PT-2025-23123 · Unknown · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.54 Description: The issue allows attackers with administrative access to the management console and specific permissions to bypass those permissions, improperly modifying settings. The attack...

PT-2025-22910 · Sigb Pmb · Sigb Pmb

Name of the Vulnerable Software and Affected Versions: SIGB PMB versions prior to 8.0.1.2 Description: The issue allows SQL injection. Recommendations: For versions prior to 8.0.1.2, update to version 8.0.1.2 or later to resolve the issue...

PT-2025-23003 · Gnu +1 · Gnu Binutils +1

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions up to 2.44 Description: A critical vulnerability has been found in GNU Binutils, affecting the debug type samep function of the objdump component. This issue leads to memory corruption and requires local access to exploi...

PT-2025-22969 · Nagvis +1 · Nagvis +1

Name of the Vulnerable Software and Affected Versions: Nagvis versions prior to 1.9.47 Description: The issue is related to the improper neutralization of input in Nagvis, which can lead to livestatus injection. This can potentially allow for unauthorized access or control. Recommendations: For...

PT-2025-22951 · Unknown · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown function of the file /admin/add-doctor.php. The manipulation of the Doctorspecialization argument...

PT-2025-22950 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0.0 Description: A critical vulnerability was found in the QUOTE Command Handler component of FreeFloat FTP Server, which can be exploited remotely. The manipulation leads to a buffer overflow. The exploit has...

PT-2025-23048 · Strapi · Strapi

Name of the Vulnerable Software and Affected Versions: Strapi versions prior to 4.25.2 Description: The issue allows an attacker to input a local domain into the Webhooks URL field, leading to a server-side request forgery SSRF. This enables the application to fetch itself, potentially allowing a...

PT-2025-22986

Name of the Vulnerable Software and Affected Versions Icinga 2 versions prior to 2.12.12 Icinga 2 versions prior to 2.13.12 Icinga 2 versions prior to 2.14.6 Description The issue affects Icinga 2, a monitoring system that checks network resource availability and generates performance data. It...

ABB M2M Gateway Use-After-Free in embedded Linux Kernel (CVE-2023-3609)

A use-after-free vulnerability in the Linux kernel's net/sched: clsu32 component can be exploited to achieve local privilege escalation. If tcfchangeindev fails, u32setparms will immediately return an error after incrementing or decrementing the reference counter in tcfbindfilter. If an attacker...

PT-2025-22911 · Sigb Pmb · Sigb Pmb

Name of the Vulnerable Software and Affected Versions: SIGB PMB version 8.0.1.2 and earlier Description: The issue allows attackers to achieve Local File Inclusion and remote code execution. Recommendations: For SIGB PMB version 8.0.1.2 and earlier, update to version 8.0.1.2 or later to resolve t...

PT-2025-22960 · Radashi · Radashi

Name of the Vulnerable Software and Affected Versions: Radashi versions prior to 12.5.1 Description: Radashi is a TypeScript utility toolkit. The set function within the Radashi library is vulnerable to prototype pollution. If an attacker can control parts of the path argument to the set function...

PT-2025-23006

Name of the Vulnerable Software and Affected Versions Django-Select2 versions prior to 8.4.1 Description The issue affects instances of HeavySelect2Mixin subclasses, such as the ModelSelect2MultipleWidget and ModelSelect2Widget, allowing secret access tokens to leak across requests. This can enab...

PT-2025-23005 · Opentext · Opentext Advance Authentication

Name of the Vulnerable Software and Affected Versions: OpenText Advanced Authentication versions prior to 6.5 Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, potentially revealing sensitive information during the management and configurati...

PT-2025-22984 · Viscosity · Viscosity

Name of the Vulnerable Software and Affected Versions: Viscosity versions prior to 1.11.5 Description: The issue allows loading a dynamic library with Viscosity's TCC identity on macOS systems by utilizing a Launch Agent and loading the viscosity openvpn process from the application bundle. The...

PT-2025-23041 · Netalertx · Netalertx

Name of the Vulnerable Software and Affected Versions: NetAlertX version 25.4.13 and earlier Description: NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without...

PT-2025-23035 · Unknown +1 · Net-Cidr-Lite +2

Name of the Vulnerable Software and Affected Versions: Net::CIDR::Set versions 0.10 through 0.13 Description: The issue arises from the improper handling of leading zero characters in IP CIDR address strings, potentially allowing attackers to bypass access control based on IP addresses. This is d...

ABB M2M Gateway HTTP Request Smuggling in embedded Apache HTTP Server (CVE-2023-25690)

Some modproxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when modproxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern matches some portion of the...

PT-2025-22992

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 139 Firefox ESR versions prior to 128.11 Description A clickjacking issue could be exploited to trick a user into leaking saved payment card details to a malicious page. Recommendations For Firefox versions prior to...

PT-2025-22988

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 139 Firefox ESR versions prior to 115.24 Firefox ESR versions prior to 128.11 Description The issue arises from incorrect isolation of error handling for script execution from web content, potentially allowing...

RHEL 9 : Satellite 6.17.0.1 Async Update (Important) (RHSA-2025:7604)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:7604 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide...