PT-2025-4537 · Unknown · Jquery Twentytwenty

Name of the Vulnerable Software and Affected Versions: jQuery TwentyTwenty versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

DEBIAN-CVE-2024-56768

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpfgetsmpprocessorid on !CONFIGSMP On x86-64 calling bpfgetsmpprocessorid in a kernel with CONFIGSMP disabled can trigger the following bug, as pcpuhot is unavailable: 8.471774 BUG: unable to handle page fault for addres...

PT-2025-3110 · Asus · Asus System Analysis Io

Name of the Vulnerable Software and Affected Versions: ASUS System Analysis IO version 1.0.0 Description: The issue is related to improper access control in the AsusSAIO.sys driver, which may allow the misuse of software functionality when crafted IOCTL requests are supplied. This can lead to...

PT-2025-3922 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823X versions 240126/240802 Description: A critical vulnerability has been found, affecting the function FUN 00412244. This issue leads to a null pointer dereference and can be exploited remotely. The exploit has been disclosed to...

PT-2025-2031 · Unknown · Zhenfeng13 My-Blog

Name of the Vulnerable Software and Affected Versions: zhenfeng13 My-Blog version 1.0 Description: A critical vulnerability was found in the upload function of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController.java. The manipulation of the file argument leads to...

PT-2025-2020 · Unknown · Zerowdd Studentmanager

Name of the Vulnerable Software and Affected Versions: ZeroWdd studentmanager version 1.0 Description: A critical vulnerability was found in ZeroWdd studentmanager, affecting the addTeacher/editTeacher function of the file src/main/Java/com/wdd/studentmanager/controller/TeacherController.java. Th...

PT-2025-3799 · Code Projects · Travel Management System

Name of the Vulnerable Software and Affected Versions: code-projects Travel Management System version 1.0 Description: A critical issue has been found in the Travel Management System, affecting some unknown processing of the file /enquiry.php. The manipulation of the argument...

PT-2025-2021 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.4.3 Description: A vulnerability has been found in Emlog Pro, affecting an unknown functionality of the file /admin/twitter.php of the component Subpage Handler. The manipulation leads to cross-site scripting. The attack c...

PT-2025-2024 · Unknown · Mysiteforme

Name of the Vulnerable Software and Affected Versions: wangl1989 mysiteforme version 1.0 Description: A critical issue has been found in the file upload function of the LocalUploadServiceImpl class, located at src/main/java/com/mysiteform/admin/service/ipl/. The manipulation of the test argument...

PT-2025-4478 · Unknown +1 · Net::Oauth +1

Name of the Vulnerable Software and Affected Versions: Net::OAuth versions prior to 0.29 Description: The default nonce in Net::OAuth::Client is a 32-bit integer generated from the built-in rand function, which is not cryptographically strong. This weakness can be exploited due to the use of a...

PT-2025-3096 · Unknown · Wukongcrm-11.0-Java

Name of the Vulnerable Software and Affected Versions: WukongCRM-11.0-JAVA version 11.3.3 Description: An arbitrary file upload vulnerability in the component /adminUser/updateImg allows attackers to execute arbitrary code via uploading a crafted file. This issue enables attackers to potentially...

PT-2025-3177 · Unknown · Dreamwinner Easy Language Switcher

Name of the Vulnerable Software and Affected Versions: Dreamwinner Easy Language Switcher versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means that an...

PT-2025-3180 · Foliovision · Fv Descriptions

Name of the Vulnerable Software and Affected Versions: Foliovision FV Descriptions versions n/a through 1.4 Description: The issue affects Foliovision FV Descriptions, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-site Scripting...

PT-2025-4391

Name of the Vulnerable Software and Affected Versions Landray EIS versions 2001 through 2006 Description The issue allows SQL injection in the "Message/fi message receiver.aspx?replyid=" endpoint. This enables unauthorized data access. Recommendations For versions 2001 through 2006, consider...

PT-2025-3188 · Unknown · Html Forms

Name of the Vulnerable Software and Affected Versions: HTML Forms versions n/a through 1.4.1 Description: The issue is related to improper neutralization of input during web page generation, which allows Reflected XSS. This means that an attacker can inject malicious code into the HTML Forms,...

PT-2025-3182 · Unknown · Irshad Services

Name of the Vulnerable Software and Affected Versions: Irshad Services versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This allows for Reflected XSS, where an attacker can inject...

PT-2025-1629 · WordPress · Wp-Enable-Svg

Name of the Vulnerable Software and Affected Versions: wp-enable-svg WordPress plugin versions 0.7 and earlier wp-enable-svg WordPress plugin versions 0.2 and earlier Description: The issue is related to the wp-enable-svg WordPress plugin, which does not sanitize SVG files when uploaded. This...

PT-2025-25546

Name of the Vulnerable Software and Affected Versions Erlang OTP versions 17.0 through 28.0.1 Erlang OTP version 27.3.4.1 Erlang OTP version 26.2.5.13 stdlib versions 2.0 through 7.0.1 stdlib version 6.2.2.1 stdlib version 5.2.3.4 Description The issue is related to a Path Traversal vulnerability...

PT-2025-25550 · Assimp +1 · Assimp +1

Name of the Vulnerable Software and Affected Versions: Open Asset Import Library Assimp versions up to 5.4.3 Description: A critical issue was found in the Open Asset Import Library Assimp. The read meshes function in the library is affected, leading to a heap-based buffer overflow. This issue ca...

PT-2025-01: NULL pointer dereference leads to Denial of Service (DoS) in Microsoft Windows 11 22H2

The vulnerability was discovered in Microsoft Windows 11 22H2, versions 19045.5371. The discovered vulnerability allows an attacker to create the conditions for a local Denial of Service DoS. Vulnerability status: Confirmed by vendor Date of vulnerability discovery: 22.01.2025 Recommendations:...