PT-2026-2933

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 10.1 through 12.1 Prisma Access versions 10.2 through 11.2 Description A vulnerability exists in Palo Alto Networks PAN-OS software and Prisma Access when GlobalProtect is enabled. This flaw allows an...

PT-2026-2682

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists that allows for privilege escalation on affected systems. This could allow attackers to gain elevated access. Recommendations At the moment, there is no information about a...

PT-2026-2643

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 147 Description A sandbox escape exists within the Messaging System component. This allows for a potential security compromise. Recommendations Update Firefox to version 147 or later...

CVE-2023-4217

A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation...

CVE-2024-34533

A SQL injection vulnerability in ZI PT Solusi Usaha Mudah Analytic Data Query module aka izidata 11.0 through 17.x before 17.0.3 allows a remote attacker to gain privileges via a query to IZITools::querycheck, IZITools::queryfetch, or IZITools::queryexecute...

CVE-2025-23438

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vincent Mimoun-Prat WP PT-Viewer wp-ptviewer allows Reflected XSS.This issue affects WP PT-Viewer: from n/a through = 2.0.2...

CVE-2017-20216

FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem.php script. Attackers can execute arbitrary system commands as root by exploiting unsanitized POST parameters in the execFlirSystem functi...

PT-2026-2165

Name of the Vulnerable Software and Affected Versions wpDiscuz versions prior to 7.6.47 Description The software contains a shortcode injection issue that allows attackers to execute arbitrary shortcodes. This is achieved by including shortcodes in comment content sent via email notifications...

CVE-2017-20216

FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem.php script. Attackers can execute arbitrary system commands as root by exploiting unsanitized POST parameters in the execFlirSystem functi...

PT-2026-1810

🟠 React Router, Cross-Site Request Forgery, CVE-2025-47216 Moderate https://t.co/LQdTXi1ca7...

FLIR Thermal Camera 操作系统命令注入漏洞

FLIR Thermal Camera F Series and others are a series of thermal imaging cameras from FLIR Corporation. An operating system command injection vulnerability exists in FLIR Thermal Camera PT-Series version 8.0.0.64, which stems from an uncleaned POST parameter and could lead to a remote command...

FLIR Thermal Camera 信任管理问题漏洞

FLIR Thermal Camera F Series and others are a series of thermal imaging cameras from FLIR, USA. A trust management issue vulnerability exists in FLIR Thermal Camera F/FC/PT/D version 8.0.0.64, which stems from the presence of hard-coded SSH credentials that could lead to unauthorized remote acces...

CVE-2017-20216

CVE-2017-20216 concerns FLIR Thermal Camera PT-Series firmware 8.0.0.64, where multiple unauthenticated remote command injection vulnerabilities exist in the controllerFlirSystem.php script. The root cause is unsanitized POST parameters in the execFlirSystem() function leading to shell_exec() cal...

CVE-2017-20216 FLIR Thermal Camera PT-Series firmware version 8.0.0.64 Unauthenticated Remote Command Injection

FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem.php script. Attackers can execute arbitrary system commands as root by exploiting unsanitized POST parameters in the execFlirSystem functi...

CVE-2017-20216 FLIR Thermal Camera PT-Series firmware version 8.0.0.64 Unauthenticated Remote Command Injection

FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem.php script. Attackers can execute arbitrary system commands as root by exploiting unsanitized POST parameters in the execFlirSystem functi...

VulnCheck KEV: CVE-2017-20216

FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem.php script. Attackers can execute arbitrary system commands as root by exploiting unsanitized POST parameters in the execFlirSystem functi...

PT-2026-03: Access Control Violation Vulnerability in PT NGFW

The vulnerability was identified in PT NGFW, version1.8.1 certified. The discovered vulnerability can be exploited by an attacker to gain access to MinIO backups. The exfiltrated data can be used for reconnaissance of the organization's infrastructure to conduct subsequent attacks on the system...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992579 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc: Don't try to copy PPR for task with NULL ptregs powerpc sets up PFKTHREAD and PFIOWORKER...

PT-2025-53765

Name of the Vulnerable Software and Affected Versions affected versions not specified Description The software suffers from an unrestricted file upload issue, allowing the upload of files with dangerous types. This could potentially lead to malicious code execution or other security compromises...

PT-2025-53386

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A path traversal weakness exists in Tenda CH22 version 1.0.0.1. This issue impacts an unknown function within the /public/ file. Remote attackers can exploit this to perform path traversal. The exploit is...