PT-2025-18285 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Description: A critical issue was found in the cmd wireless function, where manipulation of the host argument leads to command injection. This issue can be exploited remotely. The vendor was contacted about...

PT-2025-17487 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions 9.1.0 through 9.1.1d6 Description: The issue allows a local user with admin privilege to potentially execute arbitrary code with full root privileges on Brocade Fabric OS. This is a local privilege escalation...

PT-2025-17008 · Unknown · Dashboard Notepads

Name of the Vulnerable Software and Affected Versions: Dashboard Notepads versions 1.2.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in Dashboard Notepads. Recommendations: For versions 1.2.1 and earlier, update to a version that...

PT-2025-17190 · Unknown · Stylemix Cost Calculator Builder

Name of the Vulnerable Software and Affected Versions: Stylemix Cost Calculator Builder versions 3.2.65 and earlier Description: The issue is related to an SQL Injection vulnerability, which allows attackers to inject malicious SQL commands. This is due to the improper neutralization of special...

PT-2025-17196 · Hazelcast · Hazelcast Management Center

Name of the Vulnerable Software and Affected Versions: Hazelcast Management Center versions prior to 6.0 Description: The issue allows remote code execution through a JndiLoginModule user.provider.url in a hazelcast-client XML document, which can be uploaded at the "/cluster-connections" API...

PT-2025-17086 · At Internet · At Internet Smarttag

Name of the Vulnerable Software and Affected Versions: AT Internet SmartTag versions n/a through 0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-16952 · WordPress · Password Protect

Name of the Vulnerable Software and Affected Versions: Password Protected plugin versions up to, and including, 2.7.7 Description: The issue allows unauthenticated attackers to extract sensitive data, including all protected site content, if the 'Use Transient' setting is enabled. This is possibl...

PT-2025-17224 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue affects some unknown functionality of the MPUT Command Handler component, leading to a buffer overflow. This can be exploited remotely. Recommendations: For PCMan FTP Server version...

PT-2025-17164 · Unknown · Webbytemplate Office Locator

Name of the Vulnerable Software and Affected Versions: WebbyTemplate Office Locator versions 1.3.0 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-16927 · Unknown · Wisdom Master Pro

Name of the Vulnerable Software and Affected Versions: Wisdom Master Pro versions 5.0 through 5.2 Description: An unrestricted upload of file with dangerous type vulnerability in the course management function allows remote authenticated users to craft a malicious file. Recommendations: For Wisdo...

PT-2025-16991 · Unknown · Simplegmaps

Name of the Vulnerable Software and Affected Versions: Simple Maps versions 0.98 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also...

PT-2025-18385 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server versions up to 2.0.7 Description: A critical vulnerability was found in the ASCII Command Handler component of PCMan FTP Server, leading to a buffer overflow. The attack can be initiated remotely, and the exploit has been...

PT-2025-18967 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical vulnerability was found in the HASH Command Handler component of PCMan FTP Server. The manipulation of this component leads to a buffer overflow. This issue can be exploited remotely, and...

PT-2025-16926 · Unknown · Wisdom Master Pro

Name of the Vulnerable Software and Affected Versions: Wisdom Master Pro versions 5.0 through 5.2 Description: A missing authorization issue in the retrieve teacher Information function allows remote attackers to obtain partial user data by accessing the API functionality. Recommendations: For...

PT-2025-18271 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Description: A critical issue has been found in the get cur lang ver function, where manipulation of the host argument leads to a buffer overflow. This issue can be exploited remotely. The vendor was...

PT-2025-16925 · Visicut · Visicut

Name of the Vulnerable Software and Affected Versions: VisiCut version 2.1 Description: The issue is related to insecure deserialization, where VisiCut 2.1 allows stack consumption via an XML document with nested set elements. This can be demonstrated by a java.util.HashMap StackOverflowError whe...

PT-2025-16833 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

PT-2025-16780 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue has been discovered, affecting the Login Handler component. The manipulation of the login email argument leads to SQL injection. This issue...

PT-2025-16875

Name of the Vulnerable Software and Affected Versions Whoogle search version 0.9.0 Description The issue allows attackers to execute arbitrary code via supplying a crafted search query in the /models/config.py component. Recommendations For Whoogle search version 0.9.0, consider restricting acces...

PT-2025-16893 · Sourcecodester · Sourcecodester Company Website Cms

Name of the Vulnerable Software and Affected Versions: SourceCodester Company Website CMS version 1.0 Description: The issue is related to Cross Site Scripting XSS via the /dashboard/Services API endpoint. This allows for potential malicious script injection. No information is provided about the...