PT-2025-19344 · Unknown · Sourcecodester/Oretnom23 Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester/oretnom23 Stock Management System. This affects an unknown part of the file /admin/?page=purchase order/view po...

PT-2025-19731 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the devname parameter in the reset wifi function. Recommendations: For version 1.0.2.26, consider restricting acces...

PT-2025-19733 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the ifname parameter in the apcli wps gen pincode function. This allows for potential exploitation. Recommendations...

PT-2025-19805 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: A SQL injection issue was discovered in the admin manager.php component. Recommendations: For SeaCMS version 13.3, update to a version that fixes the SQL injection vulnerability in the admin manager.php...

PT-2025-19729 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: foxcms version 1.2.5 Description: The issue is a SQL injection vulnerability via the executeCommand method in DataBackup.php. This vulnerability allows for potential SQL injection attacks. Recommendations: For foxcms version 1.2.5, consider...

PT-2025-19775 · Unknown · Itranswarp

Name of the Vulnerable Software and Affected Versions: itranswarp version 2.19 Description: An issue in the component /manage/ of itranswarp allows attackers to bypass authentication via a crafted request. Recommendations: For version 2.19, consider restricting access to the /manage/ component...

PT-2025-19806 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: A SQL injection issue was discovered in the admin topic.php component. Recommendations: For SeaCMS version 13.3, update to a version that fixes the SQL injection vulnerability in the admin topic.php component...

PT-2025-19708 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web Based Pharmacy Product Management System version 1.0 Description: The issue concerns Cross Site Scripting XSS in the add-admin.php file via the Fullname text field. This allows for potential malicious script injection...

PT-2025-19771 · Misskey · Misskey

Name of the Vulnerable Software and Affected Versions: Misskey versions 12.31.0 through 2025.4.0 Description: The issue is related to missing validation in Mk:api, which allows malicious AiScript code to access additional endpoints that it isn't designed to have access to. This is achieved by...

PT-2025-19727 · Shenzhen Sixun · Sixun Shanghui Group Business Management System

Name of the Vulnerable Software and Affected Versions: Shenzhen Sixun Software Sixun Shanghui Group Business Management System version 7 Description: A vulnerability was found in the system, affecting an unknown part of the file "/api/GylOperator/LoadData". The manipulation leads to information...

PT-2025-19808 · Unknown · Phpgurukul Men Salon Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 2.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /admin/change-password.php. This issue leads to SQL injection and can be initiated remotely...

PT-2025-19350 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.374 Description: A vulnerability was found in the Config Handler component of the TOTOLINK A720R, affecting an unknown function of the file /cgi-bin/cstecgi.cgi. The manipulation of the topicurl argument with th...

PT-2025-19748 · Unknown · Retrieval-Based-Voice-Conversion-Webui

Name of the Vulnerable Software and Affected Versions: Retrieval-based-Voice-Conversion-WebUI versions 2.2.231006 and prior Description: Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. The ckpt path2 variable takes user input, such as a path to a model, and...

PT-2025-19370 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.374 Description: A vulnerability was found in the TOTOLINK A720R, affecting an unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the topicurl argument with the input showSyslog leads to...

PT-2025-19705 · Mechrevo · Mechrevo Control Console

Name of the Vulnerable Software and Affected Versions: Mechrevo Control Console version 1.0.2.70 Description: A critical issue affects an unknown functionality in the library C:Program FilesOEMMECHREVO Control CenterUniwillServiceMyControlCentercsCAPI.dll of the component GCUService. The...

PT-2025-19340 · Unknown · Phpgurukul Emergency Ambulance Hiring Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description: A critical vulnerability was found in the PHPGurukul Emergency Ambulance Hiring Portal. The issue affects an unknown functionality of the file /admin/contact-us.php. The...

PT-2025-19747 · Unknown · Retrieval-Based-Voice-Conversion-Webui

Name of the Vulnerable Software and Affected Versions: Retrieval-based-Voice-Conversion-WebUI versions 2.2.231006 and prior Description: Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. The variables exp dir1, among others, take user input and pass it to the cli...

PT-2025-19884 · Dell · Dell Storage Center +1

Name of the Vulnerable Software and Affected Versions: Dell Storage Center - Dell Storage Manager version 20.1.20 Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as 'Command Injection'. This could allow a low-privileged attacker wi...

PT-2025-19758 · Unknown · Sourcecodester/Oretnom23 Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A vulnerability has been found in the SourceCodester/oretnom23 Stock Management System, classified as problematic. This issue affects unknown code of the file...

PT-2025-19762 · Unknown · Sourcecodester/Oretnom23 Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A critical issue affects the processing of the file /classes/Login.php?f=login, where the manipulation of the Username argument leads to SQL injection. The attack can b...