PT-2025-15819 · Unknown · Quantumcloud Seo Help

Name of the Vulnerable Software and Affected Versions: QuantumCloud SEO Help versions n/a through 6.6.0 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For versions n/a through 6.6.0, update to a...

PT-2025-15733 · Unknown · Abozain Albanna Customize Login Page

Name of the Vulnerable Software and Affected Versions: AboZain Albanna Customize Login Page versions 1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended...

PT-2025-15803 · Unknown · Ydesignservices Multiple Location Google Map

Name of the Vulnerable Software and Affected Versions: Ydesignservices Multiple Location Google Map versions 1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions...

PT-2025-15840 · Totvs · Totvs Framework

Name of the Vulnerable Software and Affected Versions: TOTVS Framework Linha Protheus version 12.1.2310 Description: An issue in the software allows attackers to bypass multi-factor authentication MFA via a crafted websocket message. Recommendations: For version 12.1.2310, consider disabling...

PT-2025-15752 · Unknown · Mmx – Make Me Christmas

Name of the Vulnerable Software and Affected Versions: MMX – Make Me Christmas versions 1.0.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-15810 · Unknown · Vite Coupon

Name of the Vulnerable Software and Affected Versions: Vite Coupon versions 1.0.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Remote Code Inclusion. This means an attacker can potentially execute malicious code on a remote server, which could...

PT-2025-15699 · Unknown · Jerryhanjj Erp

Name of the Vulnerable Software and Affected Versions: jerryhanjj ERP version 1.0 Description: The issue concerns SQL injection in the set password function located in application/controllers/home.php. This allows for potential manipulation of database queries. Recommendations: For jerryhanjj ERP...

PT-2025-15860 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 22.2R3-S4 Junos OS versions 22.4 prior to 22.4R3-S2 Junos OS versions 23.2 prior to 23.2R2 Junos OS versions 23.4 prior to 23.4R2 Junos OS Evolved versions prior to 22.2R3-S4-EVO Junos OS Evolved versions 22.4-EVO...

PT-2025-15784 · Unknown · Hossainawlad Ald Login Page

Name of the Vulnerable Software and Affected Versions: hossainawlad ALD Login Page versions n/a through 1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in the hossainawlad ALD Login Page. Recommendations: For versions n/a throug...

PT-2025-15701 · Verydows · Verydows

Name of the Vulnerable Software and Affected Versions: verydows version 2.0 Description: The issue is related to insecure permissions, allowing a remote attacker to execute arbitrary code by uploading a specific file type. This can be achieved through the action of loading a particular type of...

PT-2025-15790 · Reve Chat · Reve Chat

Name of the Vulnerable Software and Affected Versions: REVE Chat versions n/a through 6.2.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability and Stored XSS in REVE Chat. Recommendations: For versions n/a through 6.2.2, update to a version that contains a fix fo...

PT-2025-15672 · WordPress · Wp Multitasking

Name of the Vulnerable Software and Affected Versions: WP MultiTasking WordPress plugin versions 0.1.12 and earlier Description: The issue concerns a lack of CSRF check when updating Header, Footer, and Body Script Settings. This could allow attackers to make logged-in admins perform such actions...

PT-2025-15431 · Fortinet · Fortiisolator Cli

Name of the Vulnerable Software and Affected Versions: Fortinet FortiIsolator CLI versions prior to 2.4.6 Description: The issue is related to an improper neutralization of special elements used in an OS command, which allows a privileged attacker to execute unauthorized code or commands via...

PT-2025-15351 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.90.7 Description: The issue is related to improper verification of intent by a broadcast receiver in Galaxy Store, allowing local attackers to write arbitrary files with the privilege of Galaxy Store. This...

PT-2025-15517 · Microsoft · Windows Subsystem For Linux +1

Name of the Vulnerable Software and Affected Versions: Windows Subsystem for Linux affected versions not specified Description: The issue is related to an out-of-bounds read that allows an authorized attacker to elevate privileges locally. It is described as an elevation-of-privilege vulnerabilit...

PT-2025-15571 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue allows an unauthorized attacker to execute code locally, potentially enabling them to affect the system. This is due to a use after free vulnerability in Microsoft Office...

PT-2025-15461 · Aruba · Aos-8 Instant +1

Name of the Vulnerable Software and Affected Versions: AOS-8 Instant versions prior to the fixed version AOS-10 AP versions prior to the fixed version Description: A vulnerability in the file creation process on the command line interface could allow an authenticated remote attacker to perform...

PT-2025-15476 · Fortinet · Fortiswitch

Name of the Vulnerable Software and Affected Versions: FortiSwitch versions 6.4.0 through 7.6.0 Description: A critical vulnerability in the FortiSwitch GUI allows remote, unauthenticated attackers to change admin passwords via a specially crafted request. This issue may give attackers control ov...

PT-2025-15468 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla versions prior to 2.1.1 and 3.3.1 Description: The issue arises from improper handling of identifiers, leading to a SQL injection vulnerability in the quoteNameStr method of the database package. This method is protected and has no...

Siemens Industrial Edge Device Kit

SUMMARY Industrial Edge Device Kit contains a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Industrial Edge Device Builders integrate Industrial Edge Device Kit into their offerings...