PT-2025-53431

@F5 re: https://t.co/AvZmrhQb92 You use CVE-2021-201667, but that is likely 2021-20167...

PT-2025-53301

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A successful exploitation could result in access to the device. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-52943

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.16...

CVE-2024-27708

Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter...

PT-2025-52722

Name of the Vulnerable Software and Affected Versions PluXml CMS version 5.8.22 Description An authenticated attacker with administrator panel access can execute arbitrary code remotely. This is achieved by injecting a malicious PHP webshell into a theme file, such as home.php. The attack require...

CVE-2024-27708

CVE-2024-27708 affects AIRC MyNET v26.06 and earlier. An iframe injection via the src parameter allows remote code execution with network access and user interaction required. The vulnerability impact is rated CRITICAL (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). Red Hat and ENISA/EUVD entrie...

PT-2025-52694

Name of the Vulnerable Software and Affected Versions Cobian Reflector version 0.9.93 RC1 Description The software contains a denial of service issue that allows attackers to crash the application. This occurs by overflowing the password input field. An attacker can paste a large 8000-byte buffer...

PT-2025-52472

Name of the Vulnerable Software and Affected Versions RealDefense SUPERAntiSpyware affected versions not specified Description A local attacker can escalate privileges on affected installations of RealDefense SUPERAntiSpyware. To exploit this, an attacker must first have the ability to execute...

PT-2025-52116

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Fabrica fabrica allows PHP Local File Inclusion.This issue affects Fabrica: from n/a through = 1.8.1...

PT-2025-52391

Name of the Vulnerable Software and Affected Versions NSF Unidata NetCDF-C affected versions not specified Description A flaw exists in the parsing of variable names, stemming from insufficient validation of user-supplied data length before copying it into a fixed-length stack-based buffer. This...

PT-2025-52279

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description A flaw exists in SourceCodester Client Database Management System 1.0 within the Leads Generation Module. The issue affects the file /user leads.php and allows for...

PT-2025-52362

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description A spoofing issue exists in Microsoft Edge Chromium-based. Information about this issue has been published. Recommendations At the moment, there is no information about a...

PT-2025-51247

FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module...

PT-2025-51171

Name of the Vulnerable Software and Affected Versions snap7-rs versions up to 1.142.1 Description A flaw exists in snap7-rs up to version 1.142.1. The issue resides in the TSnap7MicroClient::opWriteArea function within the s7 micro client.cpp file, potentially leading to a heap-based buffer...

PT-2025-49526

Denial of service DoS vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2025-50946

Name of the Vulnerable Software and Affected Versions Plesk versions 18.0 through 18.0.74 Description Plesk 18.0 contains an incorrect access control issue within the Password-Protected Directories component. An authenticated attacker with limited privileges can inject arbitrary directives into...

PT-2025-48372

Actively exploited CVE : CVE-2025-20833...

PT-2025-47641

Name of the Vulnerable Software and Affected Versions Azure Bastion versions prior to November 20, 2025 Description A critical elevation of privilege flaw impacts Azure Bastion. Attackers can potentially gain higher permissions through capture-replay attacks if the system is unpatched. This allow...

PT-2025-48289

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.15 Description OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. A client sending slow messages to cupsd, such as one byte per second, can cause delays...

PT-2025-46659

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An issue exists related to incorrect default permissions that may lead to elevated system access. This occurs when the target installation folder is not adequately secured. Approximately 1000 devices...