PT-2025-17966 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 5.16.0 Description: A vulnerability has been found in ChurchCRM, affecting some unknown functionality of the component Referer Handler. This issue leads to server-side request forgery and can be launched remotely. The...

PT-2025-17929 · Unknown · Filez Client

Name of the Vulnerable Software and Affected Versions: FileZ client affected versions not specified Description: An open redirect issue was reported in the FileZ client, potentially leading to information disclosure if a local user visits a crafted URL. Recommendations: At the moment, there is no...

PT-2025-17931 · Unknown · Filez Client

Name of the Vulnerable Software and Affected Versions: FileZ client affected versions not specified Description: An improper XML parsing issue was reported in the FileZ client, which could allow arbitrary file reads on the system if a crafted URL is visited by a local user. Recommendations: At th...

PT-2025-18253 · Ctrlx Os · Ctrlx Os

Name of the Vulnerable Software and Affected Versions: ctrlX OS affected versions not specified Description: A vulnerability in the web application of ctrlX OS allows a remote authenticated low-privileged attacker to induce a Denial-of-Service DoS condition on the device via multiple crafted HTTP...

PT-2025-21643

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A Use After Free UAF vulnerability has been identified in the Linux kernel's HFSC network scheduler when it has a netem child qdisc. The issue arises because the HFSC assumes that...

PT-2025-17866 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A critical bug in the Rust-Miniscript satisfier causes crashes when compiling certain threshold descriptors, such as 3-of-3 with mixed conditions. No funds were lost due to this issue...

PT-2025-17699 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a command injection vulnerability in the Apache HTTP Server. No specific details about the number of potentially affected devices or real-world incidents are...

PT-2025-17697 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A denial of service issue is reported. No further details are available. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-17737 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue is related to insufficient sanitization in HCL Leap, which allows client-side script injection in the authoring environment. Recommendations: At the moment, there is no informati...

PT-2025-17725 · Franka Robotics · Franka Emika Robot

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An issue exists due to an improper authentication mechanism, allowing an unauthenticated remote attacker to enumerate valid usernames. Recommendations: At the moment, there is no information...

PT-2025-17698 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. No estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited are...

PT-2025-17813 · Unknown · Ldrumm Unsafe Mimetypes

Name of the Vulnerable Software and Affected Versions: ldrumm Unsafe Mimetypes versions 0.1.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-17692 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A cross-site request forgery issue has been identified. No further details are available regarding the estimated number of potentially affected devices or real-world incidents...

PT-2025-17853 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue concerns an unsafe default file type filter policy in HCL Leap, which allows the execution of unsafe JavaScript in deployed applications. Recommendations: At the moment, there is...

PT-2025-17862

Name of the Vulnerable Software and Affected Versions UNI-NMS-Lite affected versions not specified Description The issue concerns the use of hard-coded credentials in UNI-NMS-Lite, which could allow an unauthenticated attacker to gain administrative privileges to all UNI-NMS managed devices...

PT-2025-17876

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions 25.1.981.6 through 25.2.981.6 Avast Free Antivirus versions 25.1.981.6 through 25.2.981.6 Description An integer overflow or wraparound issue exists in Avast Antivirus. Successful exploitation of this issue could allow...

PT-2025-17696 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns unvalidated user input in the Apache HTTP Server. No further details are provided about the nature of the issue, affected devices, or real-world incidents. Recommendations...

RUSTSEC-2025-0035 Multiple soundness issues in `macroquad`

Several soundness issues have been reported. Resolving them doesn't seem to be considered a priority. In particular, unprincipled use of mutable statics is pervasive throughout the library, making it possible to cause use-after-free in safe code. Currently, no fixed version is available...

PT-2025-17623 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an authentication bypass. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2025-17660 · Drupal · Sportsleague

Name of the Vulnerable Software and Affected Versions: Sportsleague versions . Description: The issue affects the Sportsleague module in Drupal, but specific details about the nature of the issue are not provided in the available information. Recommendations: At the moment, there is no informatio...