PT-2025-21813 · Unknown · Itwanger Paicoding

Name of the Vulnerable Software and Affected Versions: itwanger paicoding versions 1.0.0 through 1.0.3 Description: A vulnerability has been found in the software, classified as problematic. It affects an unknown functionality of the file...

PT-2025-21804 · Totolink · Totolink A702R +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R, A3002R, and A3002RU version 3.0.0-B20230809.1615 Description: A critical issue has been found in the HTTP POST Request Handler component. The problem arises from the manipulation of the submit-url argument, leading to a buffer...

PT-2025-21791 · WordPress · Multivendorx

Name of the Vulnerable Software and Affected Versions: MultiVendorX – WooCommerce Multivendor Marketplace Solutions plugin for WordPress versions prior to 4.2.22 Description: The issue allows authenticated attackers with Contributor-level access and above to delete arbitrary posts, pages,...

PT-2025-21787 · WordPress · Eventon Pro

Name of the Vulnerable Software and Affected Versions: EventON Pro plugin for WordPress versions up to, and including, 4.9.6 Description: The issue is related to a missing capability check in the 'assets/lib/settings/settings.js' file, allowing authenticated attackers with Subscriber-level access...

PT-2025-21784 · Totolink · Totolink A702R +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R, A3002R, and A3002RU version 3.0.0-B20230809.1615 Description: A critical issue has been discovered, affecting the HTTP POST Request Handler component, specifically the file /boafrm/formWsc. The manipulation of the submit-url...

PT-2025-21803 · Unknown · Cocotais Bot

Name of the Vulnerable Software and Affected Versions: Cocotais Bot versions 1.5.0-test2-hotfix through 1.6.2 Description: The issue allows unauthorized users to indirectly trigger privileged behavior by injecting special platform tags, potentially leading to spam, disruption, or abuse of...

PT-2025-21789 · WordPress · Wp Booking Calendar

Name of the Vulnerable Software and Affected Versions: WP Booking Calendar plugin for WordPress versions up to, and including, 10.11.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's wpbc shortcode due to insufficient input sanitization and output escaping on...

PT-2025-21769 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /pages/supplier update.php. The manipulation of the Name argument leads to SQL injection...

PT-2025-21786 · WordPress · Wise Chat

Name of the Vulnerable Software and Affected Versions: Wise Chat plugin for WordPress versions prior to 3.3.4 Description: The issue allows unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory, which can contain file attachments included in ch...

PT-2025-21806 · Unknown · Projectworlds Life Insurance Management System

Name of the Vulnerable Software and Affected Versions: Projectworlds Life Insurance Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /deleteAgent.php, where the manipulation of the agent id argument leads to SQL injection. This issue can b...

CVE-2025-1245 Bypass Connection Restriction Vulnerability in Hitachi Ops Center Analyzer

Bypass Connection Restriction vulnerability in Hitachi Infrastructure Analytics Advisor Data Center Analytics component, Hitachi Ops Center Analyzer Hitachi Ops Center Analyzer detail view component.This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from...

CVE-2025-1245 Bypass Connection Restriction Vulnerability in Hitachi Ops Center Analyzer

Bypass Connection Restriction vulnerability in Hitachi Infrastructure Analytics Advisor Data Center Analytics component, Hitachi Ops Center Analyzer Hitachi Ops Center Analyzer detail view component.This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from...

PT-2025-21606 · D Link · D-Link Di-7003Gv2

Name of the Vulnerable Software and Affected Versions: D-Link DI-7003GV2 version 24.04.18D1 R68125 Description: A critical vulnerability was found in the Factory Reset Handler component, affecting the function sub 4983B0 of the file "/H5/backup.asp?opt=reset". The manipulation leads to denial of...

PT-2025-21734 · Unknown · Proxymis Interview

Name of the Vulnerable Software and Affected Versions: proxymis Interview versions n/a through 1.01 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows attackers to inject malicious SQL code,...

PT-2025-21595 · Unknown · Phpgurukul Daily Expense Tracker

Name of the Vulnerable Software and Affected Versions: PHPGurukul Daily Expense Tracker version 1.1 Description: A critical issue affects an unknown functionality of the file /register.php. The manipulation of the email argument leads to SQL injection. The attack can be launched remotely. The...

PT-2025-21738 · Unknown · Sourcecodester/Oretnom23 Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester/oretnom23 Stock Management System. The issue affects an unknown function of the file /admin/?page=sales/vi...

PT-2025-21765 · Unknown · Phpgurukul Human Metapneumovirus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /edit-phlebotomist.php. The manipulation of the mobilenumber argument lead...

PT-2025-21666 · Unknown · Phpgurukul Daily Expense Tracker System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Daily Expense Tracker System version 1.1 Description: A critical issue was found in the system, affecting some unknown functionality of the file /user-profile.php. The manipulation of the fullname and contactnumber arguments leads ...

PT-2025-21623 · Unknown · Phpgurukul Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Beauty Parlour Management System version 1.1 Description: A critical issue affects the processing of the /forgot-password.php file. The manipulation of the email argument leads to SQL injection. This issue can be exploited remotely...

PT-2025-21596 · Unknown · Projectworlds Hospital Database Management System

Name of the Vulnerable Software and Affected Versions: projectworlds Hospital Database Management System version 1.0 Description: A critical issue was found in the projectworlds Hospital Database Management System. This issue affects an unknown part of the file /medicines info.php. The manipulati...