PT-2025-17345

Name of the Vulnerable Software and Affected Versions DaiCuo version 1.3.13 Description A vulnerability was found in the SEO Optimization Settings Section component, which can lead to cross-site scripting. The attack may be launched remotely. Recommendations For DaiCuo version 1.3.13, consider...

PT-2025-17295 · 74Cms · 74Cms

Name of the Vulnerable Software and Affected Versions: 74cms versions 3.33 and earlier Description: The issue concerns remote code execution RCE in the background interface apiadmin. Recommendations: For versions 3.33 and earlier, update to a version later than 3.33 to resolve the issue. As a...

PT-2025-20915 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: A buffer overflow issue was discovered via the addrPoolEnd parameter in the "formDhcpv6s" interface. Recommendations: For TOTOLINK A3002R version 4.0.0-B20230531.1404, as a temporary...

PT-2025-17315

Name of the Vulnerable Software and Affected Versions Fastify versions 4.29.0 through 5.3.1 Fastify version 4.9.0 Description Fastify is a fast, low overhead web framework for Node.js. Applications specifying different validation strategies for different content types may bypass validation by...

PT-2025-17316 · Ses · Ses

Name of the Vulnerable Software and Affected Versions: SES versions prior to 1.12.0 Description: The issue arises when using the SES and Compartment API to evaluate third-party code in an isolated environment. In versions prior to 1.12.0, top-level let, const, and class bindings in tags are...

PT-2025-17335 · Redoxos · Redoxos

Name of the Vulnerable Software and Affected Versions: redoxOS relibc versions before commit 98aa4ea5 Description: The issue allows a local attacker to cause a denial of service via the setsockopt function. Recommendations: For versions before commit 98aa4ea5, consider disabling the setsockopt...

PT-2025-17314 · Unknown · Namelessmc

Name of the Vulnerable Software and Affected Versions: NamelessMC versions prior to 2.1.4 Description: The issue is related to SQL injection by providing an unexpected square bracket GET parameter syntax. This syntax refers to the structure ?param0=a&param1=b&param2=c utilized by PHP, which is...

PT-2025-17301 · Ibm · Ibm I +1

Name of the Vulnerable Software and Affected Versions: IBM i versions 7.3 through 7.5 Description: The issue is caused by improper neutralization of HTTP header content by IBM Navigator for i, allowing an authenticated user to manipulate the host header in HTTP requests. This can lead to changing...

SUSE CVE-2025-32433

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in SSH protocol message handling, a malicious actor...

PT-2025-17202 · Unknown · Pydio Core

Name of the Vulnerable Software and Affected Versions: Pydio Core versions 8.2.5 and earlier Description: The issue is related to Cross Site Scripting XSS via the New URL Bookmark feature. This allows for potential malicious script execution. Recommendations: For Pydio Core versions 8.2.5 and...

PT-2025-17210 · Pycel · Pycel

Name of the Vulnerable Software and Affected Versions: Pycel versions 1.0b30 and earlier Description: The issue allows code execution via a crafted formula in a cell, such as one beginning with the =IFA1=200, eval" import 'os'.system substring." in an untrusted spreadsheet. Recommendations: For...

PT-2025-17221 · Unknown · Dragonflydb Dragonfly

Name of the Vulnerable Software and Affected Versions: DragonflyDB Dragonfly versions 1.28.2 and earlier Description: The issue allows authenticated users to cause a denial of service, resulting in a daemon crash, by utilizing a Lua library command that references a large negative integer...

PT-2025-18305 · NetGear · Netgear Wag302V2

Name of the Vulnerable Software and Affected Versions: Netgear WG302v2 versions up to 5.2.9 Description: A critical issue was found, affecting the function ui get input value. The manipulation of the host argument leads to command injection. This issue can be exploited remotely. The vendor was...

PT-2025-17225 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Phone Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Phone Management System. This issue affects the main function of the Password Handler component. The manipulation of...

PT-2025-17083 · Unknown · Videowhisper Paid Videochat Turnkey Site

Name of the Vulnerable Software and Affected Versions: videowhisper Paid Videochat Turnkey Site versions n/a through 7.3.11 Description: The issue is related to a Weak Password Recovery Mechanism for Forgotten Password, which allows password recovery exploitation. Recommendations: For versions n/...

PT-2025-17213 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version V4.0si V16.03.10.20 Description: The issue is related to a Buffer Overflow in AdvSetMacMtuWan via wanMTU2. This allows for potential exploitation. No information is provided about the estimated number of potentially affecte...

PT-2025-17195 · Unknown · Openmetadata

Name of the Vulnerable Software and Affected Versions: OpenMetadata versions 1.4.1 and earlier Description: The issue allows an attacker to extract information from the database. This is achieved through the listCount function in the WorkflowDAO interface, where the workflowtype and status...

PT-2025-17158 · Unknown · Solace Extra

Name of the Vulnerable Software and Affected Versions: Solace Extra versions 1.3.1 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For versions 1.3.1 and earlier, consider restricting file...

PT-2025-18287 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Description: A critical issue was found in the function sub 435E04, where the manipulation of the host argument leads to command injection. This issue can be exploited remotely. The vendor was contacted abo...

PT-2025-18270 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Description: A critical vulnerability was found in the default version is new function. The manipulation of the host argument leads to a buffer overflow. This issue can be exploited remotely. The vendor was...