Description: A critical vulnerability has been found in the FLIR AX8 Backend component, affecting the subscribe to spot, subscribe to delta, and subscribe to alarm functions in the...

PT-2025-24061 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical issue affects some unknown functionality of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the submit-url argument leads to buffer...

PT-2025-23915 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 2.0 Description: A critical issue was found in the PHPGurukul Complaint Management System, affecting some unknown functionality of the file /admin/edit-state.php. The manipulation of the...

PT-2025-23939 · Yii · Yii 2 Redis Extension

Name of the Vulnerable Software and Affected Versions: Yii 2 Redis extension versions prior to 2.0.20 Description: The issue concerns the logging of commands when a connection fails in the Yii 2 Redis extension. Specifically, prior to version 2.0.20, AUTH parameters are written in plain text,...

PT-2025-23910 · Unknown · 2Clickportal

Name of the Vulnerable Software and Affected Versions: 2ClickPortal versions prior to 7.14.3 Description: The issue is related to improper neutralization of input provided by an unauthorized user into the changes reference id parameter in the URL, allowing for boolean-based Blind SQL Injection...

PT-2025-23938 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue has been found in the REIN Command Handler component of FreeFloat FTP Server, leading to a buffer overflow. This can be exploited remotely. The issue affects some unknown...

PT-2025-23913 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 2.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /admin/between-date-userreport.php. The manipulation of the fromdate and todate arguments lea...

PT-2025-23982 · Unknown · Brilliance Golden Link Secondary System

Name of the Vulnerable Software and Affected Versions: Brilliance Golden Link Secondary System up to 20250424 Description: A critical issue has been found in the Brilliance Golden Link Secondary System. This issue affects some unknown processing of the file...

PT-2025-23986 · Code Projects · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue was found in the code-projects Real Estate Property Management System. The problem affects an unknown function of the file /Admin/Property.php...

PT-2025-23903 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: Radare2 version 5.9.9 Description: A problematic vulnerability was found in Radare2, affecting the function r cons pal init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory...

PT-2025-23934 · Unknown · Phpgurukul Auto Taxi Stand Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Auto Taxi Stand Management System version 1.0 Description: A critical issue has been identified, affecting the file /admin/search-autoortaxi.php. The manipulation of the searchdata argument leads to SQL injection. This issue can be...

The vulnerability of the deletePackages method in the HPE StoreOnce VSA virtual storage system allows a attacker to gain access to read and delete any files they desire.

The vulnerability of the deletePackages method in the HPE StoreOnce VSA virtual storage system is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to read and...

PT-2025-23955 · Unknown · Campcodes Online Recruitment Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Recruitment Management System version 1.0 Description: A critical issue has been identified, affecting the /admin/ajax.php?action=login file. The Username argument is vulnerable to sql injection, which can be exploited...