PT-2025-24305 · Unknown · Qsync Central

Name of the Vulnerable Software and Affected Versions: Qsync Central versions prior to 4.5.0.6 Description: An SQL injection vulnerability has been reported to affect Qsync Central. If exploited, this issue could allow remote attackers who have gained user access to execute unauthorized code or...

PT-2025-24164 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: Broadly for WordPress versions 3.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to...

PT-2025-24000 · Code Projects · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue has been found in the processing of the file /Admin/InsertState.php. The manipulation of the txtStateName argument leads to SQL injection. This iss...

PT-2025-24317 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical issue has been discovered, affecting the HTTP POST Request Handler component, specifically the /boafrm/formPortFw file. The manipulation of the service type argument leads to a...

PT-2025-24175 · Unknown · Wp Gravity Forms Salesforce

Name of the Vulnerable Software and Affected Versions: WP Gravity Forms Salesforce versions 1.4.7 and earlier Description: The issue is an 'Open Redirect' vulnerability, which allows URL redirection to untrusted sites, potentially enabling phishing attacks. Recommendations: For versions 1.4.7 and...

PT-2025-24244 · Wptouch · Wptouch

Name of the Vulnerable Software and Affected Versions: WPtouch versions 4.3.60 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For WPtouch version...

PT-2025-24325 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.09 Description: A critical issue has been found, affecting the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument timeType leads to a stack-based buffer overflow. This issue...

PT-2025-24390 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 Description: A critical vulnerability was found in Tenda AC6. This affects the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buff...

PT-2025-24081 · Idf +1 · Idf +1

Name of the Vulnerable Software and Affected Versions: IDF versions 0.10.0-0C03-03 ZLF versions 0.10.0-0C03-04 Description: A configuration error has been detected in cross-origin resource sharing CORS in the affected software. This issue can be exploited by authenticating to the device and...

PT-2025-24106 · Unknown · Bang Tinh Vay

Name of the Vulnerable Software and Affected Versions: Bang tinh vay versions n/a through 1.0.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

PT-2025-24077 · WordPress · Simple History

Name of the Vulnerable Software and Affected Versions: The Simple History plugin for WordPress versions prior to 5.8.1 Description: The issue concerns sensitive data exposure due to improper sanitization within the append debug info to context function when Detective Mode is enabled. This allows...

PT-2025-24082 · Idf +1 · Idf +1

Name of the Vulnerable Software and Affected Versions: IDF versions 0.10.0-0C03-03 ZLF versions 0.10.0-0C03-04 Description: The issue is a Stored Cross-Site Scripting XSS vulnerability that allows an attacker to store malicious JavaScript payload in the software, which will run in the victim's...

PT-2025-24084 · Idf +1 · Idf +1

Name of the Vulnerable Software and Affected Versions: IDF versions 0.10.0-0C03-03 ZLF versions 0.10.0-0C03-04 Description: A configuration error has been detected in cross-origin resource sharing CORS in the affected software. To exploit this issue, an attacker must authenticate to the device an...

PT-2025-23990 · Unknown · Phpgurukul Human Metapneumovirus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description: A critical issue has been identified in the system, affecting an unknown functionality of the file /new-user-testing.php. The manipulation of the state argume...

PT-2025-23992 · Unknown · Phpgurukul Human Metapneumovirus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /registered-user-testing.php. The manipulation of the testtype argument leads to SQL injection...

PT-2025-24001 · Unknown · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue was found in the code-projects Real Estate Property Management System. The problem arises from the manipulation of the cmbState argument, leading t...

PT-2025-24005 · Unknown · Soluçõescoop Isoluçõesweb

Name of the Vulnerable Software and Affected Versions: SoluçõesCoop iSoluçõesWEB up to 20250516 Description: A problematic issue has been identified, affecting the Profile Information Update component, specifically the file /sys/up.upload.php. The manipulation of the nomeArquivo argument leads to...

PT-2025-24049 · Code Projects · Code-Projects Health Center Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Health Center Patient Record Management System version 1.0 Description: A critical issue was found in the code-projects Health Center Patient Record Management System. The problem affects an unknown function of the file /birthin...

PT-2025-24018 · Sourcecodester · Sourcecodester Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Result Management System version 1.0 Description: A vulnerability was found in the Division System Page component, specifically in the /script/academic/division-system file. The issue is related to the manipulation of t...

PT-2025-24039 · WordPress · Bns Featured Category

Name of the Vulnerable Software and Affected Versions: BNS Featured Category plugin for WordPress versions up to, and including, 2.8.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'bnsfc' shortcode due to insufficient input sanitization and output escaping on...