PT-2025-21621 · D Link · D-Link Di-7003Gv2

Name of the Vulnerable Software and Affected Versions: D-Link DI-7003GV2 version 24.04.18D1 R68125 Description: A critical issue has been found, affecting the function sub 497DE4 of the file /H5/netconfig.asp. This leads to improper authentication. The attack can be initiated remotely...

PT-2025-21664 · Unknown · Sourcecodester/Oretnom23 Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A critical issue has been discovered, affecting the file "/sms/admin/?page=receiving/view receiving&id=1". The manipulation of the id argument leads to SQL injection...

PT-2025-21618 · Hitachi · Hitachi Ops Center Analyzer

Name of the Vulnerable Software and Affected Versions: Hitachi Ops Center Analyzer versions 10.0.0-00 through 11.0.4-00 Description: The issue is related to a Missing Authorization vulnerability in the Hitachi Ops Center Analyzer detail view component. This vulnerability affects the specified...

CVE-2024-9662 CYAN Backup < 2.5.3 - Admin+ Stored XSS via General Settings

The CYAN Backup WordPress plugin before 2.5.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-8031

The Secure Downloads WordPress plugin (versions prior to 1.2.3 ) contains a vulnerability where it fails to properly restrict which files can be downloaded. This allows authenticated attackers with admin-level access and above to download arbitrary files on the server, which may contain highly se...

PT-2025-21381 · WordPress · The Ultimate Noindex Nofollow Tool

Name of the Vulnerable Software and Affected Versions: The Ultimate Noindex Nofollow Tool WordPress plugin versions 1.1.2 and earlier Description: The issue concerns a lack of CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack...

PT-2025-21525 · WordPress · Pagelayer

Name of the Vulnerable Software and Affected Versions: Page Builder: Pagelayer versions prior to 1.9.0 Description: The issue concerns the Page Builder: Pagelayer WordPress plugin, where versions prior to 1.9.0 do not properly sanitise and escape some of its settings. This could allow...

PT-2025-21573 · Sourcecodester · Sourcecodester Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Result Management System version 1.0 Description: A critical issue was found in the system, affecting the file academic/core/drop student.php. The manipulation of the img argument leads to path traversal. This issue can...

PT-2025-21377 · WordPress · Add Svg Support For Media Uploader

Name of the Vulnerable Software and Affected Versions: The Add SVG Support for Media Uploader | inventivo WordPress plugin versions 1.0.0 through 1.0.5 Description: The issue concerns the failure to sanitize uploaded SVG files, potentially allowing users with a role as low as Author to upload...

PT-2025-21380 · WordPress · Wp-Reply Notify

Name of the Vulnerable Software and Affected Versions: WP-Reply Notify WordPress plugin versions 1.1 and earlier Description: The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack...

PT-2025-21351 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /pages/stockin add.php. The manipulation of the prod name argument leads to SQL injection. It is...

PT-2025-21466 · WordPress · The Badgearoo

Name of the Vulnerable Software and Affected Versions: The Badgearoo WordPress plugin versions 1.0.14 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the...

PT-2025-21278

Name of the Vulnerable Software and Affected Versions: PHPGurukul Cyber Cafe Management System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Cyber Cafe Management System. The issue affects an unknown functionality of the file /search.php. The manipulation of the...

PT-2025-21262 · Unknown · Bluewave Checkmate

Name of the Vulnerable Software and Affected Versions: BlueWave Checkmate versions prior to 2.1 Description: The issue allows an authenticated regular user to access sensitive application secrets. This is achieved via the "/api/v1/settings" endpoint. Recommendations: For versions prior to 2.1,...

PT-2025-21279 · Unknown · Phpgurukul Directory Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Directory Management System version 2.0 Description: A critical issue affects an unknown functionality of the file /admin/edit-directory.php. The manipulation of the editid argument leads to SQL injection. The attack can be launche...

PT-2025-21574 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Placement Management System version 1.0 Description: A critical issue affects the processing of the file /drive.php. The manipulation of the ID argument leads to SQL injection. This issue can be exploited remotely. Recommendation...

PT-2025-21280 · Unknown · Phpgurukul Vehicle Record Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul Vehicle Record Management System version 1.0 Description: The issue concerns a Cross Site Scripting XSS problem. It occurs in the /admin/add-brand.php endpoint via the brandname parameter. This allows for potential malicious script...

PT-2025-21571 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /pages/customer add.php. The manipulation of the last argument leads to SQL injection...

PT-2025-21578 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Placement Management System version 1.0 Description: A critical issue was found in the itsourcecode Placement Management System, affecting an unknown functionality of the file /all student.php. The manipulation of the delete...

PT-2025-21329 · Unknown · Phpgurukul Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Parking Management System version 1.13 Description: A critical issue was found in the PHPGurukul Vehicle Parking Management System, affecting some unknown functionality of the file /admin/edit-category.php. The manipulation...