PT-2025-24077 · WordPress · Simple History

Name of the Vulnerable Software and Affected Versions: The Simple History plugin for WordPress versions prior to 5.8.1 Description: The issue concerns sensitive data exposure due to improper sanitization within the append debug info to context function when Detective Mode is enabled. This allows...

PT-2025-24313 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical issue was found in the HTTP POST Request Handler component, specifically in the file /boafrm/formWsc. The manipulation of the submit-url argument leads to a buffer overflow. Th...

PT-2025-24319 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5232 B20210713 Description: A critical issue has been found in the HTTP POST Request Handler component, affecting the processing of the file /boafrm/formWlanRedirect. The manipulation of the redirect-url...

PT-2025-23990 · Unknown · Phpgurukul Human Metapneumovirus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description: A critical issue has been identified in the system, affecting an unknown functionality of the file /new-user-testing.php. The manipulation of the state argume...

PT-2025-24106 · Unknown · Bang Tinh Vay

Name of the Vulnerable Software and Affected Versions: Bang tinh vay versions n/a through 1.0.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack

When verifying signatures with X509 certificate validation turned off and HMAC shared secret set signxml.XMLVerifier.verifyrequirex509=False, hmackey=..., prior versions of SignXML are vulnerable to a potential algorithm confusion attack. Unless the user explicitly limits the expected signature...

PT-2025-23981 · Unknown · Brilliance Golden Link Secondary System

Name of the Vulnerable Software and Affected Versions: Brilliance Golden Link Secondary System up to 20250424 Description: A critical issue was found in the Brilliance Golden Link Secondary System. The problem affects the file /storagework/rentChangeCheckInfoPage.htm and is related to the...

PT-2025-24061 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical issue affects some unknown functionality of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the submit-url argument leads to buffer...

PT-2025-23934 · Unknown · Phpgurukul Auto Taxi Stand Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Auto Taxi Stand Management System version 1.0 Description: A critical issue has been identified, affecting the file /admin/search-autoortaxi.php. The manipulation of the searchdata argument leads to SQL injection. This issue can be...

PT-2025-23916

Name of the Vulnerable Software and Affected Versions PHPGurukul Complaint Management System version 2.0 Description A critical issue was found in the PHPGurukul Complaint Management System, affecting an unknown part of the file /admin/edit-subcategory.php. The manipulation of the subcategory...

PT-2025-23985 · Code Projects · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue affects some unknown processing of the file /Admin/User.php. The manipulation of the txtUserName argument leads to SQL injection. The attack may be...

PT-2025-23971 · Unknown · Campcodes Online Recruitment Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Recruitment Management System version 1.0 Description: A critical issue affects the processing of the file "/admin/ajax.php?action=save application". The manipulation of the position id argument leads to SQL injection. The...

PT-2025-23892

Name of the Vulnerable Software and Affected Versions llama index versions prior to 0.12.28 Description Multiple vector store integrations in run-llama/llama index have SQL injection vulnerabilities, allowing an attacker to read and write data using SQL. This could lead to unauthorized access to...

PT-2025-23983 · Unknown · Brilliance Golden Link Secondary System

Name of the Vulnerable Software and Affected Versions: Brilliance Golden Link Secondary System up to 20250424 Description: A critical vulnerability was found in the Brilliance Golden Link Secondary System. The issue affects an unknown function of the file /sysframework/logSelect.htm. The...

PT-2025-23915 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 2.0 Description: A critical issue was found in the PHPGurukul Complaint Management System, affecting some unknown functionality of the file /admin/edit-state.php. The manipulation of the...

PT-2025-23895 · WordPress · Wp User Frontend Pro

Name of the Vulnerable Software and Affected Versions: WP User Frontend Pro plugin for WordPress versions up to, and including, 4.1.3 Description: The issue is related to insufficient file path validation in the delete avatar ajax function, allowing authenticated attackers with Subscriber-level...

The vulnerability of the getServerPayload method in the HPE StoreOnce VSA storage virtualized system allows a attacker to disclose protected information.

The vulnerability of the getServerPayload method in the HPE StoreOnce VSA storage virtualized environment is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose protected information from ...

PT-2025-23917 · WordPress · Hypercomments

Name of the Vulnerable Software and Affected Versions: HyperComments plugin for WordPress versions up to, and including, 1.2.2 Description: The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability...

PT-2025-23941 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Medical Card Generation System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /admin/readenq.php. The manipulation of the ID argument leads to SQL injection. This issue can be...

PT-2025-23942 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Medical Card Generation System version 1.0 Description: A critical issue was found in the PHPGurukul Medical Card Generation System. This issue affects the file /admin/unreadenq.php and is related to the manipulation of the ID...