CVE-2025-4888

CVE-2025-4888 affects Code-Projects Pharmacy Management System 1.0, specifically the function medicineType::take_order within the Add Order Details component. The issue enables a buffer overflow due to the described manipulation, with a local attack requirement. The vulnerability has been publicl...

CVE-2025-4769

A vulnerability classified as critical was found in CBEWIN Anytxt Searcher 1.3.1128.0. This vulnerability affects unknown code of the file ATService.exe. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The...

PT-2025-21858 · Unknown · Code-Projects Courier Management System

Name of the Vulnerable Software and Affected Versions: code-projects Tourism Management System version 1.0 Description: A critical issue affects the LoginUser function of the Login User component. The manipulation of the username/password argument leads to a stack-based buffer overflow. This issu...

PT-2025-21856 · Code Projects · Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical vulnerability was found in the code-projects Pharmacy Management System. This affects the function medicineType::take order of the component "Add Order Details". The...

CVE-2025-4769

A vulnerability classified as critical was found in CBEWIN Anytxt Searcher 1.3.1128.0. This vulnerability affects unknown code of the file ATService.exe. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The...

CVE-2025-4769

The CVE-2025-4769 entry concerns CBEWIN Anytxt Searcher 1.3.1128.0, affecting ATService.exe with an uncontrolled search path vulnerability. According to PT-Security, exploitation requires local access, with high attack complexity and low privileges, leading to a potential local escalation or impa...

CVE-2025-4767

A vulnerability was found in defog-ai introspect up to 0.1.4. It has been rated as critical. Affected by this issue is the function testcustomtool of the file introspect/backend/integrationroutes.py of the component Test Endpoint. The manipulation of the argument inputmodel leads to code injectio...

CVE-2025-4740

CVE-2025-4740 affects BeamCtrl Airiana up to v11.0, with a deserialization vulnerability in the coef file leading to a local attack. Exploit disclosed; impact details in CVSS metrics indicate partial confidentiality/integrity/availability. Public fixes are not documented in the provided sources; ...

CVE-2024-57096

An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file...

PT-2025-21598 · Unknown · Beamctrl Airiana

Name of the Vulnerable Software and Affected Versions: BeamCtrl Airiana versions up to 11.0 Description: A vulnerability was found in BeamCtrl Airiana, affecting unknown code of the file coef. The manipulation leads to deserialization. The attack needs to be approached locally. Recommendations: F...

CVE-2025-27488

Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally...

CVE-2025-30400

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2025-29975

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-32706

Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-29970

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2024-57096

An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file...

PT-2025-21228 · Kingsoft · Wps Office

Name of the Vulnerable Software and Affected Versions: WPS Office versions prior to 19302 Description: The issue allows a local attacker to obtain sensitive information via a crafted file. Recommendations: For versions prior to 19302, update to version 19302 or later to resolve the issue...

CVE-2025-4540

A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows. It has been rated as critical. This issue affects some unknown processing of the component CLodopPrintService. The manipulation leads to unquoted search path. The attack needs to be approached locally. The complexity of an attack...

CVE-2025-32706

Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-30400

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...