PT-2025-43918

Name of the Vulnerable Software and Affected Versions ZTE MC889A Pro affected versions not specified Description A Denial of Service DoS issue exists in the ZTE MC889A Pro product. The root cause is inadequate validation of input parameters within the Short Message Service interface, which could...

PT-2025-43905

Name of the Vulnerable Software and Affected Versions CLTPHP version 3.0 Description A security issue exists in CLTPHP 3.0 related to SQL injection. Manipulation of the keyword argument within an unknown function of the /home/search.html file can lead to exploitation. The attack can be performed...

PT-2025-43643

Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description The D-Link DIR600L Ax firmware contains a buffer overflow issue. This occurs through the curTime parameter within the formSetDomainFilter function. Recommendations At the moment, there is no...

PT-2025-43663

Name of the Vulnerable Software and Affected Versions PerfreeBlog version 4.0.11 Description PerfreeBlog version 4.0.11 contains a File Upload issue within the installTheme function. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-43658

Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description The D-Link DIR600L Ax firmware version FW116WWb01 contains a buffer overflow issue. This occurs through the curTime parameter within the formTcpipSetup function. Recommendations At the moment,...

PT-2025-44654

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager affected versions not specified Description An authentication bypass through spoofing exists in Microsoft Configuration Manager. This allows an authorized attacker to perform spoofing attacks over an adjacent...

PT-2025-43625

Name of the Vulnerable Software and Affected Versions pgcodekeeper version 10.12.0 Description An issue exists in pgcodekeeper where sensitive information, specifically passwords and usernames, are stored in plaintext. A local attacker could exploit this to obtain this information. Recommendation...

PT-2025-43579

Name of the Vulnerable Software and Affected Versions Pleasanter affected versions not specified Description Pleasanter has a stored cross-site scripting issue in the Preview for Attachments feature. This allows an attacker to execute an arbitrary script within the web browser of a logged-in user...

PT-2025-43462

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A security issue exists in the Android Framework that could allow a remote attacker to escalate privileges. The issue involves a permissions bypass that may allow launching activities from th...

PT-2025-43374

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7866 B20220506 Description The TOTOLINK N600R device contains a stack overflow in the setWiFiMultipleConfig function due to a flaw in the wepkey2 parameter. This issue allows attackers to cause a Denial of Servic...

PT-2025-42747

Name of the Vulnerable Software and Affected Versions Excellent Infotek Document Management System affected versions not specified Description The Document Management System developed by Excellent Infotek is subject to an Arbitrary File Upload issue. This allows unauthenticated remote attackers t...

PT-2025-52920

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the ntfs3 module related to uninitialized buffers allocated by the getname function. This issue can lead to uninitialized errors after buffer...

PT-2025-42580

Name of the Vulnerable Software and Affected Versions Moxa network security appliances and routers affected versions not specified Description A security issue exists in Moxa’s network security appliances and routers related to the use of hard-coded credentials. The system uses a hard-coded secre...

PT-2025-42367

Name of the Vulnerable Software and Affected Versions F5OS-A affected versions not specified Description A vulnerability allows a highly privileged, authenticated attacker to access sensitive FIPS hardware security module HSM information on F5 rSeries systems. Recommendations At the moment, there...

PT-2025-42329

Name of the Vulnerable Software and Affected Versions TMUI affected versions not specified Description A directory traversal issue exists in TMUI that permits an authenticated attacker to access files beyond those intended. The vulnerability allows access to files that are not limited to the...

PT-2025-42364

Name of the Vulnerable Software and Affected Versions PC Manager affected versions not specified Description A potential issue exists in PC Manager that may allow a locally authenticated user to execute code with elevated privileges. Recommendations At the moment, there is no information about a...

PT-2025-42243

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the i40e driver where there is no check for the maximum number of filters that a Virtual Function VF can request. A boundary check has been added to...

PT-2025-46637

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ASoC amd/sdw utils component where a NULL pointer dereference may occur if devm kasprintf fails during memory allocation. Specifically, a debu...

PT-2025-42393

Name of the Vulnerable Software and Affected Versions luksmeta affected versions not specified Description A data corruption issue exists in the luksmeta utility when operating with the LUKS1 disk encryption format. An attacker possessing appropriate permissions can trigger this flaw by writing a...

PT-2025-42398

Name of the Vulnerable Software and Affected Versions Veeam Agent for Microsoft Windows affected versions not specified Description The issue resides in insufficient input validation within Veeam Agent for Microsoft Windows. Successful exploitation could allow an attacker to elevate their...