PT-2025-16782 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /edit-product.php. The manipulation of the ID argument leads to SQL...

PT-2025-16595 · Unknown · Phpgurukul Men Salon Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Men Salon Management System. This issue affects the file /admin/edit-customer-detailed.php, where the manipulation of th...

PT-2025-16573 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been found in the HELP Command Handler component of PCMan FTP Server, leading to a buffer overflow. This issue can be exploited remotely. The manipulation of the HELP Command...

PT-2025-16781 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue was found in the system, affecting the file /search/search stock.php. The manipulation of the Name argument leads to SQL injection. This iss...

PT-2025-16586 · Unknown · Xianqi Kindergarten Management System

Name of the Vulnerable Software and Affected Versions: Xianqi Kindergarten Management System version 2.0 Bulid 20190808 Description: A critical issue affects the unknown processing of the file stu list.php of the component Child Management. The manipulation of the argument sex leads to SQL...

PT-2025-16576 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue was found in the MODE Command Handler component, which can be exploited remotely. The manipulation of this component leads to a buffer overflow. Recommendations: For PCMan FTP Serve...

PT-2025-16874 · Lrqa Nettitude · Poshc2

Name of the Vulnerable Software and Affected Versions: LRQA Nettitude PoshC2 versions after commit 09ee2cf Description: The issue allows unauthenticated attackers to connect to the C2 server and execute arbitrary commands by posing as an infected machine. Recommendations: For versions after commi...

PT-2025-16907 · Unknown · Softether Vpn

Name of the Vulnerable Software and Affected Versions: SoftEtherVPN versions 5.02.5184 through 5.02.5187 Description: The issue is related to a NULL dereference in the DeleteIPv6DefaultRouterInRA function called by StorePacket. This occurs because DeleteIPv6DefaultRouterInRA does not account for...

PT-2025-16472

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An unauthenticated attacker can obtain a user's plant list by knowing the username. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-16506 · Shapedplugin Llc · Real Testimonials

Name of the Vulnerable Software and Affected Versions: ShapedPlugin LLC Real Testimonials versions 3.1.6 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...

PT-2025-16341 · Unknown · Perfreeblog

Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 4.0.11 Description: A stored cross-site scripting vulnerability exists in the website name field of the backend system settings interface, allowing an attacker to insert and execute arbitrary malicious code. Recommendation...

PT-2025-16491

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An unauthenticated attacker can obtain a serial number of a smart meters using its owner's username. Recommendations At the moment, there is no information about a newer version that contains ...

PT-2025-16384

Name of the Vulnerable Software and Affected Versions Dpanel versions prior to 1.6.1 Description The Dpanel service contains a hardcoded JWT secret in its default configuration, allowing attackers to generate valid JWT tokens and compromise the host machine. This security flaw enables attackers t...

PT-2025-16352 · Mozilla +10 · Thunderbird +10

Name of the Vulnerable Software and Affected Versions: Thunderbird versions prior to 137.0.2 Thunderbird versions prior to 128.9.2 Description: The issue arises from Thunderbird's handling of the X-Mozilla-External-Attachment-URL header, which allows for external attachments. When an email is...

PT-2025-16484

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Unauthenticated attackers can rename arbitrary devices of arbitrary users, specifically EV chargers. Recommendations At the moment, there is no information about a newer version that contains ...

PT-2025-16468 · Oracle · Peoplesoft Enterprise Cc Common Application Objects

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise CC Common Application Objects version 9.2 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks can...

PT-2025-16379

Name of the Vulnerable Software and Affected Versions gorilla/csrf versions prior to 1.7.2 Description The issue concerns a Cross Site Request Forgery CSRF prevention middleware for Go web applications and services. It does not validate the Origin header against an allowlist prior to version 1.7....

PT-2025-16345

Name of the Vulnerable Software and Affected Versions Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC version V3 1.0.15 Description A command injection issue was discovered in the Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC. The issue occurs via the foldername in the...

PT-2025-16270 · Ibm · Ibm Aspera Console

Name of the Vulnerable Software and Affected Versions: IBM Aspera Console versions 3.4.0 through 3.4.4 Description: The issue allows passwords to be reused when a new user logs into the system. Recommendations: For IBM Aspera Console versions 3.4.0 through 3.4.4, consider implementing a password...

PT-2025-16203 · Unknown · Lingxing Erp

Name of the Vulnerable Software and Affected Versions: Lingxing ERP version 2 Description: A critical issue was found in the function DoUpload of the file /Api/FileUpload.ashx?method=DoUpload. The manipulation of the argument File leads to unrestricted upload. This issue can be exploited remotely...