PT-2025-28160 · Unknown · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Management System version 1.0 Description: A critical issue was found in the itsourcecode Employee Management System. The issue affects an unknown functionality of the file /admin/editempeducation.php. The manipulation o...

PT-2025-27284 · WordPress · Wp Vr – 360 Panorama/Free Virtual Tour Builder For Wordpress

Name of the Vulnerable Software and Affected Versions: WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress versions up to, and including, 8.5.32 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows...

PT-2025-27320 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /php action/createProduct.php. The manipulation of the productName argument leads to SQL injection. The attack...

PT-2025-27322 · Unknown · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /php action/createOrder.php, leading to sql injection. The manipulation can be initiated remotely...

PT-2025-28161 · Itsourcecode · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Management System versions up to 1.0 Description: A critical issue has been found in the itsourcecode Employee Management System. The problem affects some unknown functionality of the file /admin/adminprofile.php. The...

PT-2025-28162 · Unknown · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Management System versions up to 1.0 Description: A critical issue was found in the itsourcecode Employee Management System. The problem affects the /admin/changepassword.php file, where the manipulation of the...

PT-2025-27325 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 versions up to 1.0.0-B20230714.1105 Description: A critical vulnerability has been found in the HTTP POST Request Handler component of TOTOLINK X15. The issue affects an unknown function of the file /boafrm/formParentControl. The...

PT-2025-27331 · Akka · Akka

Name of the Vulnerable Software and Affected Versions: Akka versions through 2.10.6 Description: The issue concerns the use of Java serialization for cluster metrics in the akka-cluster-metrics component. Recommendations: For versions through 2.10.6, consider disabling Java serialization for...

CVE-2025-53097

Roo Code is an AI-powered autonomous coding agent. Prior to version 3.20.3, there was an issue where the Roo Code agent's searchfiles tool did not respect the setting to disable reads outside of the VS Code workspace. This means that an attacker who was able to inject a prompt into the agent coul...

SUSE CVE-2024-10306

A vulnerability was found in modproxycluster. The issue is that the directive should be replaced by the directive as the former does not restrict IP/host access as Require ip IPADDRESS would suggest. This means that anyone with access to the host might send MCMP requests that may result in...

PT-2025-27034 · Flock Safety · Flock Safety Gunshot Detection

Name of the Vulnerable Software and Affected Versions: Flock Safety Gunshot Detection devices versions prior to 1.3 Description: The issue concerns a hard-coded password for a connection in Flock Safety Gunshot Detection devices. This hardcoded password allows for unauthenticated access to the...

PT-2025-27043

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.14.6 Description: A heap-based buffer overflow issue has been found in the function H5O mtime new encode of the file src/H5Omtime.c. The manipulation leads to this issue, and attacking locally is a requirement. The exploit has...

PT-2025-27088 · Backwp · Backwp

Name of the Vulnerable Software and Affected Versions: Backwp versions n/a through 2.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions n/a through 2.0.2,...

PT-2025-27203 · Unknown · Rohil Contact Form – 7 : Hide Success Message

Name of the Vulnerable Software and Affected Versions: Rohil Contact Form – 7 : Hide Success Message versions 1.1.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For...

PT-2025-27134

Name of the Vulnerable Software and Affected Versions: themehunk Zita versions 1.6.5 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion in...

PT-2025-27067 · WordPress · Pack Elementor

Name of the Vulnerable Software and Affected Versions: The Pack Elementor plugin for WordPress versions up to and including 2.1.3 Description: The issue is related to stored cross-site scripting, allowing authenticated attackers with contributor or higher access to inject arbitrary web scripts in...

Roo Code 注入漏洞

Roo Code is an AI-based autonomous coding agent from Roo Code. An injection vulnerability exists in Roo Code versions prior to 3.20.3, which stems from the searchfiles tool not restricting the reading of files outside of the VS Code workspace, which could lead to the reading of sensitive files...

PT-2025-27222 · Unknown · Społecznościowa 6 Pl 2013

Name of the Vulnerable Software and Affected Versions: Społecznościowa 6 PL 2013 versions n/a through 2.0.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-27233 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA version 3.3.3 Description: A Time-Based Blind SQL Injection issue was discovered in the /controle/getProdutosPorAlmox.php endpoint, specifically in the almox parameter. This allows any unauthenticated attacker to inject arbitrary SQL...

PT-2025-27110 · Unknown · Fw Food Menu

Name of the Vulnerable Software and Affected Versions: FW Food Menu versions n/a through 6.0.0 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in the FW Food Menu. Recommendations:...