PT-2025-46862

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A security issue exists in Keycloak where enabling debug mode with the --debug flag insecurely binds the Java Debug Wire Protocol JDWP port to all network interfaces 0.0.0.0. This exposes th...

PT-2025-46686

Name of the Vulnerable Software and Affected Versions Campcodes School Fees Payment Management System version 1.0 Description A flaw exists in Campcodes School Fees Payment Management System 1.0. The issue involves the manipulation of the ID argument in the file '/ajax.php?action=save student',...

PT-2025-46659

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An issue exists related to incorrect default permissions that may lead to elevated system access. This occurs when the target installation folder is not adequately secured. Approximately 1000 devices...

PT-2025-46717

Name of the Vulnerable Software and Affected Versions DinukaNavaratna Dee Store version 1.0 Description A flaw exists in DinukaNavaratna Dee Store version 1.0 that can lead to missing authorization due to manipulation. The issue is present in an unknown function and can be exploited remotely. The...

PT-2025-46677

Name of the Vulnerable Software and Affected Versions WinRAR version 7.11 Description A cross-site scripting XSS issue exists in the generate report functionality. This allows attackers to potentially disclose user information, including the computer username, generated report directory, and IP...

PT-2025-46702

Name of the Vulnerable Software and Affected Versions Lenovo App Store affected versions not specified Description An improper permissions issue exists in Lenovo App Store that may allow a locally authenticated user to run code with higher privileges when installing an application. Recommendation...

PT-2025-46690

Name of the Vulnerable Software and Affected Versions Lenovo PC Manager affected versions not specified Lenovo App Store affected versions not specified Lenovo Browser affected versions not specified Lenovo Legion Zone affected versions not specified Description A potential security issue has bee...

PT-2025-46589

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s remoteproc subsystem, specifically within the Qualcomm qcom pas component related to the shutdown of the lite ADSP DTB on X1E. The issue arises becaus...

PT-2025-46588

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue was identified in the Linux kernel related to exception handling within the copy from user and copy to user functions on the Niagara architecture. The problem stemmed from...

PT-2025-46661

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.18 multi Description The authentication cookie used by the device exposes the account password hash to the client and utilizes a short, low-entropy suffix as the session identifier. An attacker with network access o...

PT-2025-52900

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the ' ocfs2 move extent' function. The function previously used 'BUG' which could cause the entire kernel to crash due to filesystem corruption...

PT-2025-46572

Name of the Vulnerable Software and Affected Versions aEnrich a+HRD affected versions not specified Description The software contains an Authentication Abuse issue that allows unauthenticated remote attackers to send crafted packets to obtain administrator access tokens. These tokens can then be...

PT-2025-46701

Name of the Vulnerable Software and Affected Versions Lenovo Dock Manager affected versions not specified Description An improper default permission issue exists in Lenovo Dock Manager. Under specific installation conditions, an authenticated local user may be able to redirect log files with...

PT-2025-46672

Name of the Vulnerable Software and Affected Versions CentralSquare Community Development version 19.5.7 Description An authentication bypass issue exists in CentralSquare Community Development 19.5.7, allowing unauthorized access to the admin panel without requiring administrative credentials. T...

PT-2025-46576

Name of the Vulnerable Software and Affected Versions ViewLead Bacteriology Laboratory Reporting System affected versions not specified Description The Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection issue. This allows unauthenticated remote attackers...

PT-2025-46767

Name of the Vulnerable Software and Affected Versions code-projects Responsive Hotel Site version 1.0 Description A SQL injection issue exists in code-projects Responsive Hotel Site 1.0. The issue is located in the file /admin/usersettingdel.php. Manipulation of the eid argument can lead to SQL...

PT-2025-46666

Name of the Vulnerable Software and Affected Versions Autodesk 3ds Max affected versions not specified Description A specially crafted JPG file, when processed by Autodesk 3ds Max, can trigger an Out-of-Bounds Write condition. Successful exploitation of this issue could allow a malicious actor to...

PT-2025-46667

Name of the Vulnerable Software and Affected Versions Autodesk 3ds Max affected versions not specified Description A specially designed DWG file, when opened by Autodesk 3ds Max, can trigger a Use-After-Free condition. This can allow an attacker to cause the application to crash, potentially read...

PT-2025-46681

Name of the Vulnerable Software and Affected Versions Omnissa Workspace ONE UEM affected versions not specified Description A discrepancy in observable responses exists in Omnissa Workspace ONE UEM. This could allow a malicious actor to enumerate sensitive information, including tenant ID and use...

PT-2025-46670

Name of the Vulnerable Software and Affected Versions FiberHome GPON ONU HG6145F1 RP4423 Description A flaw exists in FiberHome GPON ONU HG6145F1 RP4423 that allows prediction of the device’s factory default Wi-Fi password WPA/WPA2 pre-shared key from the SSID. The device uses a predictable...