PT-2025-25537

Name of the Vulnerable Software and Affected Versions ASUS Armoury Crate versions 5.9.9.0 through 6.1.18.0 Description A race condition vulnerability exists in Armoury Crate, arising from a Time-of-check Time-of-use issue, potentially leading to authentication bypass. This vulnerability could all...

PT-2025-25490 · Apache · Apache Nuttx Rtos

Name of the Vulnerable Software and Affected Versions: Apache NuttX RTOS versions 6.22 through 12.9.0 Description: An issue was discovered in the Apache NuttX RTOS apps/examples/xmlrpc application, where a device stats structure stored remotely provided parameters with a hardcoded buffer size,...

PT-2025-25432 · Xwiki · Xwiki

Name of the Vulnerable Software and Affected Versions: XWiki versions prior to 16.4.7 XWiki versions prior to 16.10.3 XWiki versions prior to 17.0.0 Description: The issue allows any user with edit rights on a page to execute code, including Groovy, Python, and Velocity, with programming rights b...

PT-2025-25430 · Xwiki · Xwiki

Name of the Vulnerable Software and Affected Versions: XWiki versions 7.4.5 through 16.4.7 XWiki versions 8.2 through 16.10.4 XWiki versions 17.1.0-rc-1 and earlier Description: The issue allows pages to gain script or programming rights when they contain a link and the target of the link is...

PT-2025-25274 · Info Zip +1 · Info-Zip +1

Name of the Vulnerable Software and Affected Versions: Archive::Unzip::Burst versions 0.01 through 0.09 Description: The issue concerns a bundled InfoZip library in Archive::Unzip::Burst for Perl, which is affected by several vulnerabilities. Recommendations: For Archive::Unzip::Burst versions 0....

PT-2025-25338 · Unknown · Absolute Secure Access Server

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access server versions 9.0 through 13.54 Description: The issue is related to a memory management vulnerability. Attackers with network access to the server can cause a Denial of Service by sending a specially crafted sequence...

PT-2025-25313 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab EE versions prior to 17.10.8 GitLab EE versions 17.11 prior to 17.11.4 GitLab EE versions 18.0 prior to 18.0.2 Description: An issue has been discovered in GitLab EE that may have allowed private repositories to be cloned due to a race...

PT-2025-25354

Name of the Vulnerable Software and Affected Versions AVEVA PI Data Archive versions 2018 SP3 Patch 4 and earlier AVEVA PI Data Archive version 2023 AVEVA PI Data Archive version 2023 Patch 1 AVEVA PI Server versions 2018 SP3 Patch 6 and earlier AVEVA PI Server version 2023 AVEVA PI Server versio...

PT-2025-25111 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing an attacker with limited privileges to inject malicious scripts into vulnerable form fields. This could...

PT-2025-24671 · Geoserver · Geoserver

Name of the Vulnerable Software and Affected Versions: GeoServer versions prior to 2.25.6 GeoServer versions prior to 2.26.3 Description: The issue allows bypassing the default REST API security, enabling access to the index page. This is possible because the REST API security does not handle...

PT-2025-24684 · Unknown · Matrix-Rust-Sdk

Name of the Vulnerable Software and Affected Versions: matrix-rust-sdk versions 0.8.0 through 0.11.0 Description: The issue arises from the failure to correctly validate the sender of an encrypted event in the matrix-sdk-crypto component. This allows a malicious homeserver operator to modify even...

PT-2025-24714 · Fortinet +1 · Fortiproxy +3

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 7.6.0 through 7.6.1 Fortinet FortiOS versions 7.4.0 through 7.4.6 Fortinet FortiOS versions 7.2.0 through 7.2.10 Fortinet FortiOS versions 7.0.0 through 7.0.16 Fortinet FortiOS version before 6.4.15 FortiProxy versio...

PT-2025-24892 · Redcap · Redcap

Name of the Vulnerable Software and Affected Versions: REDCap versions 13.1.9 Description: A stored cross-site scripting XSS issue in the Project Dashboards allows authenticated users to execute arbitrary web script or HTML by injecting a crafted payload into the Dashboard title and Dashboard...

PT-2025-24698 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.2, ID19.5.3 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2025-24665 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions prior to 10.19.10.0 Description: A hardcoded key in the software allows a local authenticated attacker to decrypt the stored environment password. This issue enables an attacker with local access to potential...

PT-2025-24954 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. When ...

PT-2025-25156

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.22 and earlier Description The issue is related to an Improper Input Validation that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, whe...

PT-2025-24718 · Fortinet · Fortiadc

Name of the Vulnerable Software and Affected Versions: FortiADC versions 6.1 through 7.6.1 FortiADC version 7.0 FortiADC versions 7.1.0 through 7.1.4 FortiADC versions 7.2.0 through 7.2.7 FortiADC versions 7.4.0 through 7.4.6 FortiADC versions 7.6.0 through 7.6.1 FortiADC version 6.2 Description:...

PT-2025-25106 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim browses ...

PT-2025-24717

Name of the Vulnerable Software and Affected Versions FortiOS versions 6.4 and earlier FortiOS versions 7.0 and earlier FortiOS versions 7.2 and earlier FortiOS versions 7.4.7 and earlier FortiOS version 7.6.0 Description The issue allows an authenticated user to access full SSL-VPN settings via ...