PT-2025-23122 · Mautic · Mautic

Name of the Vulnerable Software and Affected Versions: Mautic versions prior to the version that properly validates or sanitizes the returnUrl parameter Description: The issue is related to an Open Redirection vulnerability in Mautic's user unlocking endpoint. This vulnerability could be exploite...

PT-2025-23135 · Vllm · Vllm

Name of the Vulnerable Software and Affected Versions: vLLM versions prior to 0.9.0 Description: The issue arises from the prefix caching mechanism in vLLM, which may expose the system to a timing side-channel attack. When a new prompt is processed, if the PageAttention mechanism finds a matching...

PT-2025-23066 · Fortinet · Fortimanager

Name of the Vulnerable Software and Affected Versions: Fortinet FortiManager versions 7.0.0 through 7.0.7 Fortinet FortiManager versions 7.2.0 through 7.2.1 Description: A missing authorization in Fortinet FortiManager may allow an authenticated attacker to overwrite global threat feeds via craft...

PT-2025-23099 · Traefik · Traefik

Name of the Vulnerable Software and Affected Versions: Traefik versions prior to 2.11.25 Traefik versions prior to 3.4.1 Description: There is a potential issue in Traefik when managing requests using a PathPrefix, Path or PathRegex matcher. If the URL contains a URL encoded string in its path,...

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software lies in the improper limitation of the path name in the restricted access catalog, which allows attackers to restore backup copies within the system.

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to incorrect restrictions on the name of the path to the restricted-access catalog. Exploiting this vulnerability could allow an attacker to restore backup copies within the system...

CVE-2025-27700

There is a possible bypass of carrier restrictions due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-23138 · Laravel · Laravel Rest Api

Name of the Vulnerable Software and Affected Versions: Laravel Rest Api versions prior to 2.13.0 Description: A validation bypass issue was discovered where multiple validations defined for the same attribute could be silently overridden. This occurs due to how the framework merges validation rul...

PT-2025-23018 · Unknown · Phpgurukul News Portal Project

Name of the Vulnerable Software and Affected Versions: PHPGurukul News Portal Project version 4.1 Description: A critical issue has been found in the PHPGurukul News Portal Project. The problem affects the /admin/edit-subcategory.php file, where the manipulation of the Category argument leads to...

PT-2025-22956 · Unknown · Phpgurukul Small Crm

Name of the Vulnerable Software and Affected Versions: PHPGurukul Small CRM version 3.0 Description: A critical issue was found in the processing of the file /admin/manage-tickets.php, where the manipulation of the aremark argument leads to SQL injection. The attack can be initiated remotely. Oth...

PT-2025-23017 · Unknown · Phpgurukul News Portal Project

Name of the Vulnerable Software and Affected Versions: PHPGurukul News Portal Project version 4.1 Description: A critical issue was found in the PHPGurukul News Portal Project, affecting some unknown functionality of the file /admin/edit-category.php. The manipulation of the Category argument lea...

PT-2025-22907 · WordPress · The Essential Blocks – Page Builder Gutenberg Blocks

Name of the Vulnerable Software and Affected Versions: The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress versions up to, and including, 5.4.0 Description: The issue is related to Stored Cross-Site Scripting via HTML attributes in Slider and Post...

PT-2025-22951 · Unknown · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown function of the file /admin/add-doctor.php. The manipulation of the Doctorspecialization argument...

PT-2025-23004 · Campcodes · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue was discovered, affecting the file /hms/admin/query-details.php. The manipulation of the adminremark argument leads to SQL injection. This issue can be...

PT-2025-23012 · Phpgurukul · Phpgurukul Company Visitor Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Company Visitor Management System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Company Visitor Management System. The issue is related to an unknown function of the file /bwdates-reports-details.php...

PT-2025-23019 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: maccms10 version 2025.1000.4047 Description: The issue is related to Server-Side request forgery SSRF in Friend Link Management. This allows an attacker to trick the server into making unintended requests. Recommendations: For version...

PT-2025-23002 · Unknown · Volunteer Sign Up Sheets

Name of the Vulnerable Software and Affected Versions: Volunteer Sign Up Sheets versions prior to 5.5.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject...

PT-2025-22959 · Unknown · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /admin/view-patient.php. The manipulation of the viewid argument leads to SQL injection. The attack may be...

PT-2025-23041 · Netalertx · Netalertx

Name of the Vulnerable Software and Affected Versions: NetAlertX version 25.4.13 and earlier Description: NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without...

PT-2025-23014 · Unknown · Phpgurukul News Portal Project

Name of the Vulnerable Software and Affected Versions: PHPGurukul News Portal Project version 4.1 Description: A critical issue has been found in the PHPGurukul News Portal Project, affecting an unknown functionality of the file /admin/add-category.php. The manipulation of the Category argument...

PT-2025-23046 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 12.0 Description: The issue allows an authenticated user to obtain sensitive information due to an incorrect authentication check. Recommendations: For IBM Security Guardium version 12.0, consider restricting...