PT-2025-14585

Name of the Vulnerable Software and Affected Versions PHPGurukul Bus Pass Management System version 1.0 Description A critical issue was found in the PHPGurukul Bus Pass Management System, affecting an unknown part of the file /view-pass-detail.php. The manipulation of the viewid argument leads t...

PT-2025-14623 · Unknown · Project Worlds Online Lawyer Management System

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Lawyer Management System version 1.0 Description: A critical vulnerability was found in the Project Worlds Online Lawyer Management System. This issue affects unknown code of the file /approve lawyer.php. The manipulatio...

PT-2025-14606 · Sourcecodester · Sourcecodester Gym Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Gym Management System version 1.0 Description: A critical issue was found in the SourceCodester Gym Management System, affecting some unknown functionality of the file /signup.php. The manipulation of the user name argument lea...

PT-2025-14630 · Unknown · Projectworlds Online Doctor Appointment Booking System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Doctor Appointment Booking System version 1.0 Description: A critical issue affects the processing of the file /doctor/deleteappointment.php, where the manipulation of the ID argument leads to sql injection. This issue ca...

PT-2025-14605 · Unknown · Itning Student Homework Management System

Name of the Vulnerable Software and Affected Versions: itning Student Homework Management System versions 1.2.7 and earlier Description: A problem has been identified in the system, affecting an unknown functionality. This issue leads to cross-site request forgery, which can be exploited remotely...

PT-2025-14633 · Unknown · Projectworlds Online Doctor Appointment Booking System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Doctor Appointment Booking System version 1.0 Description: A critical issue has been found in the projectworlds Online Doctor Appointment Booking System, affecting some unknown functionality of the file...

PT-2025-14626 · Unknown · Project Worlds Online Lawyer Management System

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Lawyer Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /searchLawyer.php. The manipulation of the experience argument leads to SQL injection...

PT-2025-14580 · Sourcecodester · Sourcecodester Apartment Visitor Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Apartment Visitor Management System version 1.0 Description: A critical issue affects some unknown processing of the file /add-apartment.php. The manipulation of the buildingno argument leads to SQL injection. The attack may be...

PT-2025-14631 · Unknown · Projectworlds Online Doctor Appointment Booking System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Doctor Appointment Booking System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the ic argument in the /doctor/deletepatient.php file. This can be...

PT-2025-14803 · Unknown · Student-Manage

Name of the Vulnerable Software and Affected Versions: student-manage version 1 Description: The issue allows a local attacker to escalate privileges due to insecure permission verification. This is achieved through the unsafe permission verification process. Recommendations: For version 1,...

CVE-2025-24221

This issue was addressed with improved data access restriction. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, visionOS 2.4. Sensitive keychain data may be accessible from an iOS backup...

CVE-2025-30369

Zulip is an open-source team collaboration tool. The API for deleting an organization custom profile field is supposed to be restricted to organization administrators, but its handler failed to check that the field belongs to the same organization as the user. Therefore, an administrator of any...

PT-2025-14511 · Jenkins +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.503 and earlier Jenkins LTS versions 2.492.2 and earlier Description: A missing permission check in Jenkins allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gainin...

PT-2025-14553 · Unknown · Sourcecodester Online Tutor Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tutor Portal version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /tutor/courses/view course.php. The manipulation of the ID argument leads to SQL injection. It is possible to...

PT-2025-14448 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.1 Description: The issue is related to Insecure Inherited Permissions, which could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized access...

PT-2025-14554 · Drupal · Drupal Access Code

Name of the Vulnerable Software and Affected Versions: Drupal Access code versions 0.0.0 through 2.0.3 Description: The issue is related to an Improper Restriction of Excessive Authentication Attempts, which allows for Brute Force attacks. Recommendations: For versions 0.0.0 through 2.0.3, update...

PT-2025-14514 · Jenkins · Jenkins Cadence Vmanager Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Cadence vManager Plugin versions 4.0.0-282.v5096a c2db 275 and earlier Description: The issue concerns the storage of Verisium Manager vAPI keys in an unencrypted form within job config.xml files on the Jenkins controller. These keys...

CVE-2025-2237

The WP RealEstate plugin for WordPress, used by the Homeo theme, is vulnerable to privilege escalation in all versions up to, and including, 1.6.26. This is due to insufficient role restrictions in the 'processregister' function. This makes it possible for unauthenticated attackers to register an...

PT-2025-14049 · Unknown · Better Wishlist Api

Name of the Vulnerable Software and Affected Versions: Better WishList API versions 1.1.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS in the Better WishList API...

PT-2025-14149 · Andreyazimov · Sheet2Site

Name of the Vulnerable Software and Affected Versions: andreyazimov Sheet2Site versions 1.0.0 through 1.0.18 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers ...