PT-2025-17810 · Unknown · Vasaio Qr Code

Name of the Vulnerable Software and Affected Versions: Vasaio QR Code versions 1.2.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and...

PT-2025-17820 · Unknown · Milat Jquery Automatic Popup

Name of the Vulnerable Software and Affected Versions: Milat jQuery Automatic Popup versions 1.3.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-17703 · WordPress · My Tickets

Name of the Vulnerable Software and Affected Versions: My Tickets – Accessible Event Ticketing plugin for WordPress versions up to and including 2.0.16 Description: The issue arises from the mt save profile function not properly restricting access to unauthorized users to update roles. This allow...

PT-2025-17719 · WordPress · Verification Sms With Targetsms Plugin

Name of the Vulnerable Software and Affected Versions: Verification SMS with TargetSMS plugin for WordPress versions up to, and including, 1.5 Description: The issue is related to limited Remote Code Execution in the Verification SMS with TargetSMS plugin for WordPress. This vulnerability is due ...

PT-2025-17754 · Unknown · Popup Anything

Name of the Vulnerable Software and Affected Versions: Anything Popup versions n/a through 7.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS, where an attacker can inject maliciou...

PT-2025-17856 · Mediawiki · Managewiki

Name of the Vulnerable Software and Affected Versions: ManageWiki versions prior to commit 2f177dc Description: The issue concerns a reflected or stored XSS vulnerability in the review dialog of ManageWiki, a MediaWiki extension. An attacker with a logged-in session can exploit this by modifying ...

PT-2025-17805 · Zalo · Zalo Official Live Chat

Name of the Vulnerable Software and Affected Versions: Zalo Official Live Chat versions 1.0.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing unintended...

PT-2025-17778 · Unknown · Confirm User Registration

Name of the Vulnerable Software and Affected Versions: Confirm User Registration versions through 2.1.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject...

PT-2025-17816 · Unknown · Contact Form 7 Calendar

Name of the Vulnerable Software and Affected Versions: Contact Form 7 Calendar versions 3.0.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in the Contact Form 7 Calendar. Recommendations: For versions 3.0.1 and earlier, update to a...

PT-2025-17684 · Unknown · Echarge Hardy Barth Cph2

Name of the Vulnerable Software and Affected Versions: eCharge Hardy Barth cPH2 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of eCharge Hardy Barth cPH2 charging stations. Authentication is not requir...

PT-2025-17630 · Insyde · Insydeh2O

Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O kernel versions 5.2 through 05.29.49 Insyde InsydeH2O kernel versions 5.3 through 05.38.49 Insyde InsydeH2O kernel versions 5.4 through 05.46.49 Insyde InsydeH2O kernel versions 5.5 through 05.54.49 Insyde InsydeH2O kernel...

PT-2025-17641

Name of the Vulnerable Software and Affected Versions Redis versions 2.6 through 7.4.2 Description Redis is an open source, in-memory database that persists on disk. An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By defaul...

PT-2025-17654 · Totolink · Totolink A950Rg +3

Name of the Vulnerable Software and Affected Versions: TOTOLINK A830R version 4.1.2cu.5182 B20201102 TOTOLINK A950RG version 4.1.2cu.5161 B20200903 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5247 B20211129 Description: A buffer overflow issue was discovered in th...

PT-2025-17647 · Totolink · Totolink A800R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 Description: A buffer overflow vulnerability was found in the downloadFile.cgi endpoint through the v14 parameter. This issue allows for potential exploitation. No information is provided about th...

PT-2025-17651 · Q4 · Q4 Inc Investor Relations Platform

Name of the Vulnerable Software and Affected Versions: Q4 Inc Investor Relations Platform version 5.147.1.2 Description: A Cross-Site Scripting XSS issue in the search function allows attackers to execute arbitrary Javascript by injecting a crafted payload into the SearchTerm parameter. This...

PT-2025-17601 · Unknown +1 · Xy Chart Plugin +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The built-in XY Chart plugin is affected by a DOM XSS issue. A user with Editor permissions can modify a panel to execute arbitrary JavaScript. Recommendations: At the moment, there is no...

PT-2025-17501 · Link Software Llc · Html Forms

Name of the Vulnerable Software and Affected Versions: Link Software LLC HTML Forms versions 1.5.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

PT-2025-19346 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.374 Description: A critical issue affects the Log Handler component of TOTOLINK A720R, specifically the file /cgi-bin/cstecgi.cgi. The manipulation of the topicurl argument with the input...

PT-2025-17566 · Totolink · Totolink A950Rg +3

Name of the Vulnerable Software and Affected Versions: TOTOLINK A830R version 4.1.2cu.5182 B20201102 TOTOLINK A950RG version 4.1.2cu.5161 B20200903 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5247 B20211129 Description: A buffer overflow vulnerability was found in...

PT-2025-17567 · Totolink · Totolink A950Rg +3

Name of the Vulnerable Software and Affected Versions: TOTOLINK A830R version 4.1.2cu.5182 B20201102 TOTOLINK A950RG version 4.1.2cu.5161 B20200903 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5247 B20211129 Description: A buffer overflow issue was discovered in th...