PT-2025-23864 · Unknown +1 · Postgresql Anonymizer +1

Name of the Vulnerable Software and Affected Versions: PostgreSQL Anonymizer versions 2.0 through 2.1 Description: The issue allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pg dump. This problem occur...

PT-2025-23860 · Unknown · Codeastro Real Estate Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /submitpropertydelete.php. The manipulation of the ID argument leads to SQL...

PT-2025-23834 · Unknown · Phpgurukul Student Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 1.3 Description: A critical issue was found in the PHPGurukul Student Result Management System. The problem affects the file /editmyexp.php and is related to the manipulation of the emp1ctc...

PT-2025-23802 · Microsoft · Mim Admin Service

Name of the Vulnerable Software and Affected Versions: MIM Admin Service versions prior to 7.2.13 MIM Admin Service versions prior to 7.3.8 MIM Admin Service versions prior to 7.4.3 Description: This issue allows an attacker to execute arbitrary code with the privileges of the MIM Admin service b...

PT-2025-23744 · Unknown · Phpgurukul Curfew E-Pass Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Curfew e-Pass Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /admin/view-pass-detail.php. The manipulation of the viewid argument leads to SQL...

PT-2025-23769 · Ideacms · Ideacms

Name of the Vulnerable Software and Affected Versions: IdeaCMS versions up to 1.7 Description: A critical issue affects the function Article/Goods of the file "/api/v1.index.article/getList.html". The manipulation of the Field argument leads to SQL injection. The attack may be initiated remotely...

PT-2025-23759 · Unknown · Phpgurukul Notice Board System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Notice Board System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /search-notice.php. The manipulation of the searchdata argument leads to SQL injection. This issue can be...

PT-2025-23946 · Totolink · Totolink N302R Plus

Name of the Vulnerable Software and Affected Versions: TOTOLINK N302R Plus versions up to 3.4.0-B20201028 Description: A critical vulnerability was found in the HTTP POST Request Handler component of TOTOLINK N302R Plus. The issue affects an unknown function of the file /boafrm/formPortFw. The...

PT-2025-23753 · Samsung · Libsecimaging.Camera.Samsung.So

Name of the Vulnerable Software and Affected Versions: libsecimaging.camera.samsung.so versions prior to SMR Feb-2025 Release 1 Description: The issue is an out-of-bound read that allows local attackers to read out-of-bounds memory. This can be exploited by local attackers. Recommendations: For...

PT-2025-23861 · Unknown · Codeastro Real Estate Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /submitpropertyupdate.php. The manipulation of the ID argument leads to SQL injection. It is...

PT-2025-23785 · Unknown · Phpgurukul Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A critical issue has been discovered, affecting an unknown functionality of the file /sales-report-details.php. The manipulation of the fromdate and todate arguments leads ...

PT-2025-23786 · Unknown · Phpgurukul Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A critical issue affects an unknown functionality of the /search-product.php file. The manipulation of the productname argument leads to SQL injection. This issue can be...

PT-2025-23871 · Tenda · Tenda Ch22

Name of the Vulnerable Software and Affected Versions: Tenda CH22 version 1.0.0.1 Description: A critical issue has been found in the Tenda CH22, affecting the formaddUserName function of the file /goform/addUserName. The manipulation of the Password argument leads to a stack-based buffer overflo...

PT-2025-23762 · Kro · Kro

Name of the Vulnerable Software and Affected Versions: kro Kube Resource Orchestrator versions 0.1.0 through 0.2.1 Description: The issue allows users with permission to create or modify ResourceGraphDefinition resources to supply arbitrary container images. This can lead to a confused-deputy...

PT-2025-23947 · Totolink · Totolink N302R Plus

Name of the Vulnerable Software and Affected Versions: TOTOLINK N302R Plus versions up to 3.4.0-B20201028 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically in the unknown functionality of the file /boafrm/formFilter. The manipulation of the url...

PT-2025-23849 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform version 2.0 Description: An issue in Unifiedtransform allows a remote attacker to escalate privileges via the "/course/edit/id" endpoint. Recommendations: For Unifiedtransform version 2.0, as a temporary workaround, consider...

PT-2025-23868 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue was found in the PHPGurukul Online Fire Reporting System, affecting some unknown functionality of the file /admin/profile.php. The manipulation of the...

PT-2025-23862 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue has been found in the PHPGurukul Online Fire Reporting System, affecting the /reporting.php file. The manipulation of the fullname argument leads to SQL...

PT-2025-23811 · Unknown · Motivian Content Management System

Name of the Vulnerable Software and Affected Versions: Motivian Content Management System version 41.0.0 Description: The issue allows a remote attacker to execute arbitrary code via the Content/Gallery/Images component. This is a result of a File Upload vulnerability. Recommendations: For Motivi...

PT-2025-23799 · Oscommerce · Oscommerce

Name of the Vulnerable Software and Affected Versions: osCommerce version 4 Description: The issue is a Reflected Cross-Site Scripting XSS that allows an attacker to execute JavaScript code in the victim's browser. This can be achieved by sending a malicious URL using any parameter name in the...