PT-2025-17919

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A flaw was found in the software, where additional checks were required to prevent users from deleting course sections they did not have permission to modify. Recommendations At the moment,...

PT-2025-17920

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A flaw was found in the messaging web service of Moodle, where insufficient capability checks allowed users to view other users' names and online statuses. Recommendations At the moment, there...

PT-2025-17437 · Opentext · Opentext Arcsight Enterprise Security Manager

Name of the Vulnerable Software and Affected Versions: OpenText ArcSight Enterprise Security Manager affected versions not specified Description: The issue concerns a Reference to Expired Domain Vulnerability. There is no information provided about the estimated number of potentially affected...

PT-2025-22303 · Unknown · Fw-Wgs-804Hpt

Name of the Vulnerable Software and Affected Versions: FW-WGS-804HPT version 1.305b241111 Description: A stack overflow issue was discovered via the host ip parameter in the web snmp v3host add post function. Recommendations: For FW-WGS-804HPT version 1.305b241111, consider restricting access to...

PT-2025-17362 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue is related to command injection in Apache Struts. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2025-17368 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issu...

PT-2025-17367 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No further details are provided about the nature of the issue, affected devices, or real-world incidents. Recommendations: At the momen...

PT-2025-17364 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a Cross-Site Request Forgery in the Apache HTTP Server. No specific details about affected devices or real-world incidents are provided. Recommendations: At th...

PT-2025-30076 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: cppc affected versions not specified Description: The software contains a heap-buffer-overflow read issue. The crash occurs within the toString function of the TelnetLayer class, triggered through toStringList and toString functions of the...

PT-2025-17361 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue is related to a Cross-Site Request Forgery in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2025-17365 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issu...

PT-2025-17360 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue is related to a Cross-Site Request Forgery CSRF in the Apache HTTP Server. No specific details about the estimated number of potentially affected devices worldwide or...

PT-2025-17340 · Macro Video Technologies Co. · V380E6 C1 Ip Camera

Name of the Vulnerable Software and Affected Versions: Macro-video Technologies Co.,Ltd V380E6 C1 IP camera affected versions not specified Description: The issue allows a physically proximate attacker to execute arbitrary code via the UART component. Recommendations: At the moment, there is no...

PT-2025-17338

Name of the Vulnerable Software and Affected Versions Speedify VPN versions up to 15.0.0 Speedify VPN version 15.4.1 Description A command injection flaw exists in the me.connectify.SMJobBlessHelper XPC service of Speedify VPN. This issue allows attackers to execute arbitrary commands with...

PT-2025-17329 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue has been disputed by the developer as a vulnerability. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no...

PT-2025-17194

Name of the Vulnerable Software and Affected Versions Quentn WP versions 1.2.8 and earlier Description The issue is related to weak authentication, allowing privilege escalation. Recommendations For Quentn WP versions 1.2.8 and earlier, at the moment, there is no information about a newer version...

PT-2025-16941

Name of the Vulnerable Software and Affected Versions Continuous Compliance affected versions not specified Description A valid, authenticated user with sufficient privileges can leverage the application's built-in Connector functionality to access Continuous Compliance's internal database,...

PT-2025-17231 · Twonav · Twonav

Name of the Vulnerable Software and Affected Versions: twonav version 2.1.18-20241105 Description: The issue allows a remote attacker to obtain sensitive information via the link identification function. Recommendations: For twonav version 2.1.18-20241105, at the moment, there is no information...

PT-2025-17218 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use after free bug has been identified in the Linux kernel, specifically in the vxcan xmit function. The issue arises after calling netif rx niskb, where dereferencing skb becomes...

PT-2025-17109 · Softagon · Softagon Woocommerce Products

Name of the Vulnerable Software and Affected Versions: SOFTAGON WooCommerce Products versions n/a through 0.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS in SOFTAGON WooCommerce Products without featured images. Recommendations: For versions...