PT-2025-15771 · Unknown · Eliot Akira Admin Menu Post List

Name of the Vulnerable Software and Affected Versions: Eliot Akira Admin Menu Post List versions 2.0.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-15750 · Chandan Garg · Cg Scroll To Top

Name of the Vulnerable Software and Affected Versions: Chandan Garg CG Scroll To Top versions n/a through 3.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-15755

Name of the Vulnerable Software and Affected Versions: Koa versions prior to 2.16.1 Koa versions prior to 3.0.0-alpha.5 Description: The issue arises when passing untrusted user input to ctx.redirect, which can execute JavaScript code on the user's device, even after sanitizing the input...

PT-2025-15699 · Unknown · Jerryhanjj Erp

Name of the Vulnerable Software and Affected Versions: jerryhanjj ERP version 1.0 Description: The issue concerns SQL injection in the set password function located in application/controllers/home.php. This allows for potential manipulation of database queries. Recommendations: For jerryhanjj ERP...

PT-2025-15447 · Unknown · Bep/Imagemeta

Name of the Vulnerable Software and Affected Versions: bep/imagemeta versions prior to 0.11.0 Description: The issue concerns a Go library for reading image metadata from various file formats, including JPEG, TIFF, PNG, and WebP. A buffer created for parsing metadata in PNG and WebP images had no...

PT-2025-15431 · Fortinet · Fortiisolator Cli

Name of the Vulnerable Software and Affected Versions: Fortinet FortiIsolator CLI versions prior to 2.4.6 Description: The issue is related to an improper neutralization of special elements used in an OS command, which allows a privileged attacker to execute unauthorized code or commands via...

PT-2025-15349

Name of the Vulnerable Software and Affected Versions: SMR versions prior to Apr-2025 Release 1 Description: The issue is related to an out-of-bounds read in enrollment with the cdsp frame secfr trustlet. This allows local privileged attackers to read out-of-bounds memory. Recommendations: For...

PT-2025-15615

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A logical bug exists in handling lazy-loaded values during unparceling. This issue is being actively exploited. Recommendations: At the moment, there is no information about a newer version...

PT-2025-15440 · Ivanti · Ivanti Endpoint Manager

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager versions prior to 2024 SU1 Ivanti Endpoint Manager versions prior to 2022 SU7 Description: The issue allows a remote unauthenticated attacker to obtain admin privileges through Reflected XSS. User interaction is requir...

PT-2025-15473

Name of the Vulnerable Software and Affected Versions: AOS-10 GW affected versions not specified AOS-8 Controller/Mobility Conductor affected versions not specified Description: Multiple vulnerabilities exist in the web-based management interface of the affected devices. Successful exploitation o...

PT-2025-15429 · Fortinet · Fortianalyzer +1

Name of the Vulnerable Software and Affected Versions: FortiAnalyzer versions 7.6.1 and below FortiAnalyzer versions 7.4.5 and below FortiAnalyzer versions 7.2.8 and below FortiAnalyzer versions 7.0.13 and below FortiManager versions 7.6.1 and below FortiManager versions 7.4.5 and below...

PT-2025-28134 · Git +1 · Liblouis

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software suffers from an unknown write issue discovered through OSS-Fuzz. The crash state indicates involvement of the lou handlePassVariableAction...

PT-2025-15168

Name of the Vulnerable Software and Affected Versions DA affected versions not specified Description The component DA within MediaTek firmware has a potential out-of-bounds write issue due to a missing bounds check. Successful exploitation of this issue could allow an attacker to gain local...

PT-2025-15170

Name of the Vulnerable Software and Affected Versions DA affected versions not specified Description The issue is related to a possible permission bypass due to a logic error. This could lead to local escalation of privilege if an attacker has physical access to the device, with no additional...

PT-2025-15255 · Philips · Intellispace Portal

Name of the Vulnerable Software and Affected Versions: IntelliSpace Portal versions 12 and prior Description: The issue arises from the exploitation of port 755 through the "Object Marshalling" technique, allowing an attacker to read internal files without authentication. This is possible by...

PT-2025-15128 · Iteaj · Iteaj Iboot

Name of the Vulnerable Software and Affected Versions: iteaj iboot 物联网网关 version 1.1.3 Description: A issue was found in the File Upload component, affecting the processing of the file /common/upload/batch. The manipulation of the File argument leads to cross-site scripting. The attack may be...

PT-2025-15308 · Unknown · Hailey888 Oa System

Name of the Vulnerable Software and Affected Versions: hailey888 oa system versions up to 2025.01.01 Description: A problem has been found in the function testMess of the file cn/gson/oasys/controller/inform/InformManageController.java of the component Backend. The manipulation of the argument me...

PT-2025-15105 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical issue was found in the codeprojects Online Restaurant Management System, affecting some unknown functionality of the file /admin/category save.php. The...

PT-2025-15088 · Kentico · Kentico Xperience

Name of the Vulnerable Software and Affected Versions: Kentico Xperience versions prior to 13.0.181 Description: The issue allows authenticated users to distribute malicious content via certain interactions with the media library file upload feature, potentially leading to stored cross-site...

PT-2025-15057 · WordPress · Multivendorx

Name of the Vulnerable Software and Affected Versions: The MultiVendorX plugin for WordPress versions up to, and including, 4.2.19 Description: The issue is related to a missing capability check on the delete table rate shipping row function, which allows unauthorized loss of data. This makes it...