PT-2025-26524 · Unknown · Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A critical vulnerability affects the unknown code of the file /admin/add room.php in the Simple Online Hotel Reservation System. The manipulation of the room type...

PT-2025-26503 · Ibm · Ibm Process Mining

Name of the Vulnerable Software and Affected Versions: IBM Process Mining versions 2.0.1 through 2.0.1 IF001 Description: The issue allows a remote attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker...

PT-2025-26529 · Yealink · Yealink Ymcs

Name of the Vulnerable Software and Affected Versions: Yealink YMCS versions prior to 2025-05-26 Description: The issue allows unauthorized access to deactivated interfaces due to the lack of prevention of OpenAPI access by frozen enterprise accounts. Recommendations: For Yealink YMCS versions...

PT-2025-26506 · Campcodes · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /hms/forgot-password.php. The manipulation of the fullname argument leads to...

PT-2025-26508 · Campcodes · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue has been found in the system, affecting the /doctor/search.php file. The manipulation of the searchdata argument leads to SQL injection. This issue can be...

PT-2025-26316 · Coros · Coros Pace 3

Name of the Vulnerable Software and Affected Versions: COROS PACE 3 versions 3.0808.0 and earlier Description: The issue is caused by a NULL pointer dereference vulnerability. Sending a crafted BLE message can force the device to reboot. Recommendations: For COROS PACE 3 versions 3.0808.0 and...

PT-2025-26424 · WordPress · Import Youtube Videos As Wp Posts

Name of the Vulnerable Software and Affected Versions: Import YouTube videos as WP Posts versions n/a through 2.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This can be used to gain...

PT-2025-26326 · Unknown · Cloudclassroom-Php Project

Name of the Vulnerable Software and Affected Versions: CloudClassroom-PHP Project version 1.0 Description: A SQL Injection issue was discovered in the askquery.php file. The squeryx parameter accepts unsanitized input, which is passed directly into backend SQL queries. Recommendations: For...

PT-2025-26404 · Husky · Husky

Name of the Vulnerable Software and Affected Versions: HUSKY versions 1.3.7 and earlier Description: The issue affects the HUSKY software, allowing for PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File...

PT-2025-26416 · Unknown · Bluff Post

Name of the Vulnerable Software and Affected Versions: Bluff Post versions 1.1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web application,...

PT-2025-26332 · Indgeek · Indgeek Cliplink

Name of the Vulnerable Software and Affected Versions: indgeek ClipLink versions 1.1 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized requests. Recommendations: For indgeek ClipLink versions 1.1 and earlier, as a temporary workaround,...

PT-2025-26471 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical vulnerability affects the unknown code of the file /goform/formSetDomainFilter. The manipulation of the argument curTime/sched name %d/url %d leads to a stack-based buffer overflow. The...

PT-2025-26390 · Unknown · Buying Buddy Idx Crm

Name of the Vulnerable Software and Affected Versions: Buying Buddy IDX CRM versions through 2.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This enables potential attackers to...

PT-2025-26327 · Sourcecodester · Sourcecodester My Food Recipe

Name of the Vulnerable Software and Affected Versions: SourceCodester My Food Recipe version 1.0 Description: A vulnerability was found in the function addRecipeModal of the file /endpoint/add-recipe.php of the component Add Recipe Page. The manipulation of the argument Name leads to cross site...

PT-2025-26285 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue has been found in the code-projects Online Shoe Store, affecting an unknown functionality of the file /cart2.php. The manipulation of the ID argument leads to SQL...

PT-2025-26313 · Coros · Coros Pace 3

Name of the Vulnerable Software and Affected Versions: COROS PACE 3 devices versions through 3.0808.0 Description: An issue was discovered in the BLE implementation of the COROS smartwatch, which does not support LE Secure Connections and instead enforces BLE Legacy Pairing. In this pairing metho...

PT-2025-26310 · Unknown · Code-Projects School Fees Payment System

Name of the Vulnerable Software and Affected Versions: code-projects School Fees Payment System version 1.0 Description: A problematic issue was found in the system, leading to cross-site request forgery. The manipulation can be initiated remotely. Recommendations: For code-projects School Fees...

PT-2025-26324 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.11.x through 9.11.15 Mattermost versions 10.5.x through 10.5.5 Mattermost versions 10.6.x through 10.6.5 Mattermost versions 10.7.x through 10.7.2 Mattermost versions 10.8.x through 10.8.0 Description: The issue is relat...

PT-2025-26315 · Coros · Coros Pace 3

Name of the Vulnerable Software and Affected Versions: COROS PACE 3 versions 3.0808.0 and earlier Description: An issue was discovered that allows an attacker to connect to the device via Bluetooth Low Energy BLE if no other device is connected. Once connected, the attacker can access the device'...

PT-2025-26484 · Dnn · Dnn

Name of the Vulnerable Software and Affected Versions: DNN formerly DotNetNuke versions 6.0.0 through 10.0.0 Description: The issue allows a specially crafted series of malicious interactions to potentially expose NTLM hashes to a third-party SMB server. This is a problem in the DNN.PLATFORM, par...