PT-2025-26257 · Code Projects · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hostel Management System version 1.0 Description: A critical issue affects the processing of the file /contact manager.php, where the manipulation of the student roll no argument leads to SQL injection. The attack can be initiat...

PT-2025-26450 · Unknown · Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Pizza Ordering System version 1.0 Description: A critical issue affects the processing of the file /addmem.php, leading to sql injection. The attack may be initiated remotely. Recommendations: For version 1.0, consider...

PT-2025-26451 · Unknown · Code-Projects Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Code-Projects Simple Pizza Ordering System version 1.0 Description: A critical issue was found in the Simple Pizza Ordering System. It affects an unknown function of the file /paymentportal.php. The manipulation of the person argument leads t...

PT-2025-26447

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Hotel Reservation System version 1.0 Description: A critical issue has been found, affecting the /admin/execeditroom.php file, where the manipulation of the userid argument leads to SQL injection. This issue can be...

PT-2025-26464 · Unknown · Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Simple Pizza Ordering System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /portal.php. The manipulation of the ID argument leads to SQL injection. This issue can be exploited remotely...

PT-2025-26453 · Unknown · Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Simple Pizza Ordering System version 1.0 Description: A critical issue was found in the Simple Pizza Ordering System. The problem affects an unknown functionality of the file /saveorder.php. The manipulation of the ID argument leads to SQL...

PT-2025-26470 · Unknown · Hobbesosr Kitten

Name of the Vulnerable Software and Affected Versions: HobbesOSR Kitten versions up to c4f8b7c3158983d1020af432be1b417b28686736 Description: A critical issue was found, affecting the function set pte at in the library /include/arch-arm64/pgtable.h. This issue leads to resource consumption...

PT-2025-26370 · Unknown · Csv Importer Improved

Name of the Vulnerable Software and Affected Versions: CSV Importer Improved versions 0.6.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-26296 · Scriptandtools · Scriptandtools Real Estate Management System

Name of the Vulnerable Software and Affected Versions: ScriptAndTools Real Estate Management System version 1.0 Description: A critical issue affects the unknown processing of the file userdelete.php of the component User Delete Handler in ScriptAndTools Real Estate Management System. The...

PT-2025-26383 · Spoki · Spoki

Name of the Vulnerable Software and Affected Versions: Spoki versions through 2.16.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious scripts into w...

PT-2025-26291 · Unknown · Phpgurukul Pre-School Enrollment System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Pre-School Enrollment System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Pre-School Enrollment System. The issue is related to an unknown function of the file /admin/add-class.php, where the...

PT-2025-26268 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue was found in the PHPGurukul Employee Record Management System. The problem affects the file /admin/editempeducation.php, where the manipulation of the yopg...

PT-2025-26399 · Unknown · Atakan Au Automatically Hierarchic Categories In Menu

Name of the Vulnerable Software and Affected Versions: Atakan Au Automatically Hierarchic Categories in Menu versions 2.0.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS...

CVE-2025-23173

The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI. By default, the websockify service is exposed on port 6080 and accessible from the internet. This exposure introduces significant risk, as websockify has known...

PT-2025-26231 · Powsybl · Powsybl

Name of the Vulnerable Software and Affected Versions: PowSyBl versions prior to 6.7.2 Description: The issue concerns an XML external entity XXE attack and a server-side request forgery SSRF attack in certain places of powsybl-core XML parsing. This allows an attacker to elevate their privileges...

PT-2025-26213 · WordPress · Wpbakery Page Builder

Name of the Vulnerable Software and Affected Versions: WPBakery Page Builder for WordPress versions up to, and including, 8.4.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Grid Builder feature due to insufficient input sanitization and output escaping on...

PT-2025-26239 · Unknown · Brilliance Golden Link Secondary System

Name of the Vulnerable Software and Affected Versions: Brilliance Golden Link Secondary System versions up to 20250609 Description: A critical issue has been found in the Brilliance Golden Link Secondary System, affecting an unknown part of the file /storagework/custTakeInfoPage.htm. The...

PT-2025-26209 · WordPress · Football-Pool

Name of the Vulnerable Software and Affected Versions: Football Pool plugin for WordPress versions up to, and including, 2.12.4 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows authenticated...

PT-2025-26218 · Unknown · Zhilink Adp Application Developer Platform

Name of the Vulnerable Software and Affected Versions: zhilink ADP Application Developer Platform version 1.0.0 Description: A critical issue affects the processing of the file /adpweb/a/base/barcodeDetail/. The manipulation of the argument barcodeNo/barcode/itemNo leads to SQL injection. The...

PT-2025-26217

Name of the Vulnerable Software and Affected Versions Yirmibes Software MY ERP versions prior to 1.170 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendatio...