PT-2025-12505 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: JIZHICMS versions up to 1.7.0 Description: A problematic issue was found in JIZHICMS, affecting an unknown part of the file /user/release.html of the component Article Handler. The manipulation of the argument ishot with the input 1 leads to...

PT-2025-12522 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.0 Description: A critical issue has been found in the PHPGurukul Art Gallery Management System, affecting some unknown functionality of the file /admin/edit-artist-detail.php?editid=1. The...

PT-2025-27771 · Mikrotik · Routeros

Name of the Vulnerable Software and Affected Versions: MikroTik RouterOS versions prior to 7.19.2 Description: A cross-site scripting issue is present in the hotspot of MikroTik's RouterOS. An attacker can inject the javascript protocol in the dst parameter. When the victim browses to the malicio...

PT-2025-12513 · Unknown · Phpgurukul Bank Locker Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Bank Locker Management System version 1.0 Description: A critical issue was found in the PHPGurukul Bank Locker Management System, affecting the file /changeimage1.php. The manipulation of the editid argument leads to sql injection...

PT-2025-12399 · Simple Machines · Simplemachines Smf

Name of the Vulnerable Software and Affected Versions: SimpleMachines SMF version 2.1.4 Description: A problem was found in SimpleMachines SMF and classified as problematic. It affects some unknown functionality of the file ManageAttachments.php. The manipulation of the Notice argument leads to...

PT-2025-12044

Name of the Vulnerable Software and Affected Versions h2oai/h2o-3 version 3.46.0.1 Description A denial of service DoS attack is possible due to a vulnerability in the "/3/Parse" endpoint. This endpoint uses a user-specified string to construct a regular expression, which is then applied to anoth...

PT-2025-12034 · Unknown · Lunary-Ai/Lunary

Name of the Vulnerable Software and Affected Versions: lunary-ai/lunary version 1.5.0 Description: The issue is related to improper privilege management in the models.ts file, which allows users with viewer roles to modify models owned by others. The "PATCH" endpoint for models lacks appropriate...

PT-2025-12186

Name of the Vulnerable Software and Affected Versions aimhubio/aim version 3.22.0 Description The software contains a Cross-Site Request Forgery CSRF vulnerability in the tracking server. This is due to overly permissive CORS settings, allowing cross-origin requests from all origins. This enables...

PT-2025-12032 · Unknown · Transformeroptimus/Superagi

Name of the Vulnerable Software and Affected Versions: transformeroptimus/superagi affected versions not specified Description: An information disclosure issue exists, allowing an attacker to leak sensitive user information, including names, emails, and passwords. This can be achieved by attempti...

PT-2025-12285 · Unknown · Transformeroptimus/Superagi

Name of the Vulnerable Software and Affected Versions: transformeroptimus/superagi affected versions not specified Description: An information disclosure issue exists due to the lack of verification of a user's organization in the /get/organisation/ endpoint, allowing any authenticated user to...

PT-2025-12051 · Unknown +1 · Chuanhuchatgpt +1

Name of the Vulnerable Software and Affected Versions: ChuanhuChatGPT version 20240918 Description: A Denial of Service DoS vulnerability was identified in ChuanhuChatGPT, which could be exploited by sending large data payloads using a multipart boundary. Although a patch was applied for a previo...

PT-2025-12282 · Unknown · Transformeroptimus/Superagi

Name of the Vulnerable Software and Affected Versions: transformeroptimus/superagi version v0.0.14 Description: The issue is related to improper privilege management. After logging into the system, users can change the passwords of other users, which could lead to account takeover. Recommendation...

PT-2025-12160 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: flatpressblog/flatpress version 1.3 Description: A stored cross-site scripting XSS issue exists. When a user uploads a file with a .xsig extension and directly accesses this file, the server responds with a Content-type of...

PT-2025-12066 · Unknown · Binary-Husky/Gpt Academic

Name of the Vulnerable Software and Affected Versions: binary-husky/gpt academic version 3.83 Description: A Cross-Site Request Forgery CSRF issue allows an attacker to trick a user into uploading files without their consent, exploiting their session. This can lead to unauthorized file uploads an...

PT-2025-11709 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: emlog pro versions 2.5.0 through 2.5. Description: An arbitrary file upload vulnerability in the component /admin/template.php allows attackers to execute arbitrary code via uploading a crafted PHP file. The vulnerability is exploited through...

PT-2025-11629

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 Description The IBM AIX nimesis NIM master service has a flaw in its process controls that could allow a remote attacker to execute arbitrary commands. This issue is actively exploited. The vulnerability affects th...

PT-2025-11476 · Sourcecodester · Itsourcecode Vehicle Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Vehicle Management System version 1.0 Description: A vulnerability was found in the SourceCodester Vehicle Management System, affecting some unknown functionality of the file /confirmbooking.php. The manipulation of the id...

PT-2025-11525

Name of the Vulnerable Software and Affected Versions IObit Malware Fighter version 12.1.0 Description An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter allows attackers to arbitrarily delete files and escalate privileges. Recommendations As a temporary workaround, consider...

PT-2025-11506 · Unknown · Phpgurukul Online Banquet Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Banquet Booking System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Online Banquet Booking System. The issue affects an unknown functionality of the file /admin/booking-search.php, where the...

PT-2025-12563 · Totolink · Totolink A3000Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3000RU versions up to 5.9c.5185 Description: A problematic issue was found in the Syslog Configuration File Handler component, specifically in the file /cgi-bin/ExportSyslog.sh. This issue leads to improper access controls. The atta...