PT-2025-18703 · Tenda · Tenda Rx2 Pro

Name of the Vulnerable Software and Affected Versions: Tenda RX2 Pro version 16.03.30.14 Description: The issue is related to a lack of access controls in the 'ate' management binary, allowing an unauthenticated remote attacker to make unauthorized configuration changes to any router where 'ate' ...

PT-2025-18678 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 15.11.0.6 Description: A command injection issue was found in the formSetDebugCfg function through the level parameter. This issue allows attackers to execute arbitrary commands via a manipulated request. Recommendations: F...

PT-2025-18677 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 15.11.0.6 Description: A command injection issue was discovered in the formSetDebugCfg function via the enable parameter. This issue allows attackers to execute arbitrary commands through a manipulated request...

PT-2025-18699 · Tenda · Tenda Rx2 Pro

Name of the Vulnerable Software and Affected Versions: Tenda RX2 Pro version 16.03.30.14 Description: The issue is related to a lack of input validation/sanitization in the setLanCfg API endpoint in httpd, allowing a remote attacker authorized to the web management portal to gain root shell acces...

PT-2025-18659 · Sourcecodester · Sourcecodester Online Eyewear Shop

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A critical vulnerability was found in the function delete cart of the file /oews/classes/Master.php?f=delete cart. The manipulation of the argument ID leads to SQL injection. The...

PT-2025-18386 · Unknown · Phpgurukul Land Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Land Record System version 1.0 Description: A critical issue has been found in the processing of the file /admin/aboutus.php. The manipulation of the pagetitle argument leads to SQL injection. The attack may be initiated remotely...

PT-2025-18702 · Tenda · Tenda Rx2 Pro

Name of the Vulnerable Software and Affected Versions: Tenda RX2 Pro version 16.03.30.14 Description: The issue is related to a lack of input validation/sanitization in the 'ate' management service, allowing an unauthorized remote attacker to gain root shell access to the device by sending a...

PT-2025-18516 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc1-00186-g76f33a7eedb4 Description: A bug in the Linux kernel's tracing system has been fixed, which caused a wild-memory-access issue in the register synth event function. If set synth event print fmt...

PT-2025-18575

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the octeontx2-pf driver. The issue was related to the checking of available SQE count, which could result in the...

PT-2025-18278 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A SQL Injection issue was discovered in the normal-bwdates-reports-details.php file. This issue allows remote attackers to execute arbitrary SQL code via the todate paramete...

PT-2025-18277 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A SQL injection issue was found in the /add-foreigners-ticket.php file. This allows remote attackers to execute arbitrary code via the cprice POST request parameter...

PT-2025-18242 · Delta Electronics · Ispsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics ISPSoft version 3.20 Description: The issue is a Stack-Based buffer overflow vulnerability that could allow an attacker to execute arbitrary code when parsing a DVP file. This vulnerability is related to the parsing of DVP...

PT-2025-18281 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A HTML Injection issue was discovered in the normal-search.php file, allowing remote attackers to execute arbitrary code via the searchdata parameter. This enables attackers...

PT-2025-18201 · Unknown · Code-Projects School Billing System

Name of the Vulnerable Software and Affected Versions: code-projects School Billing System version 1.0 Description: A critical vulnerability was found in the code-projects School Billing System. This issue affects the searchrec function. The manipulation of the Name argument leads to a stack-base...

PT-2025-18228 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue is related to a denial of service. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2025-18211

Name of the Vulnerable Software and Affected Versions YesWiki versions prior to 4.5.4 Description The issue allows an attacker to use a reflected cross-site scripting attack to steal cookies from an authenticated user by having them click on a malicious link. Stolen cookies enable the attacker to...

PT-2025-18164 · Unknown · Theater Seat Booking System

Name of the Vulnerable Software and Affected Versions: Theater Seat Booking System version 1.0 Description: A critical issue has been found in the Theater Seat Booking System, affecting the cancel function. The manipulation of the cancelcustomername argument leads to a stack-based buffer overflow...

PT-2025-18111 · Unknown · Phpgurukul Online Banquet Booking System

Name of the Vulnerable Software and Affected Versions: phpgurukul Online Banquet Booking System version 1.2 Description: The issue allows an attacker to execute arbitrary code via the "/obbs/change-password.php" file of the My Account - Change Password component. This could potentially lead to...

PT-2025-18120 · Snowflake · Snowflake-Connector-Net

Name of the Vulnerable Software and Affected Versions: snowflake-connector-net versions 2.1.2 through 4.4.0 Description: The issue concerns a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS, the connector reads logging configuration from ...

PT-2025-18081 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Placement Management System version 1.0 Description: A critical vulnerability has been found in the iSourcecode Placement Management System. The issue affects an unknown function of the file /add drive.php, where the manipulation ...