PT-2025-22383

Name of the Vulnerable Software and Affected Versions Blizzard Battle.net version 2.40.0.15267 Description The issue allows attackers to escalate privileges by placing a crafted shell script or executable in the C:ProgramData directory. This enables them to gain elevated access, potentially leadi...

PT-2025-22320 · Unknown · Moonlightl Hexo-Boot

Name of the Vulnerable Software and Affected Versions: moonlightL hexo-boot version 4.3.0 Description: A problematic issue was found in the Dynamic List Page component, specifically affecting the /admin/home/index.html file. This leads to cross-site scripting and can be initiated remotely. The...

PT-2025-22323 · WordPress · Digits: Wordpress Mobile Number Signup/Login

Name of the Vulnerable Software and Affected Versions: The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin versions prior to 8.4.6.1 Description: The issue concerns the lack of rate limiting for OTP validation attempts, making it possible for attackers to brute force them...

PT-2025-22402

Name of the Vulnerable Software and Affected Versions Vasco versions 3.14 and earlier Description The issue allows a remote attacker to obtain sensitive information via the help menu. This is due to a Local File Inclusion vulnerability. Recommendations For versions 3.14 and earlier, consider...

PT-2025-22339 · WordPress · Animated Buttons

Name of the Vulnerable Software and Affected Versions: Animated Buttons plugin for WordPress versions up to, and including, 1.0.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'auto-downloader' shortcode due to insufficient input sanitization and output escapin...

PT-2025-22399

Name of the Vulnerable Software and Affected Versions itech iLabClient version 3.7.1 Description The issue allows local attackers to read cleartext credentials for servers configured in the client from the local iLabClient database, specifically from the CONFIGS table. Recommendations For itech...

PT-2025-22413 · Unknown · Xiaobingby Teacms

Name of the Vulnerable Software and Affected Versions: XiaoBingby TeaCMS version 2.0.2 Description: A problematic issue was found in an unknown functionality of the file src/main/java/me/teacms/controller/admin/UserManageController/addUser, leading to cross-site request forgery. The attack can be...

PT-2025-22446 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical vulnerability has been found in Campcodes Online Shopping Portal. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the productimage1...

PT-2025-22445 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical issue was found in the software, affecting some unknown functionality of the file /admin/insert-product.php. The manipulation of the Category argument leads to SQL injection...

CVE-2025-48014 Improper Restriction of Excessive Authentication Attempts

Password guessing limits could be bypassed when using LDAP authentication...

Incorrect Authorization

Overview typo3/cms-core is a free open source enterprise content management system. Affected versions of this package are vulnerable to Incorrect Authorization due to improper handling of FrontendGroupRestriction in multi-table database queries. An attacker can access data from additional tables...

CVE-2025-30193

In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from a client, an attacker can cause a denial of service by crafting a TCP exchange that triggers an exhaustion of the stack and a crash of DNSdist, causing a denial of...

PT-2025-22137 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: A buffer overflow issue was discovered in the TOTOLINK A3002R via the interfacenameds parameter in the "formDhcpv6s" interface. This issue can be exploited, potentially leading to...

PT-2025-22312 · Sourcecodester · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical issue was found in the SourceCodester Client Database Management System. This affects an unknown part of the file /user proposal update order.php. The...

PT-2025-22319 · Unknown · Moonlightl Hexo-Boot

Name of the Vulnerable Software and Affected Versions: moonlightL hexo-boot version 4.3.0 Description: A problematic issue has been discovered, affecting an unknown part of the file /admin/home/index.html of the component Blog Backend. The manipulation of the Description argument leads to...

PT-2025-22311 · Gnu +1 · Gnu Pspp +1

Name of the Vulnerable Software and Affected Versions: GNU PSPP version 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb Description: A vulnerability was found in GNU PSPP, affecting the calloc function in the pspp-convert.c file. The manipulation of the argument -l leads to integer overflow. Local acces...

PT-2025-22287 · Wavlink · Wavlink Wl-Wn579A3

Name of the Vulnerable Software and Affected Versions: Wavlink WL-WN579A3 version 1.0 Description: A command injection vulnerability in the component /cgi-bin/qos.cgi allows attackers to execute arbitrary commands via a crafted input. Recommendations: For Wavlink WL-WN579A3 version 1.0, as a...

PT-2025-22313 · Unknown · Project Worlds Online Time Table Generator

Name of the Vulnerable Software and Affected Versions: projectworlds Online Time Table Generator version 1.0 Description: A critical issue has been discovered, affecting the /semester ajax.php file, where manipulation of the ID argument leads to SQL injection. This issue can be exploited remotely...

PT-2025-22308 · H3C · H3C Magic R200

Name of the Vulnerable Software and Affected Versions: H3C Magic R200G versions up to 100R002 Description: A vulnerability has been found in the HTTP POST Request Handler component, specifically affecting the function Edit BasicSSID, Edit BasicSSID 5G, SetAPWifiorLedInfoById, SetMobileAPInfoById,...

Schweitzer Engineering Laboratories SEL Series 安全漏洞

Schweitzer Engineering Laboratories SEL Series is a series of software and firmware products from Schweitzer Engineering Laboratories, Inc. A security vulnerability exists in the Schweitzer Engineering Laboratories SEL Series that stems from an improper pathname restriction could lead to file...