PT-2025-25562

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.7 Apache Tomcat versions 10.1.0 through 10.1.41 Apache Tomcat versions 9.0.23 through 9.0.105 Description The issue is related to an Untrusted Search Path vulnerability in the Apache Tomcat install...

PT-2025-24621

Name of the Vulnerable Software and Affected Versions Apache Kafka versions prior to 3.4.0 Apache Kafka versions 3.4.0 through 3.9.0 Description The issue concerns a Remote Code Execution RCE and Denial of Service attack via the SASL JAAS JndiLoginModule configuration in the Kafka Connect API and...

PT-2025-24544

Name of the Vulnerable Software and Affected Versions Anchor CMS version 0.12.7 Description A stored cross-site scripting XSS issue allows attackers to inject malicious JavaScript via the page description field in the page creation interface, specifically the "/admin/pages/add" API endpoint...

PT-2025-24416 · Bagisto · Bagisto

Name of the Vulnerable Software and Affected Versions: Bagisto version 2.0.0 Description: A Reflected Cross-Site Scripting XSS issue has been found, allowing an attacker to execute JavaScript code in the victim's browser by sending a malicious URL using the query parameter in the "/search" API...

PT-2025-24403 · WordPress · The Newsletter

Name of the Vulnerable Software and Affected Versions: The Newsletter WordPress plugin versions prior to 8.85 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because the plugin does not properly sanitise and esca...

PT-2025-24531 · Unknown · Unfoldwp Blogty

Name of the Vulnerable Software and Affected Versions: Unfoldwp Blogty versions 1.0.0 through 1.0.11 Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-24908 · Kde +4 · Konsole +4

Name of the Vulnerable Software and Affected Versions: konsole versions prior to 25.04.2 konsole versions 4:20.12.3 and earlier konsole versions 4:22.12.3 and earlier Description: The vulnerability in KDE Konsole allows remote code execution when loading URLs from scheme handlers such as ssh://,...

PT-2025-24496 · Unknown · Seofy Core

Name of the Vulnerable Software and Affected Versions: Seofy Core versions 1.4.5 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion in Seofy Core. Recommendations: F...

PT-2025-24393 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah Virus Testing Management System version 1.0 Description: A critical issue was found in the PHPGurukul Nipah Virus Testing Management System. The problem affects an unknown function of the file "/patient-report.php". The...

PT-2025-25595 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5232 B20210713 Description: A critical vulnerability was found in the TOTOLINK EX1200T, affecting an unknown function of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of...

PT-2025-25589 · Totolink · Totolink T10

Name of the Vulnerable Software and Affected Versions: TOTOLINK T10 version 4.1.8cu.5207 Description: A critical vulnerability was found in the TOTOLINK T10, affecting the function setWizardCfg of the file /cgi-bin/cstecgi.cgi in the HTTP POST Request Handler component. The manipulation of the...

PT-2025-24528 · Unknown · Unfoldwp Blogbyte

Name of the Vulnerable Software and Affected Versions: Unfoldwp Blogbyte versions 1.1.1 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-24347 · Unknown · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Client Database Management System. This issue affects an unknown part of the file /user update customer...

PT-2025-24582 · Totolink · Totolink T10

Name of the Vulnerable Software and Affected Versions: TOTOLINK T10 version 4.1.8cu.5207 Description: A critical issue affects the setWiFiRepeaterCfg function of the /cgi-bin/cstecgi.cgi file in the POST Request Handler component. The manipulation of the Password argument leads to a buffer...

Exploit for Race Condition in Canonical Apport

CVE-2025-5054 Vulnerability Detection Tool A Python tool to c...

PT-2025-24147 · Unknown · Appbanners

Name of the Vulnerable Software and Affected Versions: AppBanners versions 1.5.14 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject...

PT-2025-24280 · Code Projects · Code-Projects Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /view dental.php. The manipulation of the itr no argument leads to SQL injectio...

PT-2025-24220 · WordPress · Wp Legal Pages Wp Cookie Notice

Name of the Vulnerable Software and Affected Versions: WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions n/a through 3.8.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick ...

PT-2025-24324 · Unknown · Laundry Laundry System +1

Name of the Vulnerable Software and Affected Versions: code-projects Laundry System version 1.0 Description: A vulnerability was found in the Laundry System, affecting some unknown processing of the file /data/insert type.php. The manipulation of the Type argument leads to cross-site scripting. T...

PT-2025-24104 · Unknown · Ai Mortgage Calculator

Name of the Vulnerable Software and Affected Versions: AI Mortgage Calculator versions n/a through 1.0.1 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File...