PT-2025-20387 · Slims · Slims

Name of the Vulnerable Software and Affected Versions: Slims Senayan Library Management Systems version 9.6.1 Description: The issue is related to SQL Injection in the admin/modules/master file/author.php file. This allows for potential exploitation. No information is provided about the estimated...

PT-2025-20425 · Ibm · Ibm Cics Tx Standard +1

Name of the Vulnerable Software and Affected Versions: IBM CICS TX Standard versions 11.1 IBM CICS TX Advanced versions 10.1 through 11.1 Description: The issue is due to the failure to handle DNS return requests by the gethostbyaddr function, which could allow a local user to execute arbitrary...

PT-2025-20324 · WordPress · The Wolmart | Multi-Vendor Marketplace Woocommerce Theme

Name of the Vulnerable Software and Affected Versions: Wolmart | Multi-Vendor Marketplace WooCommerce Theme versions 1.8.11 and earlier Description: The issue is related to arbitrary shortcode execution due to the software allowing users to execute an action that does not properly validate a valu...

PT-2025-20427 · Ibm · Ibm Cics Tx Standard +1

Name of the Vulnerable Software and Affected Versions: IBM CICS TX Standard version 11.1 IBM CICS TX Advanced versions 10.1 through 11.1 Description: The issue allows a local user to execute arbitrary code on the system due to the unsafe use of the gets function. Recommendations: For IBM CICS TX...

PT-2025-20423 · Unknown · Grocery-Cms-Php-Restful-Api

Name of the Vulnerable Software and Affected Versions: Grocery-CMS-PHP-Restful-API version 1.3 Description: The issue concerns a file upload vulnerability via the "/admin/add-category.php" API endpoint. This allows for potential malicious file uploads. Recommendations: For...

PT-2025-20386 · Slims · Slims

Name of the Vulnerable Software and Affected Versions: Slims Senayan Library Management Systems version 9.6.1 Description: The issue is related to SQL Injection in the admin/modules/master file/item status.php file. This allows for potential exploitation. No information is provided about the...

PT-2025-20397 · Openstack +1 · Openstack Ironic +1

Name of the Vulnerable Software and Affected Versions: OpenStack Ironic versions prior to 24.1.3 OpenStack Ironic versions prior to 26.1.1 OpenStack Ironic versions prior to 29.0.1 Description: The issue allows a malicious project assigned as a node owner to provide a path to any local file...

PT-2025-20439 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 Description: A critical issue affects the formSetWAN Wizard55 function, where manipulation of the curTime argument leads to a buffer overflow. This can be initiated remotely. The vendor was contacted about this...

PT-2025-20420 · Totolink · Totolink A950Rg

Name of the Vulnerable Software and Affected Versions: TOTOlink A950RG version 4.1.2cu.5204 B20210112 Description: The issue arises from improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of the /lib/cste modules/system.so module. This leads to a buffer overflow...

PT-2025-20364 · WordPress · Wp Seo Structured Data Schema

Name of the Vulnerable Software and Affected Versions: WP SEO Structured Data Schema plugin for WordPress versions up to and including 2.7.11 Description: The issue is related to Stored Cross-Site Scripting via the Price Range parameter, which is caused by insufficient input sanitization and outp...

CVE-2025-20151 Cisco IOS and IOS XE Software SNMPv3 Configuration Restriction Vulnerability

A vulnerability in the implementation of the Simple Network Management Protocol Version 3 SNMPv3 feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to poll an affected device using SNMP, even if the device is configured to deny SNMP traffic from ...

PT-2025-20287 · Unknown · Pws Personal Weather Station Dashboard

Name of the Vulnerable Software and Affected Versions: Personal Weather Station Dashboard version 12 lts Description: The issue allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to "/others/ test.php". This can be exploited to read...

PT-2025-20203 · Elementor +1 · Elementor +1

Name of the Vulnerable Software and Affected Versions: Zoho CRM with Elementor form versions 1.0.0 through 1.0.7 Description: The issue is related to a URL Redirection to Untrusted Site 'Open Redirect' vulnerability in the formsintegrations Integrations of Zoho CRM with Elementor form, which allo...

PT-2025-20028 · Rt · Rt-Labs P-Net

Name of the Vulnerable Software and Affected Versions: RT-Labs P-Net versions 1.0.1 and earlier Description: An out-of-bounds write in the library allows an attacker to corrupt the memory of IO devices by sending a malicious RPC packet. This issue can be exploited by sending a specifically crafte...

PT-2025-20025 · Rt · Rt-Labs P-Net

Name of the Vulnerable Software and Affected Versions: RT-Labs P-Net versions 1.0.1 and earlier Description: A heap-based buffer overflow in RT-Labs P-Net allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet. Recommendations: For RT-Labs...

PT-2025-20282 · Sma100 · Sma100

Name of the Vulnerable Software and Affected Versions: SMA100 versions 10.2.1.14-75sv and earlier Description: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to inject a path traversal sequence, making any directory on the SMA appliance writable...

PT-2025-20067 · WordPress · Frontend Dashboard

Name of the Vulnerable Software and Affected Versions: Frontend Dashboard plugin for WordPress versions 1.0 through 2.2.6 Description: The Frontend Dashboard plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the fed wp ajax fed login form post functio...

PT-2025-20072 · Lemeconsultoria · Galera.App

Name of the Vulnerable Software and Affected Versions: lemeconsultoria HCM galera.app version 4.58.0 Description: The issue allows an attacker to execute arbitrary code through multiple components, including Strategic Planning Perspective Registration, Training Request, Perspective Editing,...

PT-2025-19897 · WordPress · Search Exclude

Name of the Vulnerable Software and Affected Versions: Search Exclude plugin for WordPress versions up to, and including, 2.4.9 Description: The issue allows unauthorized modification of data due to a missing capability check on the get rest permission function. This makes it possible for...

PT-2025-19910 · Unknown · Cardealerpress

Name of the Vulnerable Software and Affected Versions: CarDealerPress versions up to, and including, 6.7.2504.00 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with Contributor-level...