PT-2025-1063 · Unknown · Websoft Hcm

Name of the Vulnerable Software and Affected Versions: Websoft HCM affected versions not specified Description: The issue is related to the Websoft HCM software, which has a vulnerability associated with arbitrary file upload. This could allow a remote attacker to execute arbitrary code by creati...

PT-2025-1173 · Microsoft · Windows Digital Media +1

Name of the Vulnerable Software and Affected Versions: Windows Digital Media affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Windows Digital Media. It involves a memory reading issue beyond the allowed range. Exploitation of this iss...

PT-2025-1218 · Microsoft · Power Automate

Name of the Vulnerable Software and Affected Versions: Microsoft Power Automate affected versions not specified Description: The issue is related to incorrect code generation management in the Power Automate platform. Exploitation of this issue may allow an attacker to execute arbitrary code...

PT-2025-2769

Name of the Vulnerable Software and Affected Versions: ETM affected versions not specified Description: Specially constructed queries targeting ETM could discover active remote access sessions. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2025-3707

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A user with administrator privileges can perform command injection. This issue allows an administrator to carry out command injection, potentially leading...

CVE-2025-22151

Strawberry GraphQL has a type confusion vulnerability in its relay integration that affects multiple ORM integrations (Django, SQLAlchemy, Pydantic). From version 0.182.0 up to, but not including, 0.257.0, the global node field may resolve to a different type mapped to the same model, causing inf...

PT-2025-1577 · Silabs.Com · Ember Znet Sdk

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A buffer overflow issue in the packet handoff plugin allows an attacker to overwrite memory outside the plugin's buffer. This could potentially lead to...

PT-2025-3018 · Unknown · Ability Module

Name of the Vulnerable Software and Affected Versions: Ability module affected versions not specified Description: The issue is related to a startup control vulnerability in the ability module. Successful exploitation of this vulnerability may cause features to perform abnormally. There is no...

PT-2025-2693 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A request was rejected because it was reserved but not necessary, leading to an unused vulnerability patch. Recommendations: At the moment, there is no information about a newer...

PT-2025-2937 · Suse +1 · Suse Linux Enterprise Server +1

Name of the Vulnerable Software and Affected Versions: Teradata versions prior to 2024-11-04 Description: The issue concerns the mismanagement of groups by certain Teradata account-handling code when used with SUSE Enterprise Linux Server. Specifically, during an operating system change from SUSE...

PT-2025-3107 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions are specified. Description: The issue was initially considered but later rejected as it was determined not to be a security issue. Further investigation confirmed this assessment. Recommendations: A...

PT-2025-4579 · Unknown · Lenderd 1003 Mortgage Application

Name of the Vulnerable Software and Affected Versions: Lenderd 1003 Mortgage Application versions n/a through 1.87 Description: The issue is related to a missing authorization vulnerability in the Lenderd 1003 Mortgage Application, which allows the exploitation of incorrectly configured access...

PT-2025-3922 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823X versions 240126/240802 Description: A critical vulnerability has been found, affecting the function FUN 00412244. This issue leads to a null pointer dereference and can be exploited remotely. The exploit has been disclosed to...

PT-2025-5662 · Git +1 · Libvips

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue has been identified, with a crash type of Heap-buffer-overflow READ 1. The crash state involves functions such as next...

PT-2025-2702 · Qualcomm · Snapdragon +9

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption during the processing of FIPS encryption or decryption IOCTL calls invoked from user-space. This can lead to...

PT-2025-1823 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: There is a request for information about a specific issue. No details are provided about the nature of the issue, potentially affected devices, ...

CVE-2025-21609

SiYuan is self-hosted, open source personal knowledge management software. SiYuan Note version 3.1.18 has an arbitrary file deletion vulnerability. The vulnerability exists in the POST /api/history/getDocHistoryContent endpoint. An attacker can craft a payload to exploit this vulnerability,...

PT-2025-2988 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write due to a buffer overflow in wbrc bt dev write of wb regon coordinator.c. This could lead to local...

PT-2025-2820 · Microsoft · Microsoft

Name of the Vulnerable Software and Affected Versions: Microsoft affected versions not specified Description: The issue is described as a DOS/Out-of-bounds Read. There is a discussion about the potential for Remote Code Execution RCE, but it is unclear if this is related to the same issue...

PT-2025-34389

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a use-after-free UAF vulnerability within the f2fs file system compression functionality, specifically in the f2fs free dic function. The issue occurs when th...