PT-2025-25011 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing an attacker with limited privileges to inject malicious scripts into vulnerable form fields. This could...

PT-2025-24931 · Unknown · Phpgurukul Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Rail Pass Management System version 1.0 Description: A vulnerability has been found in the PHPGurukul Rail Pass Management System, which can be exploited remotely. The issue affects the file /admin/add-pass.php, where the...

CVE-2025-48267

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThimPress WP Pipes allows Path Traversal. This issue affects WP Pipes: from n/a through 1.4.2...

PT-2025-24428 · Tcman · Tcman'S Gim

Name of the Vulnerable Software and Affected Versions: TCMAN's GIM version 11 Description: The issue is related to an incorrect authorization vulnerability. This vulnerability allows an attacker with a low privilege level to change the password of other users through a POST request using the...

PT-2025-24443

Name of the Vulnerable Software and Affected Versions Konica Minolta Bizhub versions up to 20250202 Description A problem has been detected that affects unknown code, leading to cross-site request forgery. The attack can be initiated remotely. Recommendations For versions up to 20250202, consider...

PT-2025-24484 · WordPress · Wp Lead Capturing Pages

Name of the Vulnerable Software and Affected Versions: kamleshyadav WP Lead Capturing Pages versions prior to 2.3 Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL...

PT-2025-24499 · Unknown · Quitenicestuff Soho Hotel

Name of the Vulnerable Software and Affected Versions: quitenicestuff Soho Hotel versions through 4.2.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions throu...

PT-2025-25590 · Totolink · Totolink T10

Name of the Vulnerable Software and Affected Versions: TOTOLINK T10 version 4.1.8cu.5207 Description: A problematic issue has been found, affecting some unknown functionality of the file /etc/shadow.sample. This issue leads to the use of a hard-coded password. The attack can only be initiated...

PT-2025-25598 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical issue has been found, affecting an unknown part of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the submit-url argument leads to...

ROS-20250609-01

A vulnerability in the DOMDeserializer component of the FasterXML jackson-databind library is related to an incorrect restriction of XML links to external objects. Exploitation of the vulnerability could allow an attacker, acting remotely, to conduct XXE attacks...

CVE-2025-31039: Improper Restriction of XML External Entity Reference

Improper Restriction of XML External Entity Reference vulnerability in pixelgrade Category Icon category-icon allows XML Entity Linking.This issue affects Category Icon: from n/a through = 1.0.3...

PT-2025-24495 · Unknown · Gavias Krowd

Name of the Vulnerable Software and Affected Versions: gavias Krowd versions 1.4.1 and earlier Description: The issue affects the gavias Krowd software, allowing for PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also known as 'PHP Remot...

PT-2025-24411 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread version 5.1.0 Description: A critical vulnerability was found in the csys sendto function of the file rt-thread/components/lwp/lwp syscall.c. The manipulation of the argument to leads to null pointer dereference. This issue can caus...

PT-2025-24394 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah Virus Testing Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /test-details.php. The manipulation of the assignto argument leads to SQL...

PT-2025-24426 · Tp Link · Tp-Link Tl-Ipc544Ep-W4

Name of the Vulnerable Software and Affected Versions: TP-Link TL-IPC544EP-W4 version 1.0.9 Build 240428 Rel 69493n Description: A critical vulnerability has been found in the TP-Link TL-IPC544EP-W4 camera. The issue affects the sub 69064 function of the /bin/main file. The manipulation of the te...

PT-2025-24415 · Trendnet · Trendnet Tv-Ip121Wn

Name of the Vulnerable Software and Affected Versions: TRENDnet TV-IP121W version 1.1.1 Build 36 Description: A critical vulnerability has been found in the Web Interface of TRENDnet TV-IP121W, affecting an unknown functionality of the file /admin/setup.cgi. This vulnerability leads to improper...

PT-2025-24441 · Code Projects · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System versions up to 1.0 Description: A critical issue affects the processing of the file /user/confirm password.php. The manipulation of the cid argument leads to SQL injection. The attack can be initiated remotely...

PT-2025-24465 · Bzotheme · Bzotheme Craftxtore

Name of the Vulnerable Software and Affected Versions: BZOTheme CraftXtore versions n/a through 1.7 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-24532 · Unknown · Unfoldwp Blogvy

Name of the Vulnerable Software and Affected Versions: Unfoldwp Blogvy versions 1.0.0 through 1.0.7 Description: The issue is related to improper control of filename for include/require statement in PHP programs, also known as 'PHP Remote File Inclusion'. This allows PHP Local File Inclusion...

PT-2025-24481 · Redqteam · Wishlist

Name of the Vulnerable Software and Affected Versions: redqteam Wishlist versions n/a through 2.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...