PT-2025-17474 · Unknown · Yxj2018 Springboot-Vue-Onlineexam

Name of the Vulnerable Software and Affected Versions: YXJ2018 SpringBoot-Vue-OnlineExam version 1.0 Description: A vulnerability has been found in YXJ2018 SpringBoot-Vue-OnlineExam, affecting some unknown processing of the component API. The manipulation leads to improper authentication. The...

PT-2025-17506 · Codepeople · Codepeople Appointment Booking Calendar

Name of the Vulnerable Software and Affected Versions: codepeople Appointment Booking Calendar versions 1.3.92 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows SQL Injection in the codepeople Appointment Booking Calendar...

PT-2025-17562 · Unknown · Hospital Management System +1

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4.0 Description: The issue is related to an arbitrary file upload vulnerability in the /jquery-file-upload/server/php/index.php component. This allows an unauthenticated attacker to upload any file to the...

PT-2025-17592 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 version A2V1.1.0B05 Description: A command injection was found in the /goform/delRouting endpoint of the D-Link DIR-816. This issue poses a high risk to users, who are urged to update their firmware as soon as possible to secur...

PT-2025-17544 · Unknown · Rollback Rx Professional

Name of the Vulnerable Software and Affected Versions: Rollback Rx Professional version 12.8.0.0 Description: The issue allows local users to cause a denial of service due to a null pointer dereference from IOCtl 0x96202000 in the driver file shieldm.sys. Recommendations: For Rollback Rx...

PT-2025-17443 · Opentext · Opentext Content Management

Name of the Vulnerable Software and Affected Versions: OpenText Content Management CE versions 20.2 through 25.1 Description: The issue allows authenticated malicious users to inject code into the system through a Stored XSS in Discussions. This affects OpenText Content Management CE on both...

PT-2025-17468

Name of the Vulnerable Software and Affected Versions markparticle WebServer version 1.0 Description A critical issue was found in the Registration component of markparticle WebServer, affecting an unknown functionality of the file code/http/httprequest.cpp. The manipulation of the...

PT-2025-17452 · Opencms · Opencms

Name of the Vulnerable Software and Affected Versions: opencms version 2.3 Description: The issue allows for Arbitrary file read in the src/main/webapp/view/admin/document/dataPage.jsp file. Recommendations: For opencms version 2.3, as a temporary workaround, consider restricting access to the...

PT-2025-17462 · Panhainan · Ds-Java

Name of the Vulnerable Software and Affected Versions: panhainan DS-Java version 1.0 Description: A critical issue affects the function uploadUserPic.action of the file src/com/phn/action/FileUpload.java. The manipulation of the argument fileUpload leads to code injection. The attack may be...

PT-2025-17456 · Qi Anxin · Qi-Anxin Tianqing Endpoint Security Management System

Name of the Vulnerable Software and Affected Versions: Qi-ANXIN Tianqing Endpoint Security Management System version 10.0 Description: The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System allows users to restore malicious files to arbitrary file paths...

PT-2025-17429 · Joomla · Virtuemart

Name of the Vulnerable Software and Affected Versions: VirtueMart component versions 1.0.0 through 4.4.7 for Joomla Description: A SQL injection in the VirtueMart component for Joomla allows authenticated attackers, specifically administrators, to execute arbitrary SQL commands in the product...

PT-2025-17471 · Unknown · Yxj2018 Springboot-Vue-Onlineexam

Name of the Vulnerable Software and Affected Versions: YXJ2018 SpringBoot-Vue-OnlineExam version 1.0 Description: A vulnerability was found in YXJ2018 SpringBoot-Vue-OnlineExam, affecting unknown code of the file "/api/studentPWD". The manipulation of the studentId argument leads to unverified...

PT-2025-22291 · Unknown · Fw-Wgs-804Hpt

Name of the Vulnerable Software and Affected Versions: FW-WGS-804HPT version 1.305b241111 Description: A stack overflow issue was discovered via the radIpkey parameter in the web radiusSrv post function. Recommendations: For FW-WGS-804HPT version 1.305b241111, consider restricting access to the w...

PT-2025-22303 · Unknown · Fw-Wgs-804Hpt

Name of the Vulnerable Software and Affected Versions: FW-WGS-804HPT version 1.305b241111 Description: A stack overflow issue was discovered via the host ip parameter in the web snmp v3host add post function. Recommendations: For FW-WGS-804HPT version 1.305b241111, consider restricting access to...

PT-2025-22304 · Unknown · Fw-Wgs-804Hpt

Name of the Vulnerable Software and Affected Versions: FW-WGS-804HPT version 1.305b241111 Description: A stack overflow issue was discovered via the radDftParamKey parameter in the web radiusSrv dftParam post function. Recommendations: For FW-WGS-804HPT version 1.305b241111, consider disabling th...

PT-2025-17411 · Unknown · Phpgurukul Men Salon Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 1.0 Description: A critical issue was found in the PHPGurukul Men Salon Management System. The problem is related to an unknown function of the file /admin/sales-reports-detail.php. The...

PT-2025-17409 · Unknown · Phpgurukul Men Salon Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Men Salon Management System. This issue affects unknown code of the file /admin/forgot-password.php. The manipulation of...

PT-2025-17412 · Unknown · Kuangsimplebbs

Name of the Vulnerable Software and Affected Versions: KuangSimpleBBS version 1.0 Description: A critical vulnerability has been found in KuangSimpleBBS, affecting the fileUpload function in the QuestionController.java file. The manipulation of the editormd-image-file argument leads to unrestrict...

PT-2025-17417 · Knowbe4 · Knowbe4 Security Awareness Training

Name of the Vulnerable Software and Affected Versions: KnowBe4 Security Awareness Training versions prior to 2020-01-10 Description: The issue allows reflected XSS. The response has a SCRIPT element that sets window.location.href to a JavaScript URL. Recommendations: For versions prior to...

PT-2025-17415 · Unknown · Commons-Jxpath +1

Name of the Vulnerable Software and Affected Versions: Convertigo versions 8.3.4 and earlier Description: The issue is related to the TwsCachedXPathAPI in Convertigo, which does not restrict the use of commons-jxpath APIs. Recommendations: For versions 8.3.4 and earlier, consider restricting acce...