1706 matches found
PT-2025-53301
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A successful exploitation could result in access to the device. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2024-27708
Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter...
CVE-2024-27708
The AIRC MyNET online management system (versions v.26.06 and earlier ) contains an iframe injection vulnerability. A remote attacker can exploit this issue via the src parameter to execute arbitrary code . Remediation involves updating the software to a version newer than 26.06 . Exploitation de...
PT-2025-52694
Name of the Vulnerable Software and Affected Versions Cobian Reflector version 0.9.93 RC1 Description The software contains a denial of service issue that allows attackers to crash the application. This occurs by overflowing the password input field. An attacker can paste a large 8000-byte buffer...
PT-2025-52722
Name of the Vulnerable Software and Affected Versions PluXml CMS version 5.8.22 Description An authenticated attacker with administrator panel access can execute arbitrary code remotely. This is achieved by injecting a malicious PHP webshell into a theme file, such as home.php. The attack require...
PT-2025-52472
Name of the Vulnerable Software and Affected Versions RealDefense SUPERAntiSpyware affected versions not specified Description A local attacker can escalate privileges on affected installations of RealDefense SUPERAntiSpyware. To exploit this, an attacker must first have the ability to execute...
PT-2025-52116
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Fabrica fabrica allows PHP Local File Inclusion.This issue affects Fabrica: from n/a through = 1.8.1...
PT-2025-52279
Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description A flaw exists in SourceCodester Client Database Management System 1.0 within the Leads Generation Module. The issue affects the file /user leads.php and allows for...
PT-2025-52362
Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description A spoofing issue exists in Microsoft Edge Chromium-based. Information about this issue has been published. Recommendations At the moment, there is no information about a...
PT-2025-52391
Name of the Vulnerable Software and Affected Versions NSF Unidata NetCDF-C affected versions not specified Description A flaw exists in the parsing of variable names, stemming from insufficient validation of user-supplied data length before copying it into a fixed-length stack-based buffer. This...
PT-2025-51247
FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module...
PT-2025-51171
Name of the Vulnerable Software and Affected Versions snap7-rs versions up to 1.142.1 Description A flaw exists in snap7-rs up to version 1.142.1. The issue resides in the TSnap7MicroClient::opWriteArea function within the s7 micro client.cpp file, potentially leading to a heap-based buffer...
PT-2025-55315
Bump release to 9.2.24-9.0.3.tuxcare.els1...
PT-2025-39
Уязвимость межсетевого экрана PT NGFW связана с отсутствием авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...
PT-2025-49526
Name of the Vulnerable Software and Affected Versions office service affected versions not specified Description A denial of service DoS issue exists in the office service. Successful exploitation of this issue may affect availability. Recommendations At the moment, there is no information about ...
PT-2025-54749
It appeared to be attempting to steal credentials from local files...
PT-2025-50946
Name of the Vulnerable Software and Affected Versions Plesk versions 18.0 through 18.0.74 Description Plesk 18.0 contains an incorrect access control issue within the Password-Protected Directories component. An authenticated attacker with limited privileges can inject arbitrary directives into...
PT-2025-48372
Actively exploited CVE : CVE-2025-20833...
PT-2025-47641
Name of the Vulnerable Software and Affected Versions Azure Bastion versions prior to November 20, 2025 Description A critical elevation of privilege flaw impacts Azure Bastion. Attackers can potentially gain higher permissions through capture-replay attacks if the system is unpatched. This allow...