16740 matches found
PT-2025-17314 · Unknown · Namelessmc
Name of the Vulnerable Software and Affected Versions: NamelessMC versions prior to 2.1.4 Description: The issue is related to SQL injection by providing an unexpected square bracket GET parameter syntax. This syntax refers to the structure ?param0=a¶m1=b¶m2=c utilized by PHP, which is...
PT-2025-17341 · Macro Video Technologies Co. · V380E6 C1 Ip Camera
Name of the Vulnerable Software and Affected Versions: Macro-video Technologies Co.,Ltd V380E6 C1 IP camera version 1020302 Description: An issue in the V380E6 C1 IP camera allows a physically proximate attacker to execute arbitrary code via the /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/user...
PT-2025-17339 · V380 Pro · V380 Pro
Name of the Vulnerable Software and Affected Versions: V380 Pro android application versions 2.1.44 through 2.1.64 Description: The issue in the V380 Pro android application allows an attacker to obtain sensitive information via the QE code based sharing component. Recommendations: For versions...
PT-2025-17346 · Z80Pack · Z80Pack
Name of the Vulnerable Software and Affected Versions: z80pack versions 1.38 and prior Description: The issue concerns the exposure of sensitive information, specifically the GITHUB TOKEN, in the workflow run artifact. This occurs because the makefile-ubuntu.yml workflow file uses...
PT-2025-17337 · Seclore · Seclore
Name of the Vulnerable Software and Affected Versions: Seclore version 3.27.5.0 Description: An issue in the login page of Seclore allows attackers to bypass authentication via a brute force attack. Recommendations: For version 3.27.5.0, consider temporarily restricting access to the login page...
PT-2025-17257 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /add-product.php. The manipulation of the Avatar argument leads to...
PT-2025-17290 · WordPress · La-Studio Element Kit For Elementor
Name of the Vulnerable Software and Affected Versions: LA-Studio Element Kit for Elementor plugin for WordPress versions up to, and including, 1.4.9 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Table of Contents widget due to insufficient input sanitization an...
PT-2025-20915 · Totolink · Totolink A3002Ru
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: A buffer overflow issue was discovered via the addrPoolEnd parameter in the "formDhcpv6s" interface. Recommendations: For TOTOLINK A3002R version 4.0.0-B20230531.1404, as a temporary...
PT-2025-17301 · Ibm · Ibm I +1
Name of the Vulnerable Software and Affected Versions: IBM i versions 7.3 through 7.5 Description: The issue is caused by improper neutralization of HTTP header content by IBM Navigator for i, allowing an authenticated user to manipulate the host header in HTTP requests. This can lead to changing...
CVE-2025-1523
The Ultimate Dashboard WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
PT-2025-17082 · Unknown · Jbhovik Ray Enterprise Translation
Name of the Vulnerable Software and Affected Versions: jbhovik Ray Enterprise Translation versions 1.7.0 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This...
PT-2025-17146 · WordPress · Wp-Businessdirectory
Name of the Vulnerable Software and Affected Versions: WP-BusinessDirectory versions through 3.1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For versions...
PT-2025-17136 · Unknown · Movylo Marketing Automation
Name of the Vulnerable Software and Affected Versions: Movylo Marketing Automation versions through 2.0.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker c...
PT-2025-17113 · Unknown · Raptive Ads
Name of the Vulnerable Software and Affected Versions: Raptive Ads versions 3.7.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...
PT-2025-18467
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the net: dsa: mv88e6xxx module. The issue occurs when a system with mv88e6xxx dereferences a NULL pointer when...
PT-2025-16972 · Unknown · Studio Hyperset The Great Firewords Of China
Name of the Vulnerable Software and Affected Versions: Studio Hyperset The Great Firewords of China versions n/a through 1.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an...
PT-2025-16974 · WordPress · Wp-Asambleas
Name of the Vulnerable Software and Affected Versions: WP-Asambleas versions 2.85.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...
PT-2025-17189 · Metagauss · Metagauss Profilegrid
Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions n/a through 5.9.4.8 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows attackers to execute malicious SQL...
PT-2025-18339 · NetGear · Netgear Ex6120
Name of the Vulnerable Software and Affected Versions: Netgear EX6120 version 1.0.3.94 Description: A critical issue has been found, affecting the sub 30394 function. The manipulation of the host argument leads to a buffer overflow. This issue can be exploited remotely. The vendor was contacted...
PT-2025-17201 · Jetbrains · Rubymine
Name of the Vulnerable Software and Affected Versions: JetBrains RubyMine versions prior to 2025.1 Description: The issue concerns JetBrains RubyMine, where the remote Interpreter overwrote ports to listen on all interfaces. This could potentially lead to security risks. No information is provide...