PT-2025-28720 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage Plugin contains a flaw in the parsing of DXF files due to insufficient validation of user-supplied data. This can lead to a memory corruption...

PT-2025-28455 · Tellus +2 · Tellus +2

Name of the Vulnerable Software and Affected Versions: V-SFT and TELLUS versions affected versions not specified Description: A heap-based buffer overflow issue exists in the VS6Sim.exe component. This can be triggered by opening specially crafted V9 or X1 files, potentially leading to arbitrary...

PT-2025-28355

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated attacker can bypass the localhost restrictions imposed by the application, allowing them to create arbitrary packages. Recommendations: At the moment, there is no...

CVE-2025-53374 Dokploy Improperly Discloses User Information via user.one Endpoint

Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated low-privileged account can retrieve detailed profile information about another users in the same organization by directly invoking user.one. The...

PT-2025-28316 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is a possible out-of-bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user execution privileges...

PT-2025-28311 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write exists in the WLAN access point driver due to an incorrect bounds check. This issue could lead to a local escalation of privilege, requiring user execution...

PT-2025-28118 · Unknown · Threatsonar Anti-Ransomware

Name of the Vulnerable Software and Affected Versions: ThreatSonar Anti-Ransomware affected versions not specified Description: The issue allows remote attackers with intermediate privileges to inject arbitrary OS commands and execute them on the server, gaining administrative access to the remot...

PT-2025-28314 · Unknown · Bluetooth Driver

Name of the Vulnerable Software and Affected Versions: Bluetooth driver affected versions not specified Description: The issue is related to a possible out of bounds read in the Bluetooth driver due to an incorrect bounds check. This could lead to a local denial of service, requiring user executi...

PT-2025-28308 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write exists in the wlan AP driver due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User...

PT-2025-28136

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices. Recommendations: At the moment, there is no...

PT-2025-28144 · Frauscher · Fds-Snmp101 +2

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A physical attacker with no privileges can gain full control of the affected device due to improper neutralization of special elements used in an OS Command when loading a config file from a...

PT-2025-28319

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a possible out of bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user...

PT-2025-28318 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a possible out of bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user...

PT-2025-29314 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: A critical vulnerability exists in the HTTP POST Request Handler component of the affected product. The fromSafeUrlFilter function within the /goform/fromSafeUrlFilter file is susceptible to a buffer...

PT-2025-28207 · Parallels · Parallels Client

Name of the Vulnerable Software and Affected Versions: Parallels Client affected versions not specified Description: The issue is related to an uncontrolled search path element, which can lead to local privilege escalation. Recommendations: At the moment, there is no information about a newer...

PT-2025-29896 · Git +1 · Pidgin

Name of the Vulnerable Software and Affected Versions: libxml2 affected versions not specified Description: The software is susceptible to a heap-buffer-overflow write issue. The crash occurs within the xmlParseAttValueInternal function, triggered by a structural error during XML parsing,...

PT-2025-31649

Name of the Vulnerable Software and Affected Versions Cursor versions prior to 1.3.9 Description Cursor, an AI-powered code editor, had a flaw that allowed writing files in the workspace without user approval in versions prior to 1.3.9. If a sensitive MCP file, such as .cursor/mcp.json, did not...

PT-2025-29870 · Git +1 · Opencv

Name of the Vulnerable Software and Affected Versions: OpenCV affected versions not specified Description: The software experiences an UNKNOWN READ crash during the cv::PngDecoder::compose frame function call within the cv::ParallelLoopBodyWrapper::operator and cv::ThreadPool::run processes...

PT-2025-28121 · Huawei +1 · Emui +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A vulnerability exists in the audio framework module, allowing third-party call apps to send broadcasts without verification. Successful exploitation of this issue may affect availability...

PT-2025-28108 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A stack overflow risk exists when vector images are parsed during file preview. Successful exploitation of this issue may affect the file preview function. Recommendations: At the moment,...