PT-2025-5531 · Wow Company · Wow-Company Modal Window

Name of the Vulnerable Software and Affected Versions: Wow-Company Modal Window versions through 6.1.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the user...

PT-2025-2881 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac version 2.4 Description: The issue is a heap-buffer-overflow in the gpac/MP4Box module, specifically at isomedia/sample descs.c:1799 in the gf isom new mpha description function. Recommendations: For gpac version 2.4, as a temporary...

PT-2025-2997 · Centreon · Centreon Web

Name of the Vulnerable Software and Affected Versions: Centreon Web versions 23.04.x through 23.04.23 Centreon Web versions 23.10.x through 23.10.18 Centreon Web versions 24.04.x through 24.04.8 Centreon Web versions 24.10.x through 24.10.2 Description: A user with high privileges is able to...

PT-2025-1555

Name of the Vulnerable Software and Affected Versions Digiever DS-2105 Pro versions 3.1.0.71-11 Digiever DS-2105 Pro affected versions not specified Description The Digiever DS-2105 Pro network video recorder NVR has a flaw related to missing authorization, allowing for command injection via the...

PT-2025-1628 · Tcas Ii · Tcas Ii

Name of the Vulnerable Software and Affected Versions: TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F Description: The issue allows an attacker to impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control...

Use of Insufficiently Random Values in undici

Impact Undici fetch uses Math.random to choose the boundary for a multipart/form-data request. It is known that the output of Math.random can be predicted if several of its generated values are known. If there is a mechanism in an app that sends multipart requests to an attacker-controlled websit...

PT-2025-3860 · Hashicorp +1 · Go-Slug +1

Name of the Vulnerable Software and Affected Versions: HashiCorp go-slug versions prior to 0.16.3 Description: The go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. This occurs because the unpacking step improperly...

PT-2025-14382 · Mathlive · Mathlive

Name of the Vulnerable Software and Affected Versions: arnog MathLive versions 0.103.0 and earlier Description: The issue allows an attacker to execute arbitrary code via the MathLive function. This is a Cross Site Scripting vulnerability. Recommendations: For versions 0.103.0 and earlier, update...

PT-2025-1340 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to incorrect boundary checking, which could allow access to kernel memory in user space. This might lead to a local privilege escalation without requiring...

CVE-2024-57033

WeGIA 3.2.0 is vulnerable to Cross Site Scripting XSS via the dadosaddInfo parameter of documentosfuncionario.php...

PT-2025-4742

Name of the Vulnerable Software and Affected Versions RE11S version 1.11 Description A stack overflow issue was discovered in the formWlSiteSurvey function through the selSSID parameter. Recommendations For RE11S version 1.11, consider disabling the formWlSiteSurvey function or restricting access...

PT-2025-4741

Name of the Vulnerable Software and Affected Versions RE11S version 1.11 Description A command injection issue was discovered via the L2TPUserName parameter at the "/goform/setWAN" API endpoint. This allows for potential command injection attacks. Recommendations For RE11S version 1.11, as a...

PT-2025-5042 · Unknown · Mayur Sojitra Flying Twitter Birds

Name of the Vulnerable Software and Affected Versions: Mayur Sojitra Flying Twitter Birds versions 1.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-1056 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue is related to a remote code execution problem in the Windows Telephony Service. It involves a buffer overflow in dynamic memory, which can be exploited by a remo...

CVE-2023-42225

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempFile function...

PT-2025-2110 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be related to a rejected CVE candidate, which is a duplicate of...

PT-2025-1381 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: Data Distribution Service DDS affected versions not specified Description: The issue allows an attacker to compromise and gain full control of a secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS7...

PT-2025-4383 · Jwk Set +1 · Jwk Set +1

Name of the Vulnerable Software and Affected Versions: JWK Set versions prior to 0.6.0 Description: The project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. However, the current behavior is to overwrite or append, which...

CVE-2024-12313

CVE-2024-12313 : The Compare Products for WooCommerce plugin for WordPress is vulnerable to unauthenticated PHP Object Injection in all versions up to 3.2.1 via deserialization of untrusted input from the woo_compare_list cookie. The vulnerability allows an attacker to inject a PHP Object. The de...

PT-2025-1670 · Progress · Sitefinity

Name of the Vulnerable Software and Affected Versions: Sitefinity versions 4.0 through 14.4.8142 Sitefinity versions 15.0.8200 through 15.0.8229 Sitefinity versions 15.1.8300 through 15.1.8327 Sitefinity versions 15.2.8400 through 15.2.8421 Description: The issue is related to an Information...