PT-2025-26711 · Mb Connect Line +1 · Mbconnect24 +2

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated remote attacker can enumerate valid user names from an unprotected "API endpoint". No information is provided about the estimated number of potentially affected devices...

PT-2025-26676 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue allows an attacker to consume all available session slots, blocking other users from logging in and preventing legitimate users from accessing the product...

PT-2025-26719 · Unknown · Microscada X Sys600

Name of the Vulnerable Software and Affected Versions: MicroSCADA X SYS600 affected versions not specified Description: A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product, where the filtering query can be malformed, leading to unauthorized information leakage to the...

PT-2025-26698 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A Cross-Site Request Forgery CSRF issue is present. No further details are available about the issue, including the number of potentially affected devices or real-world incidents...

PT-2025-26718 · Unknown · Microscada X Sys600

Name of the Vulnerable Software and Affected Versions: MicroSCADA X SYS600 affected versions not specified Description: A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product, where an IEC 61850-8 crafted message content from IED or remote system can cause a denial of service,...

PT-2025-26703 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No further details are provided about the nature of the issue, affected devices, or real-world incidents. Recommendations: At the momen...

PT-2025-26697 · Zephyrproject Rtos · Zephyr

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A denial-of-service issue in the dns implementation could cause an infinite loop. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-26704 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a Stored XSS in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents...

PT-2025-26702 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns HTTP Request Smuggling in the Apache HTTP Server. No specific details about the estimated number of potentially affected devices worldwide or real-world...

PT-2025-26701 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a command injection problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2025-26617 · Ruby +1 · Ruby Webrick +1

Name of the Vulnerable Software and Affected Versions: Ruby WEBrick affected versions not specified Description: The issue concerns an HTTP Request Smuggling Vulnerability in Ruby WEBrick's read header function. No information is provided about the estimated number of potentially affected devices...

PT-2025-26647 · 70Mai · 70Mai 1S

Name of the Vulnerable Software and Affected Versions: 70mai 1S up to 20250611 Description: A problematic issue has been found in the Video Services component, leading to improper authentication. This issue requires access to the local network to be exploited, has a high complexity, and is...

PT-2025-26630 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A remote code execution issue has been identified, but details are not available due to the rejection or withdrawal of the associated identifier by its authority. Recommendations: At the...

PT-2025-26620 · NetGear · Netgear Ex6150

Name of the Vulnerable Software and Affected Versions: Netgear EX6150 versions 1.0.0.46 through 1.0.76 Description: A critical vulnerability has been identified in Netgear EX6150. The issue resides within the sub 410090 function and leads to a stack-based buffer overflow. Remote attackers can...

PT-2025-26441 · Unknown · Trustyai Explainability Toolkit

Name of the Vulnerable Software and Affected Versions: TrustyAI Explainability toolkit affected versions not specified Description: A command injection issue was discovered in the TrustyAI Explainability toolkit. This issue allows arbitrary commands placed in certain fields of a LMEValJob custom...

PT-2025-26283 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue affects the processing of the file /pages/cat add.php, where the manipulation of the Category argument leads to SQL injection. The attack can be initiated remotely...

PT-2025-26440 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: Keycloak affected versions not specified Description: A vulnerability has been identified that could lead to unauthorized information disclosure. It requires an already authenticated user and can inadvertently provide sensitive environment...

PT-2025-27394 · Git +1 · Glaze

Name of the Vulnerable Software and Affected Versions: glz affected versions not specified Description: The software contains a stack-buffer-overflow vulnerability. The crash occurs within the glz::from and glz::visit functions when processing data. The crash state involves operations with...

WordPress ElementsKit Lite plugin <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Image Comparison Widget vulnerability discovered by Asaf Mozes in WordPress Plugin ElementsKit Elementor addons Lite versions = 3.5.2...

PT-2025-26250 · Unknown · Phpgurukul Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul COVID19 Testing Management System 2021 affected versions not specified Description: A problematic vulnerability has been found in the system, allowing for an open redirect. The issue is related to the manipulation of the q argument...