PT-2025-26275 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue affects the processing of the file /function/edit customer.php, where the manipulation of the firstname argument leads to SQL injection. The attack can be initiated...

PT-2025-26276 · Unknown · Phpgurukul Emergency Ambulance Hiring Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /admin/bwdates-request-report-details.php. The manipulation of the fromdate and todate...

PT-2025-26291 · Unknown · Phpgurukul Pre-School Enrollment System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Pre-School Enrollment System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Pre-School Enrollment System. The issue is related to an unknown function of the file /admin/add-class.php, where the...

PT-2025-26257 · Code Projects · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hostel Management System version 1.0 Description: A critical issue affects the processing of the file /contact manager.php, where the manipulation of the student roll no argument leads to SQL injection. The attack can be initiat...

PT-2025-26268 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue was found in the PHPGurukul Employee Record Management System. The problem affects the file /admin/editempeducation.php, where the manipulation of the yopg...

PT-2025-26370 · Unknown · Csv Importer Improved

Name of the Vulnerable Software and Affected Versions: CSV Importer Improved versions 0.6.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

CVE-2025-23173

The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI. By default, the websockify service is exposed on port 6080 and accessible from the internet. This exposure introduces significant risk, as websockify has known...

PT-2025-26231 · Powsybl · Powsybl

Name of the Vulnerable Software and Affected Versions: PowSyBl versions prior to 6.7.2 Description: The issue concerns an XML external entity XXE attack and a server-side request forgery SSRF attack in certain places of powsybl-core XML parsing. This allows an attacker to elevate their privileges...

PT-2025-26239 · Unknown · Brilliance Golden Link Secondary System

Name of the Vulnerable Software and Affected Versions: Brilliance Golden Link Secondary System versions up to 20250609 Description: A critical issue has been found in the Brilliance Golden Link Secondary System, affecting an unknown part of the file /storagework/custTakeInfoPage.htm. The...

PT-2025-26213 · WordPress · Wpbakery Page Builder

Name of the Vulnerable Software and Affected Versions: WPBakery Page Builder for WordPress versions up to, and including, 8.4.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Grid Builder feature due to insufficient input sanitization and output escaping on...

PT-2025-26218 · Unknown · Zhilink Adp Application Developer Platform

Name of the Vulnerable Software and Affected Versions: zhilink ADP Application Developer Platform version 1.0.0 Description: A critical issue affects the processing of the file /adpweb/a/base/barcodeDetail/. The manipulation of the argument barcodeNo/barcode/itemNo leads to SQL injection. The...

PT-2025-26209 · WordPress · Football-Pool

Name of the Vulnerable Software and Affected Versions: Football Pool plugin for WordPress versions up to, and including, 2.12.4 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows authenticated...

PT-2025-26211 · WordPress · Ai Engine Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: WordPress AI Engine plugin affected versions not specified Description: A critical flaw in WordPress's AI Engine plugin allows subscribers to escalate privileges and take over websites with Dev Tools/MCP enabled. Recommendations: Update the...

PT-2025-26563 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 1.1.1-B20200824.0128 Description: A critical issue affects the function formWlSiteSurvey of the file /boafrm/formWlSiteSurvey. The manipulation of the argument wlanif leads to os command injection. It is possible to...

The vulnerability in the ZendTo web application for transferring files involves an incorrect restriction on the path to the restricted directory. This allows a malicious actor to gain read and write access to data, or cause a service failure.

The vulnerability in the web application for transferring files via ZendTo is related to an incorrect restriction on the path to the restricted directory during the processing of the tmpname parameter. Exploiting this vulnerability can allow an attacker to gain read and modify access to data, or...

PT-2025-26217

Name of the Vulnerable Software and Affected Versions Yirmibes Software MY ERP versions prior to 1.170 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendatio...

PT-2025-26203 · Pypi · Pgai

Name of the Vulnerable Software and Affected Versions: pgai versions prior to 8eb3567 Description: The issue concerns the pgai Python library, which transforms PostgreSQL into a retrieval engine for RAG and Agentic applications. Prior to a specific commit, the library was vulnerable to an attack...

PT-2025-26212 · WordPress · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP – Donation Plugin and Fundraising Platform versions up to, and including, 4.3.0 Description: The issue allows authenticated attackers with Contributor-level access and above to view or delete fundraising campaigns, view donors' data, a...

PT-2025-26238 · Unknown · Brilliance Golden Link Secondary System

Name of the Vulnerable Software and Affected Versions: Brilliance Golden Link Secondary System up to 20250609 Description: A critical issue affects some unknown functionality of the file /storagework/rentTakeInfoPage.htm. The manipulation of the custTradeName argument leads to SQL injection. The...

CVE-2025-23173

The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI. By default, the websockify service is exposed on port 6080 and accessible from the internet. This exposure introduces significant risk, as websockify has known...