PT-2025-1204

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP affected versions not specified SAP BusinessObjects Business Intelligence Platform affected versions not specified Description The issue is related to an information disclosure vulnerability that allows an...

PT-2025-4776 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.6 Description: A Reflected Cross-Site Scripting XSS vulnerability was identified in the cadastro funcionario.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in...

PT-2025-1137 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2024 January-2025 Security Update Ivanti EPM versions prior to 2022 SU6 January-2025 Security Update Description: The issue is related to deserialization of untrusted data, which can allow a remote unauthenticated...

PT-2025-1128 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update Description: The issue is related to a lack of protection against SQL query structure exploitation, allowing a remote attacker with...

PT-2025-1898 · Icegram Express · Email Subscribers By Icegram Express

Name of the Vulnerable Software and Affected Versions: Email Subscribers by Icegram Express versions prior to 5.7.45 Description: The issue concerns the Email Subscribers by Icegram Express WordPress plugin, which does not properly sanitize and escape some of its Workflow settings. This could all...

PT-2025-1463 · Selesta · Selesta Visual Access Manager

Name of the Vulnerable Software and Affected Versions: Selesta Visual Access Manager VAM versions prior to 4.42.2 Description: An issue was discovered in Selesta Visual Access Manager VAM where an authenticated attacker can perform SQL Injection in multiple GET parameters of "/vam/vam i...

PT-2025-1130 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2024 January-2025 Security Update Ivanti EPM versions prior to 2022 SU6 January-2025 Security Update Description: The issue is related to an out-of-bounds write in Ivanti EPM, allowing a remote unauthenticated...

CISA: Reducing the Threat of Improvised Explosive Device Attacks by Restricting Access to Explosive Precursor Chemicals

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

PT-2025-3878 · Unknown · Liujianview Gymxmjpa

Name of the Vulnerable Software and Affected Versions: liujianview gymxmjpa version 1.0 Description: A critical vulnerability has been found in the function EquipmentDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/EquipmentController.java. The manipulation of the argument hyname...

PT-2025-3879 · Unknown · Liujianview Gymxmjpa

Name of the Vulnerable Software and Affected Versions: liujianview gymxmjpa version 1.0 Description: A critical issue has been found in the function LoosDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/LoosController.java. The manipulation of the argument loosName leads to SQL...

PT-2025-3876 · Unknown · Liujianview Gymxmjpa

Name of the Vulnerable Software and Affected Versions: liujianview gymxmjpa version 1.0 Description: A critical issue affects the function GoodsDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/GoodsController.java. The manipulation of the argument goodsName leads to SQL injection...

PT-2025-1881 · WordPress · The Dominion – Domain Checker

Name of the Vulnerable Software and Affected Versions: The Dominion – Domain Checker for WPBakery plugin for WordPress versions up to, and including, 2.2.2 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied...

PT-2025-1652 · WordPress · Gatormail Smartforms

Name of the Vulnerable Software and Affected Versions: GatorMail SmartForms plugin for WordPress versions up to, and including, 1.1.0 Description: The issue is related to Stored Cross-Site Scripting in the GatorMail SmartForms plugin for WordPress. This is due to insufficient input sanitization a...

PT-2025-1713 · WordPress · Rraddons For Elementor

Name of the Vulnerable Software and Affected Versions: RRAddons for Elementor plugin for WordPress version 1.1.0 and earlier Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from private or draft posts due to insufficient restrictions o...

PT-2025-3685 · Megabip · Megabip

Name of the Vulnerable Software and Affected Versions: MegaBIP versions prior to 5.15 Description: The issue affects websites managed by MegaBIP, where a form under the "/edytor/index.php?id=7,7,0" endpoint lacks protection mechanisms, making it vulnerable to Cross-Site Request Forgery CSRF. An...

PT-2025-3417 · Linksys · Linksys E7350

Name of the Vulnerable Software and Affected Versions: Linksys E7350 version 1.1.00.032 Description: A command injection issue was discovered via the iface parameter in the vif enable function. This allows for potential exploitation. Recommendations: For Linksys E7350 version 1.1.00.032, as a...

PT-2025-3410 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A6000R version V1.0.1-B20201211.2000 Description: A command injection issue was discovered via the opmode parameter in the action reboot function. This allows for potential exploitation. Recommendations: For TOTOLINK A6000R version...

PT-2025-2876

Name of the Vulnerable Software and Affected Versions Indico versions 3.2.9 through 3.3.5 Description A Broken Object Level Authorization BOLA issue allows attackers to read or access sensitive information by sending a crafted POST request to the "/api/principals" component. The supplier disputes...

PT-2025-2412 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: Microweber versions prior to 2.0.9 Description: The issue allows a remote attacker to execute arbitrary code via the campaign Name Internal Name field in the Add new campaign function. This is a Cross Site Scripting vulnerability...

CVE-2024-13302 Pages Restriction Access - Critical - Access bypass - SA-CONTRIB-2024-068

Incorrect Authorization vulnerability in Drupal Pages Restriction Access allows Forceful Browsing.This issue affects Pages Restriction Access: from 2.0.0 before 2.0.3...