PT-2025-3357 · Baidu · Baidu Input Method

Name of the Vulnerable Software and Affected Versions: Baidu Input Method version 12.6.13 Description: The issue allows attackers to access user information by supplying a crafted link. Recommendations: For version 12.6.13, update to a newer version to mitigate the risk. At the moment, there is n...

PT-2025-5563 · Houzez · Houzez

Name of the Vulnerable Software and Affected Versions: Houzez versions 3.4.0 and earlier Description: The issue is related to a Missing Authorization vulnerability. This means that there is a lack of proper authorization checks in the software, potentially allowing unauthorized access to certain...

PT-2025-5103 · Pqina · Pqina Snippy

Name of the Vulnerable Software and Affected Versions: PQINA Snippy versions 1.4.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS. This means an attacker can trick a user into performing unintended actions on a web application that...

PT-2025-4968 · Unknown · Rezdy Reloaded

Name of the Vulnerable Software and Affected Versions: Rezdy Reloaded versions 1.0.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website...

PT-2025-1552 · Lexmark · Lexmark Devices

Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: A Server-Side Request Forgery SSRF vulnerability has been identified in the Web Services feature of newer Lexmark devices. This issue allows an attacker to forge requests to interna...

PT-2025-3240 · Unknown · Poll Maker

Name of the Vulnerable Software and Affected Versions: Poll Maker affected versions not specified Description: The issue is related to improper encoding or escaping of output in Poll Maker Team Poll Maker. This can potentially lead to security issues, but specific details about exploitation, such...

PT-2025-5369 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A Local Code Execution issue exists due to a default setting in Windows, allowing access to the Command Prompt as a higher privileged user. This issue is related to insufficient authorizati...

PT-2025-5659 · Git +1 · Apache Poi

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A security exception crash was reported. The crash type is a security exception, and the crash state includes POIHDGFFuzzer. No further details are provided about the issue, including t...

PT-2025-1349 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an untrusted pointer used in the Apache HTTP Server. No specific details about the number of potentially affected devices or real-world incidents are provided...

PT-2025-1379 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A CVE was rejected due to erroneous publication by a third party. No further details are provided about the issue. Recommendations: At the momen...

PT-2025-1298 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to inadequate access control in Microsoft Edge, allowing a remote attacker to potentially elevate their privileges. Recommendations: At the moment, there is no...

PT-2025-5165 · Unknown · Amr Personalise

Name of the Vulnerable Software and Affected Versions: amr personalise versions n/a through 2.10 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. Recommendations: For versions n/a through 2.10, update to a version that includes a fi...

PT-2025-3132 · Unknown +1 · Linux Ratfor +1

Name of the Vulnerable Software and Affected Versions: Linux Ratfor versions 1.06 and earlier Description: A stack-based buffer overflow issue exists when the software processes a specially crafted file, allowing arbitrary code execution. This could enable an attacker to obtain or alter user...

PT-2025-1208 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient access control in Microsoft Visual Studio, which could allow an attacker to elevate their privileges. Recommendations: At the moment,...

PT-2025-1049 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue is related to an integer overflow in the Windows Telephony Service, which can be exploited by a remote attacker to execute arbitrary code. This allows the attack...

PT-2025-4196 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-1675 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It mentions a CVE ID, but the description has been removed due to the candidate being issued...

PT-2025-1625 · Schneider Electric · Ecostruxure Power Build - Rapsody

Name of the Vulnerable Software and Affected Versions: Schneider Electric EcoStruxure Power Build Rapsody affected versions not specified Description: The issue is related to a buffer overflow vulnerability that could allow local attackers to execute arbitrary code when opening a malicious projec...

PT-2025-1145

Name of the Vulnerable Software and Affected Versions Windows NTLM V1 affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the implementation of the NTLMv1 protocol in Windows operating systems. This vulnerability is associated with...

PT-2025-1112 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the MapUrlToZone method in Windows operating systems, which is associated with incorrect path equivalence resolution. This can allow a remote attacker to disclose...