PT-2025-19725 · Osticket · Osticket

Name of the Vulnerable Software and Affected Versions: osTicket versions 1.17.5 and earlier Description: A SQL injection issue exists in the Search functionality of the tickets.php page, allowing authenticated attackers to execute arbitrary SQL commands. This is achieved via a combination of the...

PT-2025-19804 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: A remote code execution RCE vulnerability was discovered in SeaCMS via the component phomebak.php. This issue allows attackers to execute arbitrary code via a crafted request. Recommendations: For SeaCMS versi...

PT-2025-19736 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 12.1.0 through 12.1.1 Description: IBM Db2 for Linux, UNIX and Windows...

PT-2025-19730

Name of the Vulnerable Software and Affected Versions Rhymix version 2.1.22 Description The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the procFileAdminEditImage method in the /file/file.admin.controller.php file. Recommendations For Rhym...

PT-2025-19799 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 12.1.0 through 12.1.1 Description: The issue allows an authenticated user ...

PT-2025-19341 · Unknown · Phpgurukul Notice Board System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Notice Board System version 1.0 Description: A critical issue has been found in PHPGurukul Notice Board System, affecting some unknown functionality of the file /bwdates-reports-details.php?vid=2. The manipulation of the fromdate a...

PT-2025-19780 · Xmall · Xmall

Name of the Vulnerable Software and Affected Versions: xmall version 1.1 Description: The issue is related to incorrect access control, allowing attackers to bypass authentication. This can be achieved via a crafted GET request to the "/index" API endpoint. Recommendations: For xmall version 1.1,...

PT-2025-19720 · WordPress · Envolve Plugin

Name of the Vulnerable Software and Affected Versions: Envolve Plugin versions up to, and including, 1.0 Description: The Envolve Plugin for WordPress is vulnerable to arbitrary file deletion due to improper validation of a file or its path prior to deletion. This issue affects the zetra...

Unsecured Authentication Attempt Detected (Medium)

A server allow for authentication using credentials in an unencrypted manner over unencrypted channel. Such credentials might be revealed to an attacker intercepting this traffic and used to gain access to data on the server. This plugin only works with Tenable.ot. Please visit...

PT-2025-19761 · WordPress · External Image Replace Plugin

Name of the Vulnerable Software and Affected Versions: External image replace plugin for WordPress versions up to, and including, 1.0.8 Description: The issue is related to missing file type validation in the external image replace get posts::replace post function, allowing authenticated attacker...

PT-2025-19770 · Npm · @Misskey-Dev/Summaly

Name of the Vulnerable Software and Affected Versions: @misskey-dev/summaly versions 3.0.1 through 5.2.0 Description: A logic error in the main summaly function causes the allowRedirects option to never be passed to any plugins, and as a result, isn't enforced. This issue allows Misskey to follow...

PT-2025-19326 · Zhangyanbo2007 · Youkefu

Name of the Vulnerable Software and Affected Versions: zhangyanbo2007 youkefu versions up to 4.2.0 Description: A critical issue was found in the function Upload of the file MediaController.java, where the manipulation of the argument imgFile leads to unrestricted upload. This issue can be...

PT-2025-19713

Name of the Vulnerable Software and Affected Versions Gefen WebFWC In AV over IP products versions 1.70, 1.85h, 1.86v Description An issue in the /usr/local/bin/jncs.sh script allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute...

PT-2025-19783 · Yaoqishan · Yaoqishan

Name of the Vulnerable Software and Affected Versions: yaoqishan version 0.0.1-SNAPSHOT Description: The issue is related to incorrect access control in the "/admin/" API endpoint, which allows attackers to gain access to Admin rights via a crafted request. Recommendations: For yaoqishan version...

PT-2025-19777 · Kob · Kob

Name of the Vulnerable Software and Affected Versions: kob version 1.0.0-SNAPSHOT Description: The issue is related to incorrect access control in the doFilter function, which allows attackers to access sensitive information by sending a crafted payload. Recommendations: For version 1.0.0-SNAPSHO...

PT-2025-19752 · Dbsyncer · Dbsyncer

Name of the Vulnerable Software and Affected Versions: DBSyncer version 2.0.6 Description: The issue is related to incorrect access control in the component /config/download of DBSyncer, allowing attackers to access a JSON file that contains sensitive account information, including the encrypted...

PT-2025-19775 · Unknown · Itranswarp

Name of the Vulnerable Software and Affected Versions: itranswarp version 2.19 Description: An issue in the component /manage/ of itranswarp allows attackers to bypass authentication via a crafted request. Recommendations: For version 2.19, consider restricting access to the /manage/ component...

PT-2025-19792

Name of the Vulnerable Software and Affected Versions MobSF versions up to and including 4.3.2 Description MobSF is a mobile application security testing tool used by security teams across numerous organizations, typically deployed on centralized internal or cloud-based servers. The tool provides...

PT-2025-19338 · Unknown · Phpgurukul Online Dj Booking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online DJ Booking Management System version 1.0 Description: A critical issue affects the processing of the file /admin/booking-search.php, where the manipulation of the searchdata argument leads to SQL injection. The attack can be...

PT-2025-19729 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: foxcms version 1.2.5 Description: The issue is a SQL injection vulnerability via the executeCommand method in DataBackup.php. This vulnerability allows for potential SQL injection attacks. Recommendations: For foxcms version 1.2.5, consider...