PT-2025-44733

Name of the Vulnerable Software and Affected Versions Tenda AC23 version 16.03.07.52 Description A weakness exists in the Tenda AC23. This issue impacts the formSetVirtualSer function within the /goform/SetVirtualServerCfg file. Manipulation of the argument list to this function can cause a buffe...

PT-2025-44736

Name of the Vulnerable Software and Affected Versions SourceCodester Best House Rental Management System version 1.0 Description A flaw exists in the software that allows for SQL injection. The issue is located in the save tenant function within the /admin class.php file. Manipulation of the...

PT-2025-44601

Name of the Vulnerable Software and Affected Versions SonicWall SMA100 Series affected versions not specified Description A potential issue exists in SonicWall SMA100 Series appliances that could lead to the exposure of sensitive information in log files. A remote, authenticated administrator,...

PT-2025-44596

Name of the Vulnerable Software and Affected Versions Therefore Online affected versions not specified Therefore On-Premises affected versions not specified Description A malicious user may be able to impersonate the web service account or the account of a service using the API when connecting to...

PT-2025-44594

Name of the Vulnerable Software and Affected Versions Apache HTTP Cache affected versions not specified Description Malicious or unintentional API requests can be used to add a significant amount of data to caches. This can lead to the eviction of information required for the web frontend to...

PT-2025-44622

Name of the Vulnerable Software and Affected Versions ESET security products for Windows affected versions not specified Description Tampering with registry entries could prevent ESET security products from starting correctly upon the next system startup or result in unauthorized changes to the...

PT-2025-44653

Name of the Vulnerable Software and Affected Versions Totolink LR350 version 9.3.5u.6369 B20220309 Description The software contains a stack overflow issue via the ssid parameter in the sub 422880 function. This can allow attackers to cause a Denial of Service DoS through a crafted request...

PT-2025-44595

Name of the Vulnerable Software and Affected Versions affected versions not specified Description Malicious content delivered via email can be leveraged to conduct a redressing attack. This allows attackers to deceive users into performing unintended actions or disclosing sensitive information to...

PT-2025-44619

Name of the Vulnerable Software and Affected Versions Mikado-Themes Bard versions through 1.6 Description A Cross-Site Request Forgery CSRF issue exists in Mikado-Themes Bard bardwp. This allows attackers to perform actions on behalf of authenticated users. The issue allows Cross Site Request...

PT-2025-44625

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The web server allows an attacker to reuse an old session JWT token while a legitimate session is active, potentially leading to session hijacking. An attacker...

PT-2025-44643

Name of the Vulnerable Software and Affected Versions Totolink LR350 version 9.3.5u.6369 B20220309 Description The software contains a stack overflow issue via the ssid parameter in the sub 425400 function. This allows attackers to cause a Denial of Service DoS by sending a crafted request...

PT-2025-44670

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description A protection mechanism failure exists in Microsoft Edge Chromium-based that could allow an unauthorized attacker to execute code over a network. The issue enables remote...

PT-2025-44600

Name of the Vulnerable Software and Affected Versions Neo4j versions prior to 2025-11602 Description A potential information leak exists in the bolt protocol handshake within Neo4j Enterprise and Community editions. This allows an attacker to obtain one byte of information from previous...

PT-2025-44580

Name of the Vulnerable Software and Affected Versions FutureNet MA and IP-K series Description A flaw exists in FutureNet MA and IP-K series routers that allows a user who logs in to the Web UI to execute arbitrary OS commands. This is due to an OS command injection issue. Recommendations At the...

PT-2025-44630

Name of the Vulnerable Software and Affected Versions Circutor TCPRS1plus affected versions not specified Description A denial of service condition can occur in the web server due to specific requests made to the protocol. The issue involves a resource exhaustion vector. Recommendations At the...

PT-2025-44633

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The equipment can be initially configured using the manufacturer's application, Wi-Fi, a web server, or the manufacturer’s software. Configuration via UDP using...

PT-2025-44668

Name of the Vulnerable Software and Affected Versions Tenda AX-3 version 16.03.12.10 CN Description A stack overflow exists in the Tenda AX-3 router. This issue is triggered via the deviceId parameter within the get parentControl list Info function. A crafted request can lead to a Denial of Servi...

PT-2025-44634

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The web server transmits sensitive information in clear text using an insecure protocol. Recommendations At the moment, there is no information about a newer...

PT-2025-44647

Name of the Vulnerable Software and Affected Versions Bizerba BRAIN2 affected versions not specified Description An attacker with administrator privileges on a client machine can implement or manipulate a Global Shipping script. This script can then be executed on the BRAIN2 server with...

PT-2025-44645

Name of the Vulnerable Software and Affected Versions Bizerba Communication Server BCS affected versions not specified Description The Bizerba Communication Server BCS service has an unquoted service path. This occurs when the Windows service's executable path contains spaces but is not enclosed ...