PT-2025-18205 · Modernwms · Modernwms

Name of the Vulnerable Software and Affected Versions: modernwms version 1.0 Description: The issue allows an attacker to view the MD5 hash of the administrator password and other attributes without authentication. This is due to excessive exposure of information and the lack of adequate access...

PT-2025-18062 · Unknown · 20120630 Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus versions 20120630 up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160 Description: A vulnerability was found in Novel-Plus, affecting the function list of the file...

PT-2025-18048 · Yoyiio · Beyongcms

Name of the Vulnerable Software and Affected Versions: youyiio BeyongCms version 1.6.0 Description: A critical vulnerability has been found in youyiio BeyongCms. The issue affects an unknown function of the file /admin/theme/Upload.html of the component Document Management Page. The manipulation ...

PT-2025-18071 · Unknown · Codeastro Bus Ticket Booking System

Name of the Vulnerable Software and Affected Versions: Codeastro Bus Ticket Booking System version 1.0 Description: A Cross-Site Scripting XSS issue exists in the User Registration and User Profile features, allowing an attacker to execute arbitrary code in the Full Name and Address fields during...

PT-2025-18109

Name of the Vulnerable Software and Affected Versions PHPGurukul Hostel Management System version 2.1 Description A vulnerability was found in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack,...

PT-2025-18066 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus versions 20120630 up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160 Description: A critical vulnerability was found in Novel-Plus, affecting the genCode function of the GeneratorController.java file. The manipulation leads to missing...

PT-2025-18108 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah Virus Testing Management System version 1.0 Description: A critical issue has been identified in the PHPGurukul Nipah Virus Testing Management System. The problem affects an unknown function within the...

PT-2025-18082 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Placement Management System version 1.0 Description: A critical vulnerability was found in the iSourcecode Placement Management System. The issue affects an unknown functionality of the file /registration.php. The manipulation of...

PT-2025-17991 · Unknown · Itwanger Paicoding

Name of the Vulnerable Software and Affected Versions: itwanger paicoding version 1.0.3 Description: A vulnerability has been found in the software, classified as problematic. It affects an unknown functionality of the file "/article/app/post". The manipulation of the content argument leads to...

PT-2025-18012 · Unknown · Amtt Hotel Broadband Operation System

Name of the Vulnerable Software and Affected Versions: AMTT Hotel Broadband Operation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /manager/system/nlog down.php. The manipulation of the ProtocolType argument leads to...

PT-2025-17978 · Goldendb · Goldendb

Name of the Vulnerable Software and Affected Versions: GoldenDB affected versions not specified Description: There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the...

PT-2025-17946 · WordPress · Xpro Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Xpro Elementor Addons - Pro plugin for WordPress versions 1.4.9 and below Description: The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom...

PT-2025-18958 · Inedo · Inedo Proget

Name of the Vulnerable Software and Affected Versions: Inedo ProGet versions 2024.22 and earlier Description: Inedo ProGet allows remote attackers to reach restricted functionality through the C reflection layer. This can be demonstrated by causing a denial of service, such as when an attacker...

PT-2025-17964 · Codimd +1 · Codimd +1

Name of the Vulnerable Software and Affected Versions: CodiMD versions 2.5.4 and earlier Description: The issue concerns a bypass of the Content Security Policy CSP protection mechanism against Cross-Site Scripting XSS attacks through uploaded SVG documents containing JavaScript. This bypass can...

PT-2025-18263 · Ctrlx Os · Ctrlx Os

Name of the Vulnerable Software and Affected Versions: ctrlX OS affected versions not specified Description: A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to delete the configuration of physical...

PT-2025-18261 · Ctrlx Os · Ctrlx Os

Name of the Vulnerable Software and Affected Versions: ctrlX OS affected versions not specified Description: A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to manipulate the network configuration...

PT-2025-17889 · WordPress · Ajax Comment Form Cst

Name of the Vulnerable Software and Affected Versions: Ajax Comment Form CST plugin for WordPress versions up to, and including, 1.2 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation via the 'acform cst settings' page. This allows...

PT-2025-17881

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module affected versions not specified Mitsubishi Electric Corporation CC-Link IE TSN Analog-Digital Converter module affected versions not specified Mitsubishi Electric Corporation...

PT-2025-17930 · Unknown · Filez Client

Name of the Vulnerable Software and Affected Versions: FileZ client affected versions not specified Description: A cross-site scripting issue was reported in the FileZ client, which could allow code execution if a local user visits a crafted URL. Recommendations: At the moment, there is no...

PT-2025-17869 · Unknown · Sherpa Orchestrator

Name of the Vulnerable Software and Affected Versions: Sherpa Orchestrator version 141851 Description: The web application lacks protection against CSRF attacks, allowing an attacker to conduct XSS attacks, add a new user or role, or exploit a SQL injection issue. Recommendations: For Sherpa...