PT-2025-17193 · Quentn Wp · Quentn Wp

Name of the Vulnerable Software and Affected Versions: Quentn WP versions 1.2.8 and earlier Description: The issue is related to an SQL Injection flaw, which is caused by the improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations...

PT-2025-17116 · WordPress · Wp Debug Toggle

Name of the Vulnerable Software and Affected Versions: WP DEBUG Toggle versions n/a through 1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in the WP DEBUG Toggle plugin...

PT-2025-16988 · WordPress · Wp Sticky Side Buttons

Name of the Vulnerable Software and Affected Versions: WP Sticky Side Buttons versions n/a through 2.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

PT-2025-17232 · Twonav · Twonav

Name of the Vulnerable Software and Affected Versions: twonav version 2.1.18-20241105 Description: The issue allows a remote attacker to obtain sensitive information via the site settings component. Recommendations: For twonav version 2.1.18-20241105, consider restricting access to the site...

PT-2025-17201 · Jetbrains · Rubymine

Name of the Vulnerable Software and Affected Versions: JetBrains RubyMine versions prior to 2025.1 Description: The issue concerns JetBrains RubyMine, where the remote Interpreter overwrote ports to listen on all interfaces. This could potentially lead to security risks. No information is provide...

PT-2025-17083 · Unknown · Videowhisper Paid Videochat Turnkey Site

Name of the Vulnerable Software and Affected Versions: videowhisper Paid Videochat Turnkey Site versions n/a through 7.3.11 Description: The issue is related to a Weak Password Recovery Mechanism for Forgotten Password, which allows password recovery exploitation. Recommendations: For versions n/...

PT-2025-17030 · WordPress · Autoglot – Automatic Wordpress Translation

Name of the Vulnerable Software and Affected Versions: Autoglot – Automatic WordPress Translation versions n/a through 2.4.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in...

PT-2025-17158 · Unknown · Solace Extra

Name of the Vulnerable Software and Affected Versions: Solace Extra versions 1.3.1 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For versions 1.3.1 and earlier, consider restricting file...

PT-2025-17165 · Unknown · Hive Support

Name of the Vulnerable Software and Affected Versions: Hive Support versions 1.2.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in Hive Support. Recommendations: For...

PT-2025-17243 · Unknown · A-Blog Cms

Name of the Vulnerable Software and Affected Versions: a-blogcms version 3.1.15 Description: An issue in a-blogcms 3.1.15 allows a remote attacker to obtain sensitive information via the /bid/1/admin/entry-edit/ path. Recommendations: At the moment, there is no information about a newer version...

PT-2025-17084 · WordPress · Websitedefender Wp Secure

Name of the Vulnerable Software and Affected Versions: WebsiteDefender wp secure versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-18339 · NetGear · Netgear Ex6120

Name of the Vulnerable Software and Affected Versions: Netgear EX6120 version 1.0.3.94 Description: A critical issue has been found, affecting the sub 30394 function. The manipulation of the host argument leads to a buffer overflow. This issue can be exploited remotely. The vendor was contacted...

PT-2025-17225 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Phone Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Phone Management System. This issue affects the main function of the Password Handler component. The manipulation of...

PT-2025-17235 · Unknown · Prison Management System

Name of the Vulnerable Software and Affected Versions: Personal Management System version 1.4.65 Description: An issue in the Personal Management System allows a remote attacker to obtain sensitive information via the my-contacts-settings component. Recommendations: For version 1.4.65, consider...

PT-2025-16928 · Unknown · Wisdom Master Pro

Name of the Vulnerable Software and Affected Versions: Wisdom Master Pro versions 5.0 through 5.2 Description: A vulnerability in the retrieve course Information function of Wisdom Master Pro allows remote attackers to perform arbitrary system commands by running a malicious file due to improper...

PT-2025-17137 · Unknown · Verowa Connect

Name of the Vulnerable Software and Affected Versions: Verowa Connect versions 3.0.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-17078 · D Link · Dir 832

Name of the Vulnerable Software and Affected Versions: dlink DIR 832x version 240802 Description: The issue allows a remote attacker to execute arbitrary code via the macaddr key value to the function 0x42232c. This enables the attacker to potentially gain control over the device. Recommendations...

PT-2025-17142 · Unknown · Otp-Less One Tap Sign In

Name of the Vulnerable Software and Affected Versions: OTP-less one tap Sign in versions n/a through 2.0.58 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This allows for Reflected XSS in OTP-less one tap...

PT-2025-16997 · Mlanguage · Mlanguage

Name of the Vulnerable Software and Affected Versions: mLanguage versions 1.6.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also...

PT-2025-17125 · Termel · Termel Pdf 2 Post

Name of the Vulnerable Software and Affected Versions: termel PDF 2 Post versions prior to 2.4.0 Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability, which allows Remote Code Inclusion. This means that an attacker could potentially inject...