PT-2025-19962 · Mrdoc · Mrdoc

Name of the Vulnerable Software and Affected Versions: MrDoc versions 0.95 and before Description: The issue is related to Server-Side Request Forgery SSRF in the validate url function of the app doc/utils.py file. This allows for potential exploitation. Recommendations: For MrDoc versions 0.95 a...

PT-2025-19947 · Unknown · Phpgurukul Company Visitor Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Company Visitor Management System version 2.0 Description: A critical vulnerability has been found in the PHPGurukul Company Visitor Management System. The issue affects an unknown function of the file /admin-profile.php. The...

PT-2025-19942 · Unknown · Golden Link Secondary System

Name of the Vulnerable Software and Affected Versions: Golden Link Secondary System up to 20250424 Description: A critical issue was found in Golden Link Secondary System, affecting an unknown function of the file /paraframework/queryTsDictionaryType.htm. The manipulation of the dictCn1 argument...

PT-2025-19941 · Unknown · Golden Link Secondary System

Name of the Vulnerable Software and Affected Versions: Golden Link Secondary System up to 20250424 Description: A critical issue has been found in the Golden Link Secondary System, affecting some unknown processing of the file /reprotframework/tcEntrFlowSelect.htm. The manipulation of the...

PT-2025-19825 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah Virus Testing Management System version 1.0 Description: A critical issue affects the processing of the file /edit-phlebotomist.php, where the manipulation of the mobilenumber argument leads to SQL injection. The attack can b...

PT-2025-19944 · Tenda · Tenda Dap-1520

Name of the Vulnerable Software and Affected Versions: Tenda DAP-1520 version 1.10B04 BETA02 Description: A critical issue has been found, affecting the set ws action function of the /dws/api/ file, leading to a heap-based buffer overflow. This can be initiated remotely. Recommendations: For Tend...

PT-2025-19824 · WordPress · Reales Wp Stpt

Name of the Vulnerable Software and Affected Versions: Reales WP STPT plugin for WordPress versions up to and including 2.1.2 Description: The issue arises from the plugin's failure to properly validate a user's identity before updating their details, such as the password. This allows authenticat...

PT-2025-19927 · Phpgurukul · Phpgurukul Company Visitor Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Company Visitor Management System version 2.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /visitor-detail.php. The manipulation of the editid argument leads to SQL injection...

PT-2025-19951 · Unknown · Gym Management System

Name of the Vulnerable Software and Affected Versions: Gym Management System version 1.0 Description: A critical issue was found in the Gym Management System, affecting the /ajax.php?action=save membership file. The manipulation of the member id argument leads to SQL injection. This issue can be...

PT-2025-19822 · Unknown · Kefaming Mayi

Name of the Vulnerable Software and Affected Versions: kefaming mayi versions 1.3.9 and earlier Description: A critical vulnerability has been found in kefaming mayi, affecting the function Upload of the file app/tools/controller/File.php. The manipulation of the argument File leads to unrestrict...

GHSA-X39X-9QW5-GHRF Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL

Summary During a manual source code review, ARIMLABS.AI researchers identified that the browseruse module includes an embedded whitelist functionality to restrict URLs that can be visited. This restriction is enforced during agent initialization. However, it was discovered that these measures can...

PT-2025-19731 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the devname parameter in the reset wifi function. Recommendations: For version 1.0.2.26, consider restricting acces...

PT-2025-19344 · Unknown · Sourcecodester/Oretnom23 Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester/oretnom23 Stock Management System. This affects an unknown part of the file /admin/?page=purchase order/view po...

VulnCheck KEV: CVE-2024-7399

Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority...

PT-2025-19717 · Unknown · Kashipara Online Service Management Portal

Name of the Vulnerable Software and Affected Versions: Kashipara Online Service Management Portal version V1.0 Description: A Directory Listing Vulnerability was found in the /osms/Requester/ directory. Recommendations: For Kashipara Online Service Management Portal version V1.0, consider...

PT-2025-19705 · Mechrevo · Mechrevo Control Console

Name of the Vulnerable Software and Affected Versions: Mechrevo Control Console version 1.0.2.70 Description: A critical issue affects an unknown functionality in the library C:Program FilesOEMMECHREVO Control CenterUniwillServiceMyControlCentercsCAPI.dll of the component GCUService. The...

PT-2025-19806 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: A SQL injection issue was discovered in the admin topic.php component. Recommendations: For SeaCMS version 13.3, update to a version that fixes the SQL injection vulnerability in the admin topic.php component...

PT-2025-19805 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: A SQL injection issue was discovered in the admin manager.php component. Recommendations: For SeaCMS version 13.3, update to a version that fixes the SQL injection vulnerability in the admin manager.php...

PT-2025-19887 · Dell · Dell Storage Center +1

Name of the Vulnerable Software and Affected Versions: Dell Storage Center - Dell Storage Manager version 20.0.21 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This could allow an unauthenticate...

PT-2025-19747 · Unknown · Retrieval-Based-Voice-Conversion-Webui

Name of the Vulnerable Software and Affected Versions: Retrieval-based-Voice-Conversion-WebUI versions 2.2.231006 and prior Description: Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. The variables exp dir1, among others, take user input and pass it to the cli...