PT-2025-14820 · Unknown · Phpgurukul E-Diary Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1.0 Description: A critical issue has been discovered in the /add-notes.php file, where manipulation of the Category argument leads to SQL injection. The attack can be initiated remotely. An exploi...

PT-2025-15021 · WordPress · Post To Social Media – Wordpress To Hootsuite

Name of the Vulnerable Software and Affected Versions: Post to Social Media – WordPress to Hootsuite versions 1.5.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performi...

PT-2025-14943 · Unknown · Jakub Glos Sparkle Elementor Kit

Name of the Vulnerable Software and Affected Versions: Jakub Glos Sparkle Elementor Kit versions 2.0.9 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local...

PT-2025-14866 · Unknown · Phpgurukul E-Diary Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /dashboard.php. The manipulation of the Category argument leads to SQL injection. This issu...

PT-2025-14909 · Unknown · Xujiangfei Admintwo

Name of the Vulnerable Software and Affected Versions: xujiangfei admintwo version 1.0 Description: A vulnerability was found in the processing of the file /ztree/insertTree, where the manipulation of the Name argument leads to cross-site scripting. The attack may be initiated remotely...

PT-2025-14853 · M Files · M-Files Server Admin Tool

Name of the Vulnerable Software and Affected Versions: M-Files Server Admin tool versions prior to 25.3.14681.7 Description: The issue concerns a stored XSS in the desktop UI of the M-Files Server Admin tool. This allows authenticated local users to execute scripts through the UI. Recommendations...

PT-2025-14890 · WordPress · Woffice Crm Theme

Name of the Vulnerable Software and Affected Versions: Woffice CRM theme for WordPress versions up to, and including, 5.4.21 Description: The issue is due to a misconfiguration of excluded roles during registration, making it possible for unauthenticated attackers to register with an Administrato...

PT-2025-15041 · Unknown · Phpgurukul E-Diary Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1.0 Description: A critical issue was found in the PHPGurukul e-Diary Management System, affecting an unknown functionality of the file "add-category.php". The manipulation of the Category argument...

PT-2025-14849 · WordPress · Product Filter By Wbw

Name of the Vulnerable Software and Affected Versions: Product Filter by WBW plugin for WordPress versions up to, and including, 2.7.9 Description: The issue allows unauthenticated attackers to perform time-based SQL Injection via the filtersDataBackend parameter due to insufficient escaping of...

PT-2025-14877 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue has been discovered, affecting an unknown function of the file /search-request.php. The manipulation of the searchdata argument leads to SQL injection. It is...

PT-2025-16693

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for this issue Description A vulnerability in the Linux kernel has been resolved, which prevented multiple calls in a row to napi disable, causing a hang. The issue occurred when...

PT-2025-15036 · Unknown · Xujiangfei Admintwo

Name of the Vulnerable Software and Affected Versions: xujiangfei admintwo version 1.0 Description: A problematic issue has been found in xujiangfei admintwo, affecting an unknown part of the file /user/updateSet. The manipulation leads to cross-site request forgery. It is possible to initiate th...

PT-2025-15044 · Qinguoyi · Qinguoyi Tinywebserver

Name of the Vulnerable Software and Affected Versions: qinguoyi TinyWebServer version 1.0 Description: A vulnerability has been found in qinguoyi TinyWebServer, classified as critical. This issue affects unknown code of the file http/http conn.cpp. The manipulation of the argument m url real lead...

PT-2025-14908 · Unknown · Xujiangfei Admintwo

Name of the Vulnerable Software and Affected Versions: xujiangfei admintwo version 1.0 Description: A vulnerability has been found in xujiangfei admintwo, classified as problematic. This issue affects the file /resource/add and is related to the manipulation of the Name argument, leading to...

PT-2025-14837 · Code Projects · Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 code-projects Patient Record Management System version 3.1 Description: A critical issue was found in the Patient Record Management System. The manipulation of the itr no argument in...

PT-2025-15046

Name of the Vulnerable Software and Affected Versions Apache Airflow Common SQL Provider versions prior to 1.24.1 Description The issue is related to an SQL Injection vulnerability in the Apache Airflow Common SQL Provider. This vulnerability allows an authenticated UI user to inject arbitrary SQ...

PT-2025-14878 · WordPress · Epc Ez Form Calculator

Name of the Vulnerable Software and Affected Versions: EPC ez Form Calculator - WordPress plugin versions 2.14.1.2 and earlier Description: The issue affects the EPC ez Form Calculator - WordPress plugin, allowing Reflected XSS due to improper neutralization of input during web page generation...

PT-2025-14904 · Unknown · Elunez Eladmin

Name of the Vulnerable Software and Affected Versions: elunez eladmin version 2.7 Description: A problematic issue has been found in the Maintenance Management Module, affecting some unknown functionality of the file "/api/database/testConnect". This issue leads to deserialization and can be...

PT-2025-14843 · Code Projects · Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue affects an unknown functionality of the file /birthing pending.php. The manipulation of the birth id argument leads to SQL injection. The attack may be...

Incorrect Authorization

Overview org.webjars.npm:vite is a Native-ESM powered web dev build tool Affected versions of this package are vulnerable to Incorrect Authorization via the bypass of the server.fs.deny restriction. An attacker can access restricted files by appending ?.svg with ?.wasm?init or with sec-fetch-dest...