PT-2025-26848 · Hexagon · Hexagon Hxgn Oncall Dispatch Advantage

Name of the Vulnerable Software and Affected Versions: Hexagon HxGN OnCall Dispatch Advantage Web version 10.2309.03.00264 Hexagon HxGN OnCall Dispatch Advantage Mobile version 10.2402 Description: The issue allows a remote authenticated attacker with access to the Broadcast Person functionality ...

PT-2025-26836 · Cadclick · Cadclick

Name of the Vulnerable Software and Affected Versions: CADClick versions 1.13.0 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML via the tree parameter, enabling Cross-Site Scripting XSS attacks. Recommendations: For CADClick versions 1.13.0 and...

PT-2025-26834 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file /panel/edit-services.php. The manipulation of the editid argument leads to SQ...

PT-2025-26907 · Unknown · Car Rental System

Name of the Vulnerable Software and Affected Versions: Car Rental System version 1.0 Description: A critical issue was found in the Car Rental System, affecting some unknown functionality of the file /admin/add cars.php. The manipulation of the image argument leads to unrestricted upload. This...

PT-2025-26815 · Brother Industries +2 · Dcp-7090Dw +199

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language PJL command that will crash the target device. The device will reboot, after which the attacker...

PT-2025-26868 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical issue affects the function formAdvanceSetup of the file /goform/formAdvanceSetup. The manipulation of the argument webpage leads to stack-based buffer overflow. The attack may be initiat...

PT-2025-26774 · Mmzdev · Mmzdev Knowledgegpt

Name of the Vulnerable Software and Affected Versions: mmzdev KnowledgeGPT version 0.0.5 Description: An issue in the Document Display Component allows a remote attacker to execute arbitrary code. Recommendations: For mmzdev KnowledgeGPT version 0.0.5, consider disabling the Document Display...

PT-2025-26662

Name of the Vulnerable Software and Affected Versions: EnGenius EnShare Cloud Service versions 1.4.11 and earlier Description: An OS command injection issue exists due to the usbinteract.cgi script's failure to properly sanitize user input passed to the path parameter. This allows unauthenticated...

PT-2025-26708 · WordPress · Conference Scheduler

Name of the Vulnerable Software and Affected Versions: Conference Scheduler plugin for WordPress versions up to, and including, 2.5.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping via the className parameter. This allow...

PT-2025-26671

Name of the Vulnerable Software and Affected Versions: Zhiyuan OA versions 5.0 Zhiyuan OA versions 5.1 through 5.6sp1 Zhiyuan OA versions 6.0 through 6.1sp2 Zhiyuan OA version 7.0 Zhiyuan OA versions 7.0sp1 through 7.1 Zhiyuan OA version 7.1sp1 Zhiyuan OA versions 8.0 through 8.0sp2 Description: ...

PT-2025-26692

Name of the Vulnerable Software and Affected Versions: WRC-2533GST2 affected versions not specified WRC-1167GST2 affected versions not specified Description: The issue is related to the unrestricted upload of files with dangerous types. If a specially crafted file is uploaded by a remote...

PT-2025-26684 · Sapido · Sapido Brc76N +11

Name of the Vulnerable Software and Affected Versions: Sapido BR071n version All Sapido BR261c version All Sapido BR270n version All Sapido BR476n version All Sapido BRC70n version All Sapido BRC70x version All Sapido BRC76n version All Sapido BRD70n version All Sapido BRE70n version All Sapido...

PT-2025-26609 · Xdg-Utils +1 · Xdg-Utils +1

Name of the Vulnerable Software and Affected Versions: xdg-utils versions 1.1.0 through 1.2.1 xdg-utils version 1.2.1 Description: The issue concerns xdg-open in xdg-utils, which can send requests containing SameSite=Strict cookies. This can facilitate Cross-Site Request Forgery CSRF attacks. The...

PT-2025-26616 · Ncr · Ncr Terminal Handler

Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the "UserService SOAP API" function. Recommendations: For NCR Terminal Handler version 1.5.1, consider...

PT-2025-26652

Name of the Vulnerable Software and Affected Versions: 70mai M300 up to 20250611 Description: A critical issue was found in the Telnet Service component, allowing the use of default credentials. The attack must be initiated within the local network. The exploit has been disclosed to the public an...

PT-2025-26579 · Unknown · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability was found in the code-projects Inventory Management System. This affects an unknown part of the file /php action/createCategories.php. The manipulatio...

PT-2025-26590

Name of the Vulnerable Software and Affected Versions Meridian Technique Materialise OrthoView versions through 7.5.1 Description Meridian Technique Materialise OrthoView through version 7.5.1 is susceptible to an OS Command Injection when servlet sharing is enabled. This allows for potential...

PT-2025-26648 · 70Mai · 70Mai 1S

Name of the Vulnerable Software and Affected Versions: 70mai 1S up to 20250611 Description: A problematic issue was found in the Configuration Handler component, affecting the /cgi-bin/Config.cgi?action=set file. This leads to improper authorization. The attack must be launched within the local...

PT-2025-26562 · Unknown · Code-Projects Online Shopping Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shopping Store version 1.0 Description: A critical issue affects an unknown functionality of the file /action.php. The manipulation of the arguments cat id, brand id, keyword, proId, pid leads to SQL injection. The attack...

PT-2025-26569 · Marktext · Marktext

Name of the Vulnerable Software and Affected Versions: MarkText versions up to 0.17.1 Description: A vulnerability has been found in MarkText, affecting the function getRecommendTitleFromMarkdownString of the file marktext/src/main/utils/index.js. The manipulation leads to inefficient regular...