PT-2025-38553

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the iodyn find io region function where a NULL pointer dereference can occur. This is due to the res variable, assigned from pcmcia make resource, bei...

PT-2025-38296

Name of the Vulnerable Software and Affected Versions CBIS/NCS Manager affected versions not specified Description The CBIS/NCS Manager API is susceptible to an authentication bypass. An unauthenticated user can gain unauthorized access to API functions by sending a specially crafted HTTP header...

PT-2025-38486

Name of the Vulnerable Software and Affected Versions Cognex device affected versions not specified Description An attacker with adjacent access, without authentication, can retrieve a hard-coded password embedded in the software. This password can be used to decrypt sensitive network traffic...

PT-2025-38430

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the mac80211 component. The vulnerability occurs because memory associated with AP MLD address data is freed prematurely, leading ...

PT-2025-38412

Name of the Vulnerable Software and Affected Versions IBM Lakehouse version 2.2 Description IBM Lakehouse watsonx.data 2.2 is susceptible to stored cross-site scripting. A privileged user can embed arbitrary JavaScript code within the Web UI, potentially altering functionality and leading to...

PT-2025-38427

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's Network File System Daemon NFSD related to insufficient protection against send buffer overflows in NFSv2 READ operations. An attacker can exploit thi...

PT-2025-38480

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The secret used for validating authentication tokens is hardcoded in device firmware. An attacker who obtains the signing key can bypass authentication, gaining...

PT-2025-38421

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the fbcon do set font function within the fbdev subsystem of the Linux kernel. The issue occurs when a buffer is newly allocated by fbcon set font and is...

PT-2025-38290

Name of the Vulnerable Software and Affected Versions D-Link DIR-852 version 1.00CN B09 Description A vulnerability exists in the Web Management Interface component of D-Link DIR-852 version 1.00CN B09. Manipulation of unknown code within the /htdocs/cgibin/hedwig.cgi file can lead to command...

PT-2025-38343

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the keyring allocation error path within the Linux kernel. Specifically, when keyring allocation fails during the integrity init keyring function, the...

PT-2025-38381

Name of the Vulnerable Software and Affected Versions itsourcecode Online Discussion Forum version 1.0 Description A security issue exists in itsourcecode Online Discussion Forum. Manipulation of the ID argument in the /members/compose msg admin.php file can lead to SQL injection. The attack can ...

PT-2025-42247

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s i40e network driver related to index validation within the i40e validate queue map function. Specifically, the issue occurs when iterating over...

PT-2025-38383

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The greybus audio helper code contains debugfs file handling logic that can lead to memory leaks and potentially remove all debugfs entries from the system. This occurs because the greyb...

PT-2025-38414

Name of the Vulnerable Software and Affected Versions IBM Lakehouse version 2.2 Description The software may allow an authenticated user to obtain sensitive server component version information, potentially aiding in further attacks against the system. Recommendations At the moment, there is no...

PT-2025-38478

Name of the Vulnerable Software and Affected Versions D-Link DIR-645 version 105B01 Description A vulnerability was identified in the soapcgi main function of the /soap.cgi file. Manipulation of the service argument leads to command injection, allowing for remote attacks. The exploit is publicly...

PT-2025-38345

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where zero-sized raw sendmsg calls are not properly rejected in the ieee802154 socket. This can lead to a skb assert len warning during message...

PT-2025-38473

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A crafted system call argument can cause memory corruption. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-38462

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A reference count leak was resolved in the arizona clock driver within the Linux kernel. The arizona clk32k enable function incorrectly used pm runtime get sync, which increases the...

PT-2025-38468

Name of the Vulnerable Software and Affected Versions fuyang lipengjun platform version 1.0 Description A weakness exists in the BrandController function of the /brand/queryAll file, potentially leading to improper authorization. This issue can be exploited remotely. The exploit has been made...

PT-2025-38467

Name of the Vulnerable Software and Affected Versions fuyang lipengjun platform version 1.0 Description A security flaw exists in the AttributeController function within the /attribute/queryAll file of the fuyang lipengjun platform. Manipulation of this function leads to improper authorization...