PT-2025-27422 · D Link · D-Link Di-7300G+

Name of the Vulnerable Software and Affected Versions: D-Link DI-7300G+ version 19.12.25A1 Description: A critical issue has been found in the D-Link DI-7300G+ router, affecting some unknown functionality of the file in proxy client.asp. The manipulation of the proxy srv, proxy lanport, proxy...

PT-2025-27008 · Openmns · Opennms Meridian +1

Name of the Vulnerable Software and Affected Versions: OpenMNS Horizon versions 33.0.8 through 33.1.5 OpenMNS Meridian versions prior to 2024.2.6 Description: Multiple stored XSS issues were found in OpenMNS Horizon due to unsanitized parameters on different nodes, allowing an attacker to store a...

PT-2025-27022 · Unknown · Juzawebcms

Name of the Vulnerable Software and Affected Versions: juzaweb CMS version 3.4.2 Description: A critical vulnerability has been found in juzaweb CMS, affecting an unknown function of the file /admin-cp/imports of the component Import Page. The manipulation leads to improper authorization. It is...

PT-2025-27000 · Xuxueli · Xuxueli Xxl-Sso

Name of the Vulnerable Software and Affected Versions: Xuxueli xxl-sso version 1.1.0 Description: A problematic issue has been found in the software, affecting the processing of the file /xxl-sso-server/doLogin. The manipulation of the redirect url argument leads to an open redirect. This issue c...

PT-2025-26981 · Unknown · Labredescefetrj Wegia

Name of the Vulnerable Software and Affected Versions: LabRedesCefetRJ WeGIA version 3.4.0 Description: A vulnerability was found in the Cadastro de Atendio component, specifically in the file /html/atendido/Cadastro Atendido.php. The manipulation of the Nome/Sobrenome argument leads to cross-sit...

PT-2025-27001 · Unknown · Linlinjava Litemall

Name of the Vulnerable Software and Affected Versions: linlinjava litemall version 1.8.0 Description: A problematic issue was found in the software, affecting an unknown function of the file /wx/comment/post. The manipulation of the adminComment argument leads to improper authorization, allowing...

PT-2025-26876 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-PoE version 6.2c.884 Description: A critical issue affects the setUpgradeUboot function of the upgrade.so file, allowing os command injection through the manipulation of the FileName argument. This can be exploited remotely...

PT-2025-26866

Name of the Vulnerable Software and Affected Versions: OpenBao versions prior to 2.3.0 Description: OpenBao is a software solution for managing, storing, and distributing sensitive data, including secrets, certificates, and keys. The issue allows an attacker to perform unauthenticated, unaudited...

PT-2025-26858 · Unknown · Registrator

Name of the Vulnerable Software and Affected Versions: Registrator versions prior to 1.9.5 Description: The issue concerns a GitHub app that automates creation of registration pull requests for julia packages. If the clone URL returned by GitHub is malicious, an argument injection is possible in...

PT-2025-26827 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue was found in the system, affecting the /panel/edit-staff.php file. The manipulation of the editid argument leads to SQL injection. This issue can be exploit...

PT-2025-26873 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-PoE version 6.2c.884 Description: A critical issue was found, affecting the setUpgradeFW function of the upgrade.so file. The manipulation of the FileName argument leads to os command injection. This issue can be exploited...

PT-2025-28083 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical issue affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component webs. The manipulation of the argument pppUserName leads to stack-based buffer overflow...

PT-2025-26839 · Unknown · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Management System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /admin/editempprofile.php. The manipulation of the FirstName argument leads to SQL injection. It is possib...

PT-2025-26828 · Unknown · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /panel/add-services.php. The manipulation of the Type argument leads to SQL injection. Th...

PT-2025-26831 · Unknown · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue was found in the software. It affects an unknown function of the file /panel/stock.php. The manipulation of the ID argument leads to SQL injection. This iss...

PT-2025-26834 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file /panel/edit-services.php. The manipulation of the editid argument leads to SQ...

PT-2025-26820 · Unknown · Plc Designer V4

Name of the Vulnerable Software and Affected Versions: PLC Designer V4 Description: A local, low-privileged attacker can learn the password of the connected controller due to an incorrect implementation that results in the password being displayed in plain text under special conditions...

PT-2025-26833 · Unknown · Student Record System Using Php/Mysql

Name of the Vulnerable Software and Affected Versions: Student Record system Using PHP and MySQL version 3.20 Description: The issue allows a remote attacker to obtain sensitive information via a crafted payload to the cshortname, cfullname, and cdate variables. This is a SQL Injection...

PT-2025-26826 · Unknown · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /panel/add-staff.php. The manipulation of the Name argument leads to SQL injection. It is possibl...

PT-2025-28079 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical issue affects the function formiNICWpsStart of the file /goform/formiNICWpsStart in the webs component. The manipulation of the pinCode argument leads to a stack-based buffer overflow. Th...