PT-2025-25365 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A vulnerability issue was reported, but the reason for rejection is that the candidate number was issued in error. All references and descriptions related to this issue have been removed to...

PT-2025-25195 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issu...

PT-2025-25200 · Sinotrack · Sinotrack Devices

Name of the Vulnerable Software and Affected Versions: SinoTrack devices affected versions not specified Description: The issue concerns a default password that is well-known and common to all SinoTrack devices, which can be used to authenticate to the central device management interface. A...

GHSA-R4HF-R8GJ-JGW2

creationtimestamp| type| source ---|---|--- 2025-06-10 15:56:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114659883686202262...

PT-2025-24928 · Unknown · Phpgurukul Restaurant Table Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Restaurant Table Booking System version 1.0 Description: A problematic issue has been found in the system, affecting some unknown functionality of the file /check-status.php. The manipulation of the searchdata argument leads to...

PT-2025-24715 · Fortinet · Fortipam +1

Name of the Vulnerable Software and Affected Versions: Fortinet FortiPAM versions 1.0.0 through 1.4.1 Fortinet FortiSRA versions 1.4.0 through 1.4.1 Description: The issue is related to improper handling of insufficient permissions or privileges, allowing for improper access control via specially...

PT-2025-24425 · Redash · Redash

Name of the Vulnerable Software and Affected Versions: Redash versions up to 10.1.0/25.1.0 Description: A critical issue affects the run query function of the /query runner/python.py file in the getattr Handler component, leading to a sandbox issue. The exploit has been disclosed publicly and may...

PT-2025-24540 · Unknown · Vigybag Open Source Online Shop

Name of the Vulnerable Software and Affected Versions: VigyBag Open Source Online Shop affected versions not specified Description: A Host Header injection issue in the password reset function allows attackers to redirect victim users to a malicious site via a crafted URL. Recommendations: At the...

PT-2025-24498 · Magentech · Magentech Revo

Name of the Vulnerable Software and Affected Versions: magentech Revo versions 4.0.26 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. Th...

PT-2025-24362 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 5.0.3 Description: The issue allows a local attacker to cause a denial of service DOS through improper input. Recommendations: For versions prior to 5.0.3, update to a version newer than 5.0.3 to resolve the issu...

PT-2025-24356 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 5.0.3 Description: The issue allows a local attacker to cause apps to crash through type confusion. Recommendations: For versions prior to 5.0.3, update to a version that contains a fix for this issue. At the...

PT-2025-24296 · Synology · File Station

Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4847 Description: A NULL pointer dereference issue allows a remote attacker with a user account to launch a denial-of-service DoS attack. Recommendations: For versions prior to 5.5.6.4847, update to...

PT-2025-23753 · Samsung · Libsecimaging.Camera.Samsung.So

Name of the Vulnerable Software and Affected Versions: libsecimaging.camera.samsung.so versions prior to SMR Feb-2025 Release 1 Description: The issue is an out-of-bound read that allows local attackers to read out-of-bounds memory. This can be exploited by local attackers. Recommendations: For...

PT-2025-23666 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions 1280, 1380, 1480, 2200, 2400 Description: A Double Free issue in the mobile processor can lead to privilege escalation. This issue affects Samsung Mobile Processor Exynos models 1280, 1380, 1480, 2200,...

PT-2025-23670 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase versions prior to 2.10.10 Description: The issue concerns ineffective secret verification in DataEase, allowing a user to forge a JWT token using any secret. This could potentially lead to unauthorized access. The problem has been...

PT-2025-23658 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase versions prior to 2.10.10 DataEase version 2.10.6 through 2.10.9 Description: The issue allows authenticated users to read and deserialize arbitrary files through the background JDBC connection due to a bypass of a previous patch...

PT-2025-23615 · Erupt · Erupt

Name of the Vulnerable Software and Affected Versions: erupt version 1.12.19 Description: The issue is related to an arbitrary file upload vulnerability in the /upload/GoodsCategory/image component, which allows attackers to execute arbitrary code by uploading a crafted file. Recommendations: For...

CVE-2025-27954

An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the usertoken function of default.aspx...

CVE-2025-49112

CVE-2025-49112 affects Valkey prior to version 8.0.3-3 (and through 8.1.1 in the reports) with an integer underflow in the function setDeferredReply in networking.c. The underlying issue is an underflow of prev->size - prev->used, which could impact availability as described in the public e...

PT-2025-23377 · WordPress · Product Subtitle For Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Subtitle for WooCommerce plugin for WordPress versions up to, and including, 1.3.9 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated...