PT-2025-45342

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A maliciously crafted file, when executed on a victim’s machine, can lead to privilege escalation to NT AUTHORITY/SYSTEM. This occurs due to insufficient validation of loaded binaries. An attacker wi...

PT-2025-45377

Name of the Vulnerable Software and Affected Versions Rubygem MQTT affected versions not specified Description The Rubygem MQTT package did not have hostname validation enabled by default, which could allow for a Man-in-the-Middle MITM attack. This means a malicious actor could potentially...

PT-2025-45389

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A flaw exists due to inadequate input sanitization when processing configuration files. An attacker can upload a crafted configuration file to cause a denial-of-service condition, traverse directorie...

PT-2025-45107

Name of the Vulnerable Software and Affected Versions Entr'ouvert Lasso version 2.5.1 Description A denial of service issue exists in the lasso provider verify saml signature functionality. A specially crafted SAML response can cause a denial of service. An attacker can trigger this by sending a...

PT-2025-45152

Name of the Vulnerable Software and Affected Versions GOG Galaxy version 2.0.0.2 Description GOG Galaxy version 2.0.0.2 is susceptible to a missing SSL certificate validation issue. An attacker with control over the local network, DNS, or a proxy can conduct a man-in-the-middle MitM attack. This...

PT-2025-45163

Name of the Vulnerable Software and Affected Versions OSSN Open Source Social Network version 8.6 Description OSSN Open Source Social Network version 8.6 has a SQL Injection issue in the /action/rtcomments/status API endpoint through the timestamp parameter. Recommendations At the moment, there i...

PT-2025-45129

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Enterprise Cisco Unified CCX affected versions not specified Description A flaw exists in the Java Remote Method Invocation RMI process of Cisco Unified CCX. This issue could allow a remote attacker to upload...

PT-2025-44926

Name of the Vulnerable Software and Affected Versions versions prior to November 4, 2025 Description An information disclosure issue exists when a user-level driver performs QFPROM read or write operations on Fuse regions. The issue involves missing authentication for a critical function in SMSS...

PT-2025-45029

Name of the Vulnerable Software and Affected Versions Survision LPR Camera system affected versions not specified Description The Survision LPR Camera system lacks default password protection. This allows immediate access to the configuration wizard without requiring a login or checking...

PT-2025-44923

Name of the Vulnerable Software and Affected Versions SCE-Mink affected versions not specified Description A memory corruption issue exists when processing a GP command response. The root cause is an incorrect calculation of the buffer size. There is no information available regarding the number ...

PT-2025-44929

Name of the Vulnerable Software and Affected Versions Automotive Software platform based on QNX affected versions not specified Description An information disclosure issue exists when processing messages from a client with an invalid payload. The issue involves a buffer over-read. Recommendations...

PT-2025-45047

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos 1480 Samsung Mobile Processor Exynos 1580 Samsung Mobile Processor Exynos 2400 Samsung Mobile Processor Exynos 2500 Description A use-after-free issue exists in the Xclipse GPU Driver within the Samsung Mobile...

PT-2025-44997

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A lack of authorization exists in CanalDenuncia.app, potentially allowing an attacker to access other users' information. This is achieved by sending a POST request through the id...

PT-2025-44984

Name of the Vulnerable Software and Affected Versions apusys affected versions not specified Description A memory corruption issue exists in apusys due to use after free. Successful exploitation could allow a malicious actor with System privileges to escalate their privileges locally. User...

PT-2025-44970

Name of the Vulnerable Software and Affected Versions Cisco Wireless Lan AP Driver affected versions not specified Description The wlan AP driver contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. Successful exploitation of this issue could allow a malicious actor...

PT-2025-44969

Name of the Vulnerable Software and Affected Versions Apache Logback affected versions not specified Description A potential escalation of privilege exists due to an insecure default value within the preloader component. Successful exploitation could allow a malicious actor with System privileges...

PT-2025-44750

Name of the Vulnerable Software and Affected Versions itsourcecode Billing System version 1.0 Description A flaw exists in itsourcecode Billing System 1.0. The issue affects an unknown function within the /admin/app/login crud.php file. Manipulation of the Password argument can lead to a SQL...

PT-2025-44797

Name of the Vulnerable Software and Affected Versions Lenovo Tablets affected versions not specified Description A potential issue exists in some Lenovo Tablets that may allow a locally authenticated user or application to access sensitive device-specific information. Recommendations At the momen...

PT-2025-44742

Name of the Vulnerable Software and Affected Versions itsourcecode Online Loan Management System version 1.0 Description A security flaw exists in itsourcecode Online Loan Management System. Manipulation of the ID argument in an unknown function within the /manage user.php file can lead to SQL...

PT-2025-44740

Name of the Vulnerable Software and Affected Versions itsourcecode Online Loan Management System version 1.0 Description A flaw exists in the processing of the /manage borrower.php file within itsourcecode Online Loan Management System. Manipulation of the ID argument can lead to a SQL injection...