PT-2025-16316 · Unknown · Hockeydata Los

Name of the Vulnerable Software and Affected Versions: hockeydata LOS versions 1.2.4 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

PT-2025-16515 · Unknown · Skt Skill Bar

Name of the Vulnerable Software and Affected Versions: SKT Skill Bar versions n/a through 2.3 Description: The issue is related to improper neutralization of input during web page generation, which allows for Cross-site Scripting XSS. Specifically, it enables Stored XSS. Recommendations: For...

PT-2025-16359 · Unknown · Hitout Carsale

Name of the Vulnerable Software and Affected Versions: Hitout car sale version 1.0 Description: A SQL injection issue allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component. Recommendations: For version 1.0, consider restricting...

PT-2025-16362 · Openrazer +1 · Openrazer +1

Name of the Vulnerable Software and Affected Versions: OpenRazer versions prior to 3.10.2 Description: The issue allows an attacker to cause the custom kernel driver to read more bytes than provided by user space by writing specially crafted data to the matrix custom frame file. This data will be...

PT-2025-16543 · Re11S · Re11S

Name of the Vulnerable Software and Affected Versions: RE11S version 1.11 Description: A stack overflow issue was discovered in the formiNICbasicREP function via the rootAPmac parameter. Recommendations: For RE11S version 1.11, consider restricting access to the formiNICbasicREP function or...

PT-2025-16255 · Unknown · Sicommnet Basec

Name of the Vulnerable Software and Affected Versions: SicommNet BASEC versions from 14 Dec 2021 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS, XSS Through HTTP Query Strings,...

PT-2025-16265 · Zerowdd · Studentmanager

Name of the Vulnerable Software and Affected Versions: ZeroWdd/code-projects studentmanager version 1.0 Description: A critical vulnerability was found in the studentmanager software, affecting unknown code of the file /getTeacherList. The manipulation leads to improper authorization. The attack...

PT-2025-16216 · Huanfenz/Code Projects · Studentmanager

Name of the Vulnerable Software and Affected Versions: huanfenz/code-projects StudentManager version 1.0 Description: A critical issue was found in the Announcement Management Section of the software, specifically affecting the /upload/uploadArticle.do file. The manipulation of the File argument...

PT-2025-16271 · Unknown · Jsonschema2Pojo

Name of the Vulnerable Software and Affected Versions: joelittlejohn jsonschema2pojo version 1.2.2 Description: A vulnerability has been found in the JSON File Handler component, affecting the apply function of the org/jsonschema2pojo/rules/SchemaRule.java file. This issue leads to a stack-based...

PT-2025-16195 · H3C · H3C Magic Nx15 +3

Name of the Vulnerable Software and Affected Versions: H3C Magic NX15 versions up to V100R014 H3C Magic NX30 Pro versions up to V100R014 H3C Magic NX400 versions up to V100R014 H3C Magic R3010 versions up to V100R014 Description: A critical vulnerability has been found in H3C Magic NX series...

PT-2025-16257 · Ipswitch · Whatsup Gold

Name of the Vulnerable Software and Affected Versions: WhatsUp Gold versions prior to 2024.0.3 Description: A database manipulation issue allows an unauthenticated attacker to modify the contents of WhatsUp.dbo.WrlsMacAddressGroup. This enables attackers to tamper with the database without...

PT-2025-16202 · Wowjoy 浙江湖州华卓信息科技有限公司 · Internet Doctor Workstation System

Name of the Vulnerable Software and Affected Versions: wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System version 1.0 Description: A vulnerability has been found in the Internet Doctor Workstation System, affecting an unknown functionality of the file "/v1/pushConfig/detail/". The...

PT-2025-16198

Name of the Vulnerable Software and Affected Versions: frdel Agent-Zero version 0.8.1.2 Description: A critical issue was found in the /get work dir files file, where the manipulation of the path argument leads to path traversal. This issue can be initiated remotely. Recommendations: For version...

PT-2025-16236 · Projectworlds · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Food Ordering System version 1.0 Apache Struts versions 2.5.26 and earlier Description: A critical issue has been found, allowing for remote exploitation. In the case of projectworlds Online Food Ordering System, an unkno...

CVE-2025-3556: Improper Restriction of Excessive Authentication Attempts

A vulnerability classified as problematic was found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be...

PT-2025-16266 · Ibm · Ibm Aspera Console

Name of the Vulnerable Software and Affected Versions: IBM Aspera Console versions 3.4.0 through 3.4.4 Description: The issue is an XPath injection vulnerability that could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document...

CVE-2025-3555: Improper Restriction of Excessive Authentication Attempts

A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The...

PT-2025-16274

Name of the Vulnerable Software and Affected Versions: ZHENFENG13/code-projects My-Blog-layui version 1.0 Description: A vulnerability was found in the file /admin/v1/blog/edit, which leads to cross-site scripting. The attack may be launched remotely, and multiple parameters might be affected. Th...

The vulnerability of the Apache Pinot OLAP data store, related to incorrect restrictions on the path name to the restricted catalog, allows attackers to disclose protected information.

The vulnerability of the Apache Pinot OLAP data store is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to expose protected information by sending a specially crafted GET request...

PT-2025-16275

Name of the Vulnerable Software and Affected Versions ZHENFENG13/code-projects My-Blog-layui version 1.0 Description A problem was found in the software, affecting an unknown part of the file /admin/v1/link/edit. This issue leads to cross site scripting and can be initiated remotely. Multiple...