PT-2025-10791 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Substance3D - Designer versions 14.1 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction,...

PT-2025-11109 · Apache · Apache Nifi

Name of the Vulnerable Software and Affected Versions: Apache NiFi versions 1.13.0 through 2.2.0 Description: The issue concerns the inclusion of sensitive authentication credentials, specifically the username and password used to connect to MongoDB, in the NiFi provenance events generated by...

PT-2025-10404

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.10 through 11.4. Description: The issue causes MariaDB Server to crash in JOIN::fix all splittings in plan. Recommendations: For MariaDB Server versions 10.10 through 11.4., at the moment, there is no information...

PT-2025-10570 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not explicitly provided, but it appears to be related to a security concern, possibly an XSS issue, as indicated by the hashtag xss. No details about t...

PT-2025-14486 · Amd +4 · Amdgpu +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.11 and later Description: A NULL pointer dereference issue has been identified in the Linux kernel, specifically affecting the AMDGPU driver when loaded with amdgpu.dc=1 on PCs with older GPUs, such as the R9 280X. Thi...

PT-2025-10001 · Unknown · Code-Projects Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank Management System version 1.0 Description: A critical issue affects the processing of the file /upload/, leading to exposure of information through directory listing. This can be initiated remotely. Recommendations: F...

Security Bulletin: IBM Decision Optimization for Cloud Pak for Data is vulnerable to backtracking (CVE-2024-52798)

Summary There is a vulnerability in path-to-regexp used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-52798 DESCRIPTION: path-to-regexp turns path strings into a...

PT-2025-9850 · Volt · Volt

Name of the Vulnerable Software and Affected Versions: Volt versions prior to 1.7.0 Description: The issue concerns a remote code execution vulnerability within Volt components. Malicious, user-crafted request payloads could potentially lead to remote code execution. Approximately 1.08 million...

Authentication Bypass

github.com/navidrome/navidrome is vulnerable to Authentication Bypass. The vulnerability is due to flawed authentication logic, which allows an attacker to authenticate using any non-existent username and a salted hash of an empty password...

PT-2025-9664

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 136 Description The Custom Tabs feature in Android apps can load web pages and supports a transition animation. This animation could be used to deceive users into granting sensitive permissions by concealing what they...

PT-2025-9682

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.12 Rack versions prior to 3.0.13 Rack versions prior to 3.1.11 Description The issue concerns the Rack::Sendfile middleware, which logs unsanitised header values from the X-Sendfile-Type header. An attacker can explo...

PT-2025-9657 · Mozilla +9 · Firefox +9

Name of the Vulnerable Software and Affected Versions: Firefox versions 122 through 135 Firefox ESR versions 122 through 128.7 Description: The issue is related to an inconsistent comparator in xslt/txNodeSorter, potentially leading to out-of-bounds access. Recommendations: For Firefox versions 1...

PT-2025-9509 · Unknown · Tuleap Community Edition +1

Name of the Vulnerable Software and Affected Versions: Tuleap Community Edition versions 16.4.99.1739806825 through 16.4.99.1739877910 Tuleap Enterprise Edition versions prior to 16.3-9 Tuleap Enterprise Edition versions prior to 16.4-4 Description: A malicious user with access to a tracker could...

PT-2025-23584 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a Transient DOS that occurs while processing the tone measurement response buffer when the response buffer is out of range. Recommendations: At the moment, there is n...

PT-2025-9851

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A potential issue has been identified, with a proof of concept PoC available, although it has not been tested with frida. Recommendations: At the moment, there is no information about a newe...

PT-2025-9269 · Zj1983 · Zj1983

Name of the Vulnerable Software and Affected Versions: zj1983 zz versions up to 2024-8 Description: A critical vulnerability was found in the unknown functionality of the file /import data todb. The manipulation of the url argument leads to server-side request forgery. The attack can be launched...

PT-2025-9246 · Serosoft Solutions Pvt · Academia Student Information System (Sis) Eagler

Name of the Vulnerable Software and Affected Versions: Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description: A stored cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Print...

PT-2025-9219 · Zj1983 · Zj1983

Name of the Vulnerable Software and Affected Versions: zj1983 zz versions up to 2024-8 Description: A critical issue has been found in the function sendNotice of the file src/main/java/com/futvan/z/erp/customer notice/Customer noticeAction.java of the component HTTP Request Handler. The...

PT-2025-9155 · Cursor +1 · Cursor +1

Name of the Vulnerable Software and Affected Versions: ToDesktop versions prior to 2024-10-03 Description: The issue allows remote attackers to execute arbitrary commands on the build server, potentially reading secrets from the desktopify config.prod.json file and deploying updates to any app, v...

PT-2025-9175 · Milestone Systems · Milestone Xprotect +2

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A critical issue is affecting multiple systems. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...