PT-2025-26125 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak issue has been identified in the Linux kernel, specifically in the omapdss init of function for ARM: OMAP2+ systems. The omapdss find dss of node function calls of find...

PT-2025-26097

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the kunpeng920 encryption driver. When this driver is used to decrypt and encrypt packets during softirq, it is not...

PT-2025-25654 · Citrix · Citrix Secure Access Client For Windows

Name of the Vulnerable Software and Affected Versions: Citrix Secure Access Client for Windows affected versions not specified Description: The issue allows a low-privileged user to gain SYSTEM privileges. Recommendations: At the moment, there is no information about a newer version that contains...

PT-2025-25634 · Adobe · Flash

Name of the Vulnerable Software and Affected Versions: Adobe Flash affected versions not specified Description: The issue concerns a remote code execution problem. No specific details about affected devices or real-world incidents are provided. Recommendations: At the moment, there is no...

PT-2025-25631 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A remote code execution issue is mentioned, but details are scarce due to the rejection reason provided. No information is available on the estimated number of potentially affected devices o...

PT-2025-25729 · Arconix · Arconix Faq

Name of the Vulnerable Software and Affected Versions: Arconix FAQ versions 1.9.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For Arconix FAQ versio...

PT-2025-25633 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A Cross-Site Request Forgery CSRF issue is present. No additional details are provided about the issue, including the number of potentially affected devices or real-world incidents...

PT-2025-25688 · Unknown · Nasatheme Flozen

Name of the Vulnerable Software and Affected Versions: NasaTheme Flozen affected versions not specified Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can lead to further exploitation and...

PT-2025-25752 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: A SQL Injection issue allows a remote attacker to obtain sensitive information via the "admin datarelate.php" component. Recommendations: For SeaCMS version 12.9, update to a version that fixes this issue, as...

PT-2025-25652 · Citrix · Citrix Workspace App For Windows

Name of the Vulnerable Software and Affected Versions: Citrix Workspace app for Windows affected versions not specified Description: The issue allows a low-privileged user to gain SYSTEM privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix...

PT-2025-25747

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An Out-of-bounds Write issue exists within the parsing of PRJ files due to the lack of proper validation of user-supplied data. This can result in memory corruption issues, such as reading and...

PT-2025-25743 · Citrix · Citrix Netscaler

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler affected versions not specified Description: A vulnerability allows an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code. Recommendations: At the moment, there is no...

PT-2025-25687 · WordPress · Eform

Name of the Vulnerable Software and Affected Versions: eForm - WordPress Form Builder affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potentia...

PT-2025-25629 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a Cross-Site Scripting problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

PT-2025-25647 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue was initially reported but later rejected as it was not considered a security issue. No further details are available regarding the nature of the issue or its potential impact...

PT-2025-25628 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A cross-site scripting issue is mentioned, but details are limited due to the rejection of the candidate. No information is provided about the estimated number of potentially affected device...

PT-2025-25536 · Unknown · Com.Afmobi.Boomplayer

Name of the Vulnerable Software and Affected Versions: com.afmobi.boomplayer affected versions not specified Description: The issue concerns a permission vulnerability in the mobile application, which may lead to the risk of unauthorized operation. Recommendations: At the moment, there is no...

PT-2025-29063 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's fbnic module related to DMA mapping of firmware messages. The issue involves a potential double free when failing to DMA-map firmware messages, wher...

PT-2025-28135 · Git +1 · Maven-Model

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software experiences a security exception during operation. The crash state involves the java.base/java.lang.StringUTF16.newBytesFor function,...

PT-2025-26910 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: ndpi affected versions not specified Description: The software contains a use-of-uninitialized-value issue. This occurs within the ndpi strdup function, which is called during ndpi detection process packet processing, as reported in fuzzing...