PT-2025-22887 · Ibm · Ibm Controller

Name of the Vulnerable Software and Affected Versions: IBM Controller versions 11.0.0 through 11.1.0 Description: The issue allows an authenticated user to obtain sensitive credentials that may be inadvertently included within the source code. Recommendations: For versions 11.0.0 through 11.1.0,...

PT-2025-22940 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue affects the processing of the file /myprofile.php, where the manipulation of the EmpCode argument leads to SQL injection. The attack can be initiated...

PT-2025-22923 · Unknown · Summer Pearl Group Vacation Rental Management Platform

Name of the Vulnerable Software and Affected Versions: Summer Pearl Group Vacation Rental Management Platform version 1.0.1 Description: A vulnerability was found in the Summer Pearl Group Vacation Rental Management Platform, affecting an unknown part of the file /spgpm/updateListing. The...

PT-2025-22916 · Pypi · Pypickle

Name of the Vulnerable Software and Affected Versions: erdogant pypickle versions 1.1.5 and earlier Description: A vulnerability was found in erdogant pypickle, classified as problematic. The issue affects the load function of the file pypickle/pypickle.py, leading to deserialization. Local acces...

PT-2025-22901 · Gestnet · Gestnet

Name of the Vulnerable Software and Affected Versions: Gestnet version 1.07 Description: This issue allows an attacker to retrieve, create, update, and delete databases via the fk remoto central parameter on the "/webservices/articles.php" endpoint. Recommendations: For Gestnet version 1.07, as a...

PT-2025-22929 · Unknown · Wing Ftp Server

Name of the Vulnerable Software and Affected Versions: Wing FTP Server versions 7.4.0 through 7.4.3 Description: A critical vulnerability has been found in the Lua Admin Console component of Wing FTP Server, allowing execution with unnecessary privileges. The attack can be launched remotely and h...

PT-2025-22917 · Pypi · Pypickle

Name of the Vulnerable Software and Affected Versions: erdogant pypickle versions 1.1.5 and earlier Description: A critical issue affects the Save function of the file pypickle/pypickle.py, leading to improper authorization. The manipulation requires a local attack, and the exploit has been...

PT-2025-22885 · Assimp +1 · Assimp +1

Name of the Vulnerable Software and Affected Versions: Open Asset Import Library Assimp version 5.4.3 Description: A problematic vulnerability has been found in Open Asset Import Library Assimp, affecting the function MDLImporter::InternReadFile 3DGS MDL345 of the file...

PT-2025-22906 · Google · Web Designer App +1

Name of the Vulnerable Software and Affected Versions: Google Web Designer versions prior to 16.3.0.0407 Description: The issue allows an attacker to achieve remote code execution by tricking users into downloading a malicious ad template. This is due to path traversal in Google Web Designer's...

PT-2025-23638 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002RU version 2.1.1-B20230720.1011 Description: The issue is related to the IP/Port Filtering module of the TOTOLINK A3002RU router's firmware, where the Comment parameter is not properly protected, leading to cross-site scripting...

Debian dla-4177 : libphp-adodb - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4177 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4177-1 [email protected] https://www.debian.org/lts/security/...

PT-2025-22927 · Unknown · Summer Pearl Group Vacation Rental Management Platform

Name of the Vulnerable Software and Affected Versions: Summer Pearl Group Vacation Rental Management Platform versions up to 1.0.1 Description: A vulnerability was found in the Summer Pearl Group Vacation Rental Management Platform, affecting an unknown functionality and leading to cross-site...

Fedora: Security Advisory (FEDORA-2024-0d14d0d2f9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-3854530fd9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-0912cd3ad9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-23626

Name of the Vulnerable Software and Affected Versions TOTOLINK X2000R version 1.0.0-B20230726.1108 Description A critical issue exists in the TOTOLINK X2000R router related to insufficient input validation when processing the peerRptPin parameter. Exploitation of this issue can allow a remote...

PT-2025-22899

Name of the Vulnerable Software and Affected Versions TCMAN's GIM version 11 Description Time-based blind SQL injection vulnerabilities in TCMAN's GIM allow an attacker to retrieve, create, update, and delete databases through the ArbolID parameter in "/GIMWeb/PC/frmPreventivosList.aspx"...

FunAudioLLM InspireMusic deserialization vulnerability

A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd. It has been classified as critical. Affected is the function loadstatedict of the file inspiremusic/cli/model.py of the component Pickle Data Handler. The manipulation leads to deserialization. A...

PT-2025-22871 · H3C · H3C Seccenter Smp-E1114P02

Name of the Vulnerable Software and Affected Versions: H3C SecCenter SMP-E1114P02 up to 20250513 Description: A vulnerability was found in the function Download of the file /cfgFile/1/download. The manipulation of the argument Name leads to path traversal. The attack may be initiated remotely...

PT-2025-22862

Name of the Vulnerable Software and Affected Versions docarray versions up to 0.40.1 Description A critical issue affects the getitem function of the /docarray/data/torch dataset.py file in the Web API component. This issue leads to improperly controlled modification of object prototype attribute...