PT-2025-18907 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: The issue is related to an off-by-one fsmap error on 1k block filesystems in the Linux kernel. It occurs when the ioctl function is called with the FS IOC GETFSMAP command, and the...

PT-2025-18759 · WordPress · Formality

Name of the Vulnerable Software and Affected Versions: Formality plugin for WordPress versions up to, and including, 1.5.8 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with...

PT-2025-18922 · Unknown · Handrew Browserpilot

Name of the Vulnerable Software and Affected Versions: handrew browserpilot versions up to 0.2.51 Description: A critical issue was found in the GPTSeleniumAgent function of the file browserpilot/browserpilot/agents/gpt selenium agent.py. The manipulation of the instructions argument leads to cod...

PT-2025-18913 · Unknown · Phpgurukul Online Birth Certificate System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Birth Certificate System version 1.0 Description: A critical issue has been discovered, affecting the /admin/search.php file. The manipulation of the searchdata argument leads to SQL injection. This issue can be exploited...

PT-2025-18758 · WordPress · Taxonomy Chain Menu

Name of the Vulnerable Software and Affected Versions: Taxonomy Chain Menu plugin for WordPress versions up to, and including, 1.0.8 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes in the pn...

PT-2025-18731 · Unknown · Sourcecodester Restaurant Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Restaurant Management System version 1.0 Description: A critical issue was found in the itsourcecode Restaurant Management System, affecting an unknown part of the file /admin/category save.php. The manipulation of the Category...

PT-2025-18791 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.06.42 multi Description: A command injection issue was found in the formSetSambaConf function via the usbname parameter. This allows attackers to execute arbitrary commands via a crafted request. Recommendations: For...

PT-2025-18756 · WordPress · Homey

Name of the Vulnerable Software and Affected Versions: Homey theme for WordPress versions up to, and including, 2.4.4 Description: The issue allows authenticated attackers with Subscriber-level access and above to delete other users' accounts due to missing validation on a user-controlled key in...

PT-2025-18743 · WordPress · Gmapsmania

Name of the Vulnerable Software and Affected Versions: GmapsMania plugin for WordPress versions up to, and including, 1.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's gmap shortcode due to insufficient input sanitization and output escaping on user-supplied...

PT-2025-18741 · WordPress · Kiwichat Nextclient

Name of the Vulnerable Software and Affected Versions: KiwiChat NextClient plugin for WordPress versions up to, and including, 6.2 Description: The issue is related to Stored Cross-Site Scripting via the url parameter due to insufficient input sanitization and output escaping. This allows...

PT-2025-18738 · Sourcecodester · Sourcecodester Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Patient Record Management System version 1.0 Description: A critical issue affects the processing of the file /birthing.php, where the manipulation of the comp id argument leads to sql injection. The attack may be initiated...

PT-2025-18735 · Unknown · Sourcecodester Restaurant Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Restaurant Management System version 1.0 Description: A critical issue was found in the iSourcecode Restaurant Management System, affecting some unknown functionality of the file /admin/category update.php. The manipulation of the...

PT-2025-18736

Name of the Vulnerable Software and Affected Versions iSourcecode Gym Management System version 1.0 Description A critical vulnerability was found in the iSourcecode Gym Management System. This issue affects the file /ajax.php?action=save member, where the manipulation of the umember id argument...

PT-2025-18915 · Unknown · Phpgurukul Online Dj Booking Management System

Name of the Vulnerable Software and Affected Versions: PHPGuruku Online DJ Booking Management System version 1.0 Description: A critical issue affects the processing of the file /admin/booking-bwdates-reports-details.php, where the manipulation of the fromdate argument leads to SQL injection. The...

PT-2025-18734 · Ibm · Ibm Concert

Name of the Vulnerable Software and Affected Versions: IBM Concert Software versions 1.0.0 through 1.0.5 Description: The issue allows a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view...

PT-2025-18911 · Vercel +1 · @Vercel/Flags +1

Name of the Vulnerable Software and Affected Versions: Flags versions 3.2.0 and prior @vercel/flags versions 3.1.1 and prior Description: The issue allows for information disclosure, where a bad actor could gain access to a list of all feature flags exposed through the "flags discovery endpoint"...

AZL-63067 CVE-2025-46569 affecting package opa for versions less than 0.63.0-2

Open Policy Agent OPA is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP Data API for reading and writing documents. Requesting a virtual document through the Data API entails policy evaluation, where a Rego query containing a singl...

CVE-2025-23178

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints...

CVE-2025-46343

n8n is a workflow automation platform. Prior to version 1.90.0, n8n is vulnerable to stored cross-site scripting XSS through the attachments view endpoint. n8n workflows can store and serve binary files, which are accessible to authenticated users. However, there is no restriction on the MIME typ...

PT-2025-18563 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc2 Description: A slab-out-of-bounds write bug was found in the udf find entry function. This issue was reported by Syzbot and is related to a capacity change from 0 to 2048. The bug is caused by a write ...