PT-2025-21577 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Placement Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /edit profile.php. The manipulation of the Name argument leads to SQL injection. This issue can ...

PT-2025-21230

Name of the Vulnerable Software and Affected Versions: realme GT 2 RMX3311 running Android 14 with realme UI 5.0 Description: An issue allows a physically proximate attacker to obtain sensitive information via the show app only setting function. Recommendations: For realme GT 2 RMX3311 running...

PT-2025-21925 · V-Sft · V-Sft

Name of the Vulnerable Software and Affected Versions: V-SFT versions 6.2.5.0 and earlier Description: The issue is related to a stack-based buffer overflow in the VS6MemInIF!set temp type default function. Opening specially crafted V7 or V8 files may lead to a crash, information disclosure, and...

PT-2025-21921 · V-Sft · V-Sft

Name of the Vulnerable Software and Affected Versions: V-SFT versions 6.2.5.0 and earlier Description: The issue is related to an out-of-bounds read in the VS6EditData!CGamenDataRom::set mr400 strc function. Opening specially crafted V7 or V8 files may lead to a crash, information disclosure, and...

PT-2025-21035 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Substance3D - Stager versions 3.1.1 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

PT-2025-20812

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Visual Composer affected versions not specified Description The issue arises when a privileged user uploads untrusted or malicious content, which upon deserialization, could compromise the confidentiality, integrity, and...

EulerOS 2.0 SP10 : elfutils (EulerOS-SA-2025-1504)

According to the versions of the elfutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelfgetsymshndx of th...

PT-2025-20696

Name of the Vulnerable Software and Affected Versions: Microsoft UEFI firmware versions prior to June 2025. Description: A vulnerability exists in Microsoft-signed UEFI firmware that allows for the execution of untrusted software due to an arbitrary write flaw. This allows an attacker to control...

PT-2025-20645 · Bluewave · Bluewave Checkmate

Name of the Vulnerable Software and Affected Versions: BlueWave Checkmate versions 2.0.2 and earlier, before b387eba Description: The issue allows a profile edit request to include a role parameter. This is related to the external control of assumed-immutable web parameters. Recommendations: For...

PT-2025-20480

Name of the Vulnerable Software and Affected Versions itsourcecode Gym Management System version 1.0 Description A critical issue has been found in the system, affecting an unknown functionality of the file "/ajax.php?action=save plan". The manipulation of the plan argument leads to SQL injection...

PT-2025-20601 · Unknown · Jadmin-Java

Name of the Vulnerable Software and Affected Versions: JAdmin-JAVA JAdmin version 1.0 Description: A critical vulnerability was found in the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to...

PT-2025-20477

Name of the Vulnerable Software and Affected Versions Gym Management System version 1.0 Description A critical issue was found in the Gym Management System. The problem affects an unknown function of the file "/ajax.php?action=save package". The manipulation of the ID argument leads to SQL...

PT-2025-20551

Name of the Vulnerable Software and Affected Versions Kong Insomnia Desktop Application versions prior to 11.0.2 Description The Kong Insomnia Desktop Application is susceptible to a template injection issue. This flaw stems from inadequate validation of user-provided input during template string...

PT-2025-20487 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been identified, related to the SMB client. The issue arises from an imbalance in the netns reference count, leading to potential leaks and...

PT-2025-20423 · Unknown · Grocery-Cms-Php-Restful-Api

Name of the Vulnerable Software and Affected Versions: Grocery-CMS-PHP-Restful-API version 1.3 Description: The issue concerns a file upload vulnerability via the "/admin/add-category.php" API endpoint. This allows for potential malicious file uploads. Recommendations: For...

PT-2025-19902 · Ibm · Ibm I

Name of the Vulnerable Software and Affected Versions: IBM i versions 7.2 through 7.6 Description: The issue concerns authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could exploit these weaknesses, in conjunction with brute for...

PT-2025-20162 · Unknown · Themefic Beaf

Name of the Vulnerable Software and Affected Versions: Themefic BEAF versions through 4.6.10 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can be exploited to gain unauthorized access to the server...

PT-2025-19813 · Google +1 · Virglrenderer +1

Name of the Vulnerable Software and Affected Versions: Virglrenderer in ChromeOS version 16093.57.0 Description: The issue is an out-of-bounds read in Virglrenderer that allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process. This could potentially lea...

Azure Linux 3.0 Security Update: pytorch (CVE-2025-3730)

The version of pytorch installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-3730 advisory. - A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Affected is the function...

PT-2025-19840 · Unknown · Real Estate Management System

Name of the Vulnerable Software and Affected Versions: Real Estate Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the message parameter at the "/contact.php" API endpoint. Recommendations: For Real Estate Management System...