PT-2025-18915 · Unknown · Phpgurukul Online Dj Booking Management System

Name of the Vulnerable Software and Affected Versions: PHPGuruku Online DJ Booking Management System version 1.0 Description: A critical issue affects the processing of the file /admin/booking-bwdates-reports-details.php, where the manipulation of the fromdate argument leads to SQL injection. The...

PT-2025-18728 · Wangshen · Wangshen Secgate 3600

Name of the Vulnerable Software and Affected Versions: Wangshen SecGate 3600 version 2024 Description: A critical vulnerability was found in Wangshen SecGate 3600. The issue affects an unknown function of the file /?g=route ispinfo export save. The manipulation of the file name argument leads to...

PT-2025-18749 · WordPress +1 · Full – Cliente +2

Name of the Vulnerable Software and Affected Versions: FULL – Cliente plugin for WordPress versions 3.1.5 through 3.1.25 Description: The issue allows authenticated attackers with Subscriber-level access and above to perform SQL Injection via the formId parameter due to insufficient escaping and...

PT-2025-18913 · Unknown · Phpgurukul Online Birth Certificate System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Birth Certificate System version 1.0 Description: A critical issue has been discovered, affecting the /admin/search.php file. The manipulation of the searchdata argument leads to SQL injection. This issue can be exploited...

PT-2025-18765 · WordPress · Buddyboss Platform

Name of the Vulnerable Software and Affected Versions: Buddyboss Platform plugin for WordPress versions up to and including 2.8.50 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping, allowing authenticated attackers with...

PT-2025-18927 · Openvm · Openvm

Name of the Vulnerable Software and Affected Versions: OpenVM version 1.0.0 Description: The issue is related to an overflow vulnerability in the AUIPC instruction decomposition of the OpenVM framework. A typo in the code results in incorrect range checking of the highest limb of pc, leading to a...

PT-2025-18644

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been resolved in the Linux kernel related to the nfs4 module. When the allocation of a slot fails, all other allocated slots should be cleaned up to prevent memor...

PT-2025-18356 · NetGear · Netgear Ex6200

Name of the Vulnerable Software and Affected Versions: Netgear EX6200 version 1.0.3.94 Description: A critical issue has been discovered, affecting the function sub 54014. The manipulation of the argument host leads to a buffer overflow. This issue can be exploited remotely. The vendor was...

PT-2025-18726 · Wangshen · Wangshen Secgate 3600

Name of the Vulnerable Software and Affected Versions: Wangshen SecGate 3600 version 2024 Description: A critical vulnerability has been found in Wangshen SecGate 3600, affecting the processing of the file ?g=obj area export save. The manipulation of the argument file name leads to path traversal...

PT-2025-18679

Name of the Vulnerable Software and Affected Versions Tenda W20E version 15.11.0.6 Description A command injection issue exists in the formSetNetCheckTools function via the hostName parameter. This allows attackers to execute arbitrary commands by sending a crafted request. Command injection is a...

PT-2025-18499 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc2-syzkaller-00073-g88619e77b33d Description: A vulnerability has been resolved in the Linux kernel related to missing SIGTRAP checking. The issue occurs when some events not associated with progress in t...

PT-2025-18286 · Unknown · Phpgurukul Directory Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Directory Management System version 2.0 Description: A SQL Injection issue was identified in the admin/edit-directory.php file. Attackers can exploit this issue via the email parameter in a POST request to execute arbitrary SQL...

PT-2025-18198 · Unknown · Phpgurukul Curfew E-Pass Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Curfew e-Pass Management System version 1.0 Description: A critical issue was found in the PHPGurukul Curfew e-Pass Management System. The problem affects an unknown functionality of the file /admin/pass-bwdates-report.php. The...

PT-2025-18142 · Dnsdist +1 · Dnsdist +1

Name of the Vulnerable Software and Affected Versions: DNSdist versions prior to 1.9.9 Description: When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that triggers an illegal memory access double-free and crash...

PT-2025-27635

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the version that includes the fix for the issue described Description: The issue is related to a false positive warning in the Linux kernel, specifically in the drm/amd/display component. This warning occurs due...

PT-2025-18063 · Unknown · 20120630 Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus versions 20120630 up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160 Description: A critical vulnerability has been found in Novel-Plus, affecting the function addCrawlSource of the file...

PT-2025-18057 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.0 Description: A critical issue was found in the PHPGurukul Art Gallery Management System. The problem affects an unknown function of the file /admin/aboutus.php. Manipulation of the pagetitl...

PT-2025-18053 · Playedu · Playedu

Name of the Vulnerable Software and Affected Versions: playeduxyz PlayEdu versions 1.8 and earlier Description: A problem was found in the processing of the "/api/backend/v1/user/create" file of the User Avatar Handler component. The manipulation of the Avatar argument leads to server-side reques...

PT-2025-17997 · Unknown · Baseweb Jsite

Name of the Vulnerable Software and Affected Versions: baseweb JSite versions up to 1.0 Description: A problematic issue has been found in baseweb JSite. The manipulation of the Remarks argument leads to cross-site scripting. It is possible to launch the attack remotely. Recommendations: For...

PT-2025-17960

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 10.05.0 Description The issue is related to the mishandling of overlong UTF-8 encoding in the decode utf8 function in base/gp utf8.c. This problem exists due to an incomplete fix for a previous issue...