PT-2025-14720 · Unknown · Docxpresso

Name of the Vulnerable Software and Affected Versions: Docxpresso versions n/a through 2.6 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows Absolute Path Traversal in Docxpresso. Recommendations: For...

PT-2025-14615 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input in the Apache HTTP Server. No specific details about the estimated number of potentially affected devices or real-world incidents are...

PT-2025-11066 · Google · Android

Name of the Vulnerable Software and Affected Versions: sdp discovery.cc affected versions not specified Description: A use-after-free issue exists in the sdp snd service search req function of sdp discovery.cc. This could lead to remote code execution without requiring additional privileges or us...

PT-2025-11067 · Google · Android

Name of the Vulnerable Software and Affected Versions: avct lcb act.cc affected versions not specified Description: A use-after-free issue exists in the avct lcb msg ind function within avct lcb act.cc. Successful exploitation of this issue could lead to local escalation of privilege without...

PT-2025-10831

Name of the Vulnerable Software and Affected Versions Azure PromptFlow affected versions not specified Description The issue is related to improper isolation or compartmentalization in Azure PromptFlow, allowing an unauthorized attacker to execute code over a network. Recommendations At the momen...

PT-2025-7433 · Dell · Dell Client Platform Bios

Name of the Vulnerable Software and Affected Versions: Dell Client Platform BIOS affected versions not specified Description: The issue is related to a Weak Authentication vulnerability in the Dell Client Platform BIOS. A high privileged attacker with local access could potentially exploit this...

PT-2025-6685 · Unknown · Oshine Modules

Name of the Vulnerable Software and Affected Versions: Oshine Modules affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This can lead to the execution of malicious...

PT-2025-6872

Name of the Vulnerable Software and Affected Versions: h6web versions affected versions not specified Description: The issue is a Reflected Cross-Site Scripting XSS flaw that could allow an attacker to inject malicious JavaScript code into a URL. When a user accesses that URL, the injected code i...

PT-2025-6812 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected reason. There is a mention of not waiting for vulnerability scanning results. No further details are provided...

PT-2025-6185 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The reason for the rejection of the issue is mentioned, but no further details are provided about the issue itself. No information is available...

PT-2025-6291 · Microsoft · Windows Core Messaging +1

Name of the Vulnerable Software and Affected Versions: Windows Core Messaging affected versions not specified Description: The issue is related to an elevation of privileges in Windows Core Messaging, which is associated with a buffer overflow in dynamic memory. This could allow an attacker to...

PT-2025-6027 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. There is a mention of a rejected reason, but no further explanation is given...

PT-2025-5812 · Unknown · Media Library Module

Name of the Vulnerable Software and Affected Versions: Media library module affected versions not specified Description: The issue concerns a permission verification vulnerability in the media library module. Successful exploitation of this vulnerability may affect service confidentiality. There ...

PT-2025-5813 · Gallery · Gallery

Name of the Vulnerable Software and Affected Versions: Gallery module affected versions not specified Description: The issue is related to an arbitrary write vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality. There is no...

PT-2025-5729 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP affected versions not specified Description: When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note that software versions which have...

PT-2025-5378 · Pam · Pam

Name of the Vulnerable Software and Affected Versions: PAM affected versions not specified Description: A specific authentication strategy allows learning the ids of PAM users associated with certain authentication types. Recommendations: At the moment, there is no information about a newer versi...

PT-2025-5455 · Linsoftware · Linsoftware Blur Text

Name of the Vulnerable Software and Affected Versions: LinSoftware Blur Text versions n/a through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: Fo...

PT-2025-3723 · Unknown · Usbxpress Sdk

Name of the Vulnerable Software and Affected Versions: USBXpress SDK affected versions not specified Description: The issue is caused by an uncontrolled search path in the USBXpress SDK installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation and arbitrary code...

PT-2025-19369 · Git +1 · Radare2

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software contains a heap-double-free issue. The crash state involves r crbtree free, r bin object free, and r bin file free. Recommendations: At the momen...

PT-2025-5100 · David Hamilton · Orangebox

Name of the Vulnerable Software and Affected Versions: David Hamilton OrangeBox versions n/a through 3.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended actions...