PT-2025-14399 · Unknown · Secure Copy Content Protection/Content Locking

Name of the Vulnerable Software and Affected Versions: Ays Pro Secure Copy Content Protection and Content Locking versions n/a through 4.4.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored...

PT-2025-14423 · Unknown · Salesmate Add-On For Gravity Forms

Name of the Vulnerable Software and Affected Versions: Salesmate Add-On for Gravity Forms versions n/a through 2.0.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-14100 · Autodesk · Autodesk Navisworks

Name of the Vulnerable Software and Affected Versions: Autodesk Navisworks affected versions not specified Description: The issue arises when a maliciously crafted DWFX file is parsed through Autodesk Navisworks, leading to an Out-of-Bounds Read. This can be exploited by a malicious actor to caus...

PT-2025-14183 · Maksym Marko · Mx Time Zone Clocks

Name of the Vulnerable Software and Affected Versions: Maksym Marko MX Time Zone Clocks versions n/a through 5.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-14063 · Joomsky · Joomsky Js Help Desk

Name of the Vulnerable Software and Affected Versions: JoomSky JS Help Desk versions n/a through 2.9.1 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in JoomSky JS Help Desk...

PT-2025-14174 · Unknown · Smackcoders Aio Performance Profiler

Name of the Vulnerable Software and Affected Versions: smackcoders AIO Performance Profiler, Monitor, Optimize, Compress & Debug versions 1.2 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into log files...

PT-2025-14455 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.52 Description: The issue is related to an inappropriate implementation in Autofill, allowing a remote attacker to perform UI spoofing via a crafted HTML page if the user is convinced to engage in...

PT-2025-13936 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: The issue allows an app to potentially disclose kernel memory due to inadequate bounds checks. Recommendations: For macOS...

PT-2025-13604 · WordPress · Inline Image Upload For Bbpress

Name of the Vulnerable Software and Affected Versions: Inline Image Upload for BBPress plugin for WordPress versions up to, and including, 1.1.19 Description: The issue is related to missing file type validation in the file uploading functionality, allowing authenticated attackers with...

PT-2025-13427 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions 5.4 and prior Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection'. This could allow a low-privileged attacker with local access to...

PT-2025-13026 · Xiaomi · Xiaomi Smarthome Application

Name of the Vulnerable Software and Affected Versions: Xiaomi smarthome application affected versions not specified Description: A code execution issue exists due to improper input validation, allowing attackers to execute malicious code. Recommendations: At the moment, there is no information...

PT-2025-13068 · Unknown · Subscribe To Download Lite

Name of the Vulnerable Software and Affected Versions: Subscribe to Download Lite versions 1.2.9 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion'. This allows PHP Local File...

PT-2025-12870 · WordPress · Advanced Iframe

Name of the Vulnerable Software and Affected Versions: Advanced iFrame plugin for WordPress versions up to, and including, 2024.5 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes through the src attribute in the advanced iframe...

PT-2025-12801

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X versions 240126 and 240802 Description A command injection issue exists due to insufficient data sanitization at the control level. An authorized attacker can execute arbitrary commands on remote devices by sending a POST reque...

PT-2025-12810

Name of the Vulnerable Software and Affected Versions Frappe versions prior to 14.89.0 Frappe versions prior to 15.51.0 Description The issue allows for information disclosure through crafted requests, potentially leading to account takeover. Recommendations For versions prior to 14.89.0, update ...

PT-2025-12756 · WordPress · Aoa-Downloadable

Name of the Vulnerable Software and Affected Versions: aoa-downloadable WordPress plugin version 0.1.0 Description: The issue concerns the aoa-downloadable WordPress plugin, which fails to validate a parameter in its download function. This allows unauthenticated attackers to download arbitrary...

PT-2025-12704 · Yonyou · Yonyou Ufida Erp-Nc

Name of the Vulnerable Software and Affected Versions: Yonyou UFIDA ERP-NC version 5.0 Description: A problematic issue was found in the software, affecting an unknown function of the file /help/systop.jsp. The manipulation of the langcode argument leads to cross-site scripting. It is possible to...

PT-2025-12521 · Unknown · Phpgurukul Doctor Appointment Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Doctor Appointment Management System version 1.0 Description: A critical issue affects the processing of the file /doctor/appointment-bwdates-reports-details.php in PHPGurukul Doctor Appointment Management System. The manipulation ...

PT-2025-12504 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: JIZHICMS version 1.7.0 Description: A vulnerability has been found in JIZHICMS, affecting some unknown functionality of the file /user/userinfo.html of the component Account Profile Page. The manipulation of the jifen argument leads to improp...

PT-2025-12493 · Unknown · Project Worlds Online Time Table Generator

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Time Table Generator version 1.0 Description: A critical issue affects the processing of the file /staff/index.php. The manipulation of the argument e leads to sql injection. The attack may be initiated remotely. The...