PT-2025-14421 · Unknown · M. Tuhin Ultimate Push Notifications

Name of the Vulnerable Software and Affected Versions: M. Tuhin Ultimate Push Notifications versions 1.1.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attack...

PT-2025-14172 · Unknown · Travis Simple Icons

Name of the Vulnerable Software and Affected Versions: Travis Simple Icons versions through 2.8.4 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 2.8.4,...

PT-2025-14023 · Valmet · Valmet Dna Visualization

Name of the Vulnerable Software and Affected Versions: Valmet DNA visualization in DNA Operate affected versions not specified Description: The issue is related to a lack of protection against brute force attacks. This allows an attacker to make an arbitrary number of login attempts without any...

PT-2025-14271 · Infoway Llc · Ebook Downloader

Name of the Vulnerable Software and Affected Versions: Infoway LLC Ebook Downloader versions 1.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Ebook Downloader, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendation...

PT-2025-14218 · Unknown · Digireturn Dn Footer Contacts

Name of the Vulnerable Software and Affected Versions: digireturn DN Footer Contacts versions 1.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an...

PT-2025-14266 · Unknown · Gosign – Posts Slider Block

Name of the Vulnerable Software and Affected Versions: Gosign – Posts Slider Block versions 1.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers...

PT-2025-14146 · Unknown · Boospot Boo Recipes

Name of the Vulnerable Software and Affected Versions: BooSpot Boo Recipes versions n/a through 2.4.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inje...

PT-2025-18655 · Totolink · Totolink Cpe Cp900

Name of the Vulnerable Software and Affected Versions: TOTOLINK CPE CP900 version 6.3c.1144 B20190715 Description: A command injection issue was found in the setApRebootScheCfg function through the hour or minute parameters. This allows attackers to execute arbitrary commands via a manipulated...

PT-2025-14076 · Unknown · Sunshine Photo Cart

Name of the Vulnerable Software and Affected Versions: Sunshine Photo Cart versions 3.4.10 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially be exploited, but no specific details about the estimated number of...

PT-2025-14043

Name of the Vulnerable Software and Affected Versions Ays Pro Quiz Maker versions n/a through 6.6.8.7 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...

PT-2025-14178 · Unknown · Piotnet Forms

Name of the Vulnerable Software and Affected Versions: Piotnet Forms versions 1.0.0 through 1.0.30 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-14392 · Unknown · Next-Cart Store To Woocommerce Migration

Name of the Vulnerable Software and Affected Versions: Next-Cart Store to WooCommerce Migration versions 3.9.4 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

PT-2025-14144 · Unknown · Tz Plusgallery

Name of the Vulnerable Software and Affected Versions: TZ PlusGallery versions 1.5.5 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For versions 1.5.5 and earlier, update to a version...

ASB-A-343129193

In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-14374 · Codezips · Codezips Gym Management System

Name of the Vulnerable Software and Affected Versions: CodeZips Gym Management System version 1.0 Description: The issue concerns SQL injection in the name parameter within the "/dashboard/admin/deleteroutine.php" API endpoint. This allows for potential exploitation. Recommendations: For CodeZips...

PT-2025-14066 · Unknown · Aec Kiosque

Name of the Vulnerable Software and Affected Versions: AEC Kiosque versions 1.9.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means that an attacker can injec...

PT-2025-14416 · Unknown · Cgm Event Calendar

Name of the Vulnerable Software and Affected Versions: CGM Event Calendar versions 0.8.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-14030 · Unknown · Breezing Forms

Name of the Vulnerable Software and Affected Versions: Breezing Forms versions 1.2.8.11 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions 1.2.8.11...

PT-2025-14211 · Unknown · Beee Acf City Selector

Name of the Vulnerable Software and Affected Versions: Beee ACF City Selector versions 1.16.0 and earlier Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, enabling the retrieval of embedded sensitive data. Recommendations: For Beee ACF City...

PT-2025-14073 · Unknown · Tla Media Gtm Kit

Name of the Vulnerable Software and Affected Versions: TLA Media GTM Kit versions n/a through 2.3.1 Description: The issue allows retrieval of embedded sensitive data due to debug messages revealing unnecessary information. Recommendations: For versions n/a through 2.3.1, update to a version that...