PT-2025-52391

Name of the Vulnerable Software and Affected Versions NSF Unidata NetCDF-C affected versions not specified Description A flaw exists in the parsing of variable names, stemming from insufficient validation of user-supplied data length before copying it into a fixed-length stack-based buffer. This...

PT-2025-52279

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description A flaw exists in SourceCodester Client Database Management System 1.0 within the Leads Generation Module. The issue affects the file /user leads.php and allows for...

PT-2025-52116

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Fabrica fabrica allows PHP Local File Inclusion.This issue affects Fabrica: from n/a through = 1.8.1...

PT-2025-52362

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description A spoofing issue exists in Microsoft Edge Chromium-based. Information about this issue has been published. Recommendations At the moment, there is no information about a...

PT-2025-51247

FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module...

PT-2025-51171

Name of the Vulnerable Software and Affected Versions snap7-rs versions up to 1.142.1 Description A flaw exists in snap7-rs up to version 1.142.1. The issue resides in the TSnap7MicroClient::opWriteArea function within the s7 micro client.cpp file, potentially leading to a heap-based buffer...

PT-2025-49526

Denial of service DoS vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2025-50946

Name of the Vulnerable Software and Affected Versions Plesk versions 18.0 through 18.0.74 Description Plesk 18.0 contains an incorrect access control issue within the Password-Protected Directories component. An authenticated attacker with limited privileges can inject arbitrary directives into...

PT-2025-48372

Actively exploited CVE : CVE-2025-20833...

PT-2025-47641

Name of the Vulnerable Software and Affected Versions Azure Bastion versions prior to November 20, 2025 Description A critical elevation of privilege flaw impacts Azure Bastion. Attackers can potentially gain higher permissions through capture-replay attacks if the system is unpatched. This allow...

PT-2025-48289

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.15 Description OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. A client sending slow messages to cupsd, such as one byte per second, can cause delays...

PT-2025-46659

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An issue exists related to incorrect default permissions that may lead to elevated system access. This occurs when the target installation folder is not adequately secured. Approximately 1000 devices...

PT-2025-46468

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An issue with access control in the Windows Client-Side Caching CSC Service can allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no...

PT-2026-2655

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 144.0.7559.59 Description: A flaw exists in the V8 JavaScript engine within Google Chrome. This issue involves an out-of-bounds memory access, potentially allowing a remote attacker to execute arbitrary code or...

PT-2025-45578

Name of the Vulnerable Software and Affected Versions QNAP versions prior to 5.2.7.3297 build 20251024 QuTS hero versions prior to h5.2.7.3297 build 20251024 QuTS hero versions prior to h5.3.1.3292 build 20251024 Description The software contains an improper neutralization of argument delimiters ...

PT-2025-43854

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Stored XSS.This issue affects Dynamic User Directory: from n/a through = 2.3...

EUVD-2025-35409

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ypromo PT Luxa Addons pt-luxa-addons allows Path Traversal.This issue affects PT Luxa Addons: from n/a through = 1.2.2...

PT-2025-43260

Name of the Vulnerable Software and Affected Versions PickPlugins Accordion versions through 2.3.14 Description A missing authorization issue exists in PickPlugins Accordion accordions, allowing exploitation of incorrectly configured access control security levels. Recommendations Versions prior ...

WordPress plugin PT Luxa Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

PT-2025-41637

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description A permission control issue exists in the media module. Successful exploitation could impact the confidentiality of the service. Recommendations At the moment, there is no...