PT-2025-3745 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to insufficient input validation in Android operating systems. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: At the...

PT-2024-6552 · Grafana +3 · Grafana +3

Name of the Vulnerable Software and Affected Versions: Grafana affected versions not specified Description: The issue is related to the wrong permission being applied to the alert rule write API endpoint in Grafana. This allows users with permission to write external alert instances to also write...

PT-2024-41039 · Unknown · Knowledge Space

Name of the Vulnerable Software and Affected Versions: Knowledge Space affected versions not specified Description: The issue is related to a lack of user permission checks in the Knowledge Space integrated planning platform's application programming interface. This could allow a remote attacker ...

PT-2024-29879 · Cyberark · Cyberark

Name of the Vulnerable Software and Affected Versions: CyberArk affected versions not specified Description: The issue concerns the exposure of sensitive information to an unauthorized actor. This is a critical vulnerability that affects CyberArk, allowing unauthorized access to confidential data...

PT-2024-29878 · Cyberark · Cyberark

Name of the Vulnerable Software and Affected Versions: CyberArk affected versions not specified Description: The issue concerns the exposure of sensitive information to an unauthorized actor. This is a case of CWE-200, which involves the exposure of confidential information. Recommendations: At t...

PT-2024-29935 · Avtec · Avtec Outpost

Name of the Vulnerable Software and Affected Versions: Avtec Outpost affected versions not specified Description: The issue concerns the use of a default cryptographic key in Avtec Outpost, which can be exploited to decrypt sensitive information. Recommendations: At the moment, there is no...

PT-2024-40565 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state includes functions such as chunk free object, sfclose, and pdfi close file. No...

PT-2024-29876 · Servision · Servision

Name of the Vulnerable Software and Affected Versions: Servision affected versions not specified Description: The issue concerns improper authentication, which is a type of security flaw where authentication mechanisms are not properly implemented, potentially allowing unauthorized access. The...

PT-2024-30031 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was found in the School Management System via the medium parameter at the "admininsert.php" endpoint. This allows for potential exploitation. No...

PT-2024-6611 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this issue, where the target...

PT-2024-30028 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was discovered in the School Management System, specifically via the transport parameter at the "vehicle.php" endpoint. This allows for potential...

PT-2024-11941 · Cisco · Cisco Webex

Name of the Vulnerable Software and Affected Versions: Cisco WebEx affected versions not specified Description: A buffer overflow issue has been identified. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no information about...

PT-2024-30722 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the s390/fpu component of the Linux kernel, where exception handling for the lfpc instruction within the load fpu state function was removed during a recent cod...

PT-2025-2854 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to insufficient input validation in the Android operating system's Framework component. This can be exploited to cause a denial of service. Recommendations: At the...

PT-2024-30033 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was discovered in the School Management System via the medium parameter at the "unitmarks.php" endpoint. This allows for potential exploitation. No...

PT-2024-30016 · Unknown · Hotel Management System

Name of the Vulnerable Software and Affected Versions: Hotel Management System affected versions not specified Description: A Cross-Site Request Forgery CSRF issue in the admin modify room.php component of the Hotel Management System allows attackers to escalate privileges. Recommendations: At th...

PT-2024-11678 · Apache · Apache

Name of the Vulnerable Software and Affected Versions: Apache affected versions not specified Description: The issue concerns incorrect handling of headers. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no information about...

PT-2024-17906 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: The issue is a type confusion vulnerability in the parsing of XE files, which can be exploited by remote attackers to execute arbitrary code on affected installations of...

PT-2024-7252 · Скуд Gate · Скуд Gate

Name of the Vulnerable Software and Affected Versions: СКУД Gate affected versions not specified Description: The issue is related to insufficient access control in the СКУД Gate software. Exploitation of this issue may allow a remote attacker to gain access to the software's database...

PT-2024-40891 · Libssh2 · Libssh2

Name of the Vulnerable Software and Affected Versions: libssh2 affected versions not specified Description: The issue is related to a heap-double-free crash. Technical details about the crash include the involvement of the libssh2 default free function, session free, and libssh2 session free...