PT-2025-21038

Name of the Vulnerable Software and Affected Versions: Substance3D - Stager versions 3.1.1 and earlier Description: The issue is a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. To exploit this problem, the victim must open a malicio...

PT-2025-20896 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Web Server affected versions not specified Description: The issue concerns an information disclosure problem. No specific technical details about exploitation are provided, such as API endpoints, vulnerable parameters, or function...

PT-2025-20989 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft Office SharePoint affected versions not specified Description: The issue concerns the deserialization of untrusted data, which allows an unauthorized attacker to execute code locally. This enables remote attackers to execute arbitra...

PT-2025-20977 · Microsoft · Pcmanager

Name of the Vulnerable Software and Affected Versions: Microsoft PC Manager affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in Microsoft PC Manager. This allows an authorized attacker to elevate...

PT-2025-20900 · Aptiov · Aptiov

Name of the Vulnerable Software and Affected Versions: APTIOV affected versions not specified Description: The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition in the BIOS, which can be exploited by an attacker through local means. This could potentially lead to arbitrary cod...

CVE-2025-46825 Kanboard has stored Cross-site Scripting vulnerability in project name

Kanboard is project management software that focuses on the Kanban methodology. Versions 1.2.26 through 1.2.44 have a Stored Cross-Site Scripting XSS Vulnerability in the name parameter of the http://localhost/?controller=ProjectCreationController&action=create form. This vulnerability allows...

PT-2025-20716 · Schweitzer Engineering Laboratories · Sel Blueframe Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An authenticated administrator could modify the Created By username for a user account. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2025-20697 · Netis · Netis Wf2880

Name of the Vulnerable Software and Affected Versions: Netis WF2880 version 2.1.40207 Description: A null pointer dereference vulnerability exists in the FUN 004904c8 function of the cgitest.cgi file. Attackers can trigger this issue by controlling the value of the CONTENT LENGTH environment...

PT-2025-20714 · Schweitzer Engineering Laboratories · Sel Blueframe Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue allows users who are required to change their password to still access system information before actually changing their password. Recommendations: At the moment, there is no...

PT-2025-20718 · Schweitzer Engineering Laboratories · Sel Blueframe Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An administrator could discover another account's credentials. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-20713 · Blueframe · Blueframe

Name of the Vulnerable Software and Affected Versions: Blueframe affected versions not specified Description: A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred. Recommendations: At the moment, there is no information about a newer...

PT-2025-20711 · Schweitzer Engineering Laboratories · Sel Blueframe Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated user could discover account credentials via a brute-force attack without rate limiting. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-20719 · Schweitzer Engineering Laboratories · Sel Blueframe Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An authenticated user without user-management permissions could identify other user accounts. Recommendations: At the moment, there is no information about a newer version that contains a fi...

PT-2025-20650

Name of the Vulnerable Software and Affected Versions Dígitro NGC Explorer versions up to 3.44.15 Description A vulnerability was found in the software, classified as problematic, affecting some unknown processing. The manipulation leads to session expiration. The attack may be initiated remotely...

PT-2025-20616 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A deserialization vulnerability is present. No further details are available. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-20611 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns unvalidated user input in the Apache HTTP Server. No further details are available about the nature of the issue or its potential impact. Recommendations: At the moment,...

PT-2025-20637 · Vector4Wang · Spring-Boot-Quick

Name of the Vulnerable Software and Affected Versions: vector4wang spring-boot-quick up to 20250422 Description: A critical issue affects the function ResponseEntity of the file /spring-boot-quick-master/quick-img2txt/src/main/java/com/quick/controller/Img2TxtController.java of the component...

PT-2025-20617 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A Cross-Site Request Forgery issue is reported. No further details are available. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-20613 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an unvalidated redirect in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or real-worl...

PT-2025-20612 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a command injection vulnerability. No specific details about the number of potentially affected devices or real-world incidents are provided. Recommendations: At th...