PT-2025-26592 · Innoshop · Innoshop

Name of the Vulnerable Software and Affected Versions: Innoshop versions 0.4.1 and earlier Description: The issue allows an authenticated attacker to achieve code execution on the server by exploiting the File Manager functions in the admin panel. This is done by uploading a crafted file and then...

PT-2025-26581 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue affects the processing of the file /php action/fetchSelectedCategories.php. The manipulation of the categoriesId argument leads to SQL injection. The attack m...

PT-2025-26635 · Ncr · Ncr Terminal Handler

Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: An issue in NCR Terminal Handler allows a remote attacker to execute arbitrary code and obtain sensitive information via a GET request to a "UserService" SOAP API endpoint to validate if a user...

PT-2025-26651

Name of the Vulnerable Software and Affected Versions: 70mai M300 up to 20250611 Description: A vulnerability has been found in the RTSP Live Video Stream Endpoint of the 70mai M300, affecting an unknown functionality of the file /livestream/12. This leads to improper authentication. The attack...

PT-2025-26664

Name of the Vulnerable Software and Affected Versions Linksys E-Series routers versions prior to a firmware update Linksys E4200 Linksys E3200 Linksys E3000 Linksys E2500 Linksys E2100L Linksys E2000 Linksys E1550 Linksys E1500 Linksys E1200 Linksys E1000 Linksys E900 Description An OS command...

PT-2025-26629 · Ncr · Ncr Terminal Handler

Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: The issue allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted POST request to the "UserService" component. Recommendations: For NCR Terminal Handler...

PT-2025-26632 · Unknown · Phpgurukul Pre-School Enrollment System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Pre-School Enrollment System Project version V1.0 Description: The issue concerns a Directory Traversal vulnerability in the update-class-pic.php file. This allows unauthorized access to sensitive files and directories...

PT-2025-26593 · Innoshop · Innoshop

Name of the Vulnerable Software and Affected Versions: Innoshop versions 0.4.1 and earlier Description: The issue allows directory traversal via FileManager API endpoints, such as "/api/file manager/files?base folder=", "/api/file manager/directories", "/api/file manager/copy files", and "/api/fi...

The vulnerability of the Golang programming language lies in the improper limitation of path names to restricted access directories, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Golang programming language is related to input validation errors when processing directory traversals in file names. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2025-26544 · Ruoyi-Ai · Ruoyi-Ai

Name of the Vulnerable Software and Affected Versions: ageerle ruoyi-ai version 2.0.0 Description: A critical issue was found in the function speechToTextTranscriptionsV2/upload of the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/service/impl/SseServiceImpl.java. The manipulatio...

PT-2025-26562 · Unknown · Code-Projects Online Shopping Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shopping Store version 1.0 Description: A critical issue affects an unknown functionality of the file /action.php. The manipulation of the arguments cat id, brand id, keyword, proId, pid leads to SQL injection. The attack...

PT-2025-26557 · Unknown · Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Simple Pizza Ordering System version 1.0 Description: A critical issue has been found in the Simple Pizza Ordering System. This issue affects the /salesreport.php file and is related to the manipulation of the dayfrom argument, leading to SQL...

PT-2025-26551 · Unknown · Code-Projects School Fees Payment System

Name of the Vulnerable Software and Affected Versions: code-projects School Fees Payment System version 1.0 Description: A problematic issue was found in the code-projects School Fees Payment System, affecting an unknown part of the file /fees.php. The manipulation of the transcation remark...

PT-2025-26553 · Unknown · Sourcecodester Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Result Management System version 1.0 Description: A vulnerability was found in the Manage Students Module, affecting some unknown processing of the file /script/admin/manage students. This issue leads to cross-site...

PT-2025-26533 · Unknown · Code-Projects Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A critical vulnerability has been found in the code-projects Simple Online Hotel Reservation System, affecting an unknown functionality of the file /admin/delete...

PT-2025-26546 · Unknown · Code-Projects Online Bidding System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Bidding System version 1.0 Description: A critical issue was found in the code, affecting the /bidnow.php file, where the manipulation of the ID argument leads to SQL injection. This issue can be exploited remotely...

PT-2025-26534 · Sangfor · Sangfor Atrust

Name of the Vulnerable Software and Affected Versions: Sangfor aTrust versions through 2.4.10 Description: The issue allows users to modify the ExecStartPre command. Recommendations: For Sangfor aTrust versions through 2.4.10, consider restricting access to the ExecStartPre command to prevent...

PT-2025-26539 · Diyhi Bbs · Diyhi Bbs

Name of the Vulnerable Software and Affected Versions: diyhi bbs version 6.8 Description: A critical issue has been discovered, affecting the Add function of the ForumManageAction.java file. The manipulation of the dirName argument leads to path traversal. This issue can be exploited remotely...

PT-2025-26535 · Unknown · Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A critical issue was found in the Simple Online Hotel Reservation System, affecting an unknown functionality of the file /admin/checkout query.php. The manipulation...

PT-2025-26549 · Unknown · Code-Projects Online Bidding System

Name of the Vulnerable Software and Affected Versions: code-projects Online Bidding System version 1.0 Description: A critical vulnerability was found in the code-projects Online Bidding System. The vulnerability affects an unknown functionality of the file /administrator. The manipulation of the...