PT-2025-22535 · Unknown +1 · Nexus Series +3

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3. NEXUS Series versions through 3. MATRIX Series versions through 3. Description: The issue is related to insufficient security of Windows permissions for ASPECT configuration toolsets, leading to exposure ...

PT-2025-22474 · Sandboxie · Sandboxie

Name of the Vulnerable Software and Affected Versions: Sandboxie versions 1.3.0 through 1.15.12 Description: The issue is related to an arithmetic overflow in the API GET SECURE PARAM, leading to a small memory allocation followed by an extremely large copy into the small allocation...

PT-2025-22475 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue has been found in the DEBUG Command Handler component, which can be exploited remotely. The manipulation of this component leads to a buffer overflow. Recommendations: For FreeFlo...

PT-2025-22452 · WordPress · Hot Random Image

Name of the Vulnerable Software and Affected Versions: Hot Random Image plugin for WordPress versions up to, and including, 1.9.2 Description: The issue allows authenticated attackers with Contributor-level access and above to access arbitrary images with allowed extensions outside of the...

PT-2025-22563 · Schule · Schule

Name of the Vulnerable Software and Affected Versions: Schule versions prior to 1.0.1 Description: The issue concerns the Schule open-source school management system software, which relies on client-side JavaScript to redirect users to different panels based on their role. This implementation pos...

IOLeak - CPU Side Channel Attacks

AMD ID: AMD-SB-7042 Potential Impact: N/A Severity: N/A Summary Researchers have provided AMD with a summary of relevant remarks and findings detailed in a paper titled “IOLeak Side-Channel Attack Exploiting CPU Frequency Scaling and I/O Latency.” AMD reviewed the summary and believes this attack...

PT-2025-22461 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical vulnerability was found in the PROMPT Command Handler component of FreeFloat FTP Server, leading to a buffer overflow. This issue can be exploited remotely. The vulnerability is...

PT-2025-22551 · Ocuco Innovation · Appmanager.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation APPMANAGER.EXE version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the application manager function. Recommendations: For Ocuco Innovation APPMANAGER.EXE version 2.10.24.51, consider...

PT-2025-22454 · Poedit · Poedit

Name of the Vulnerable Software and Affected Versions: Poedit versions prior to 3.6.3 Description: The MacOS version of Poedit bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with loc...

PT-2025-22557 · Ocuco Innovation · Invclient.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation - INVCLIENT.EXE version 2.10.24.5 Description: The issue allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. Recommendations: For Ocuco Innovation - INVCLIENT.EXE versi...

PT-2025-22556 · Ocuco Innovation · Reportserver.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation - REPORTSERVER.EXE version 2.10.24.13 Description: An issue in the REPORTSERVER.EXE allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. Recommendations: For Ocuco...

PT-2025-22508 · Sandboxie · Sandboxie

Name of the Vulnerable Software and Affected Versions: Sandboxie versions 1.3.0 through 1.15.12 Description: The issue arises from the failure of Api GetSecureParam to sanitize incoming pointers, implicitly trusting the pointer passed by the user as safe to write to. GetRegValue then writes the...

PT-2025-22515 · Wire · Wire-Webapp

Name of the Vulnerable Software and Affected Versions: wire-webapp versions 2025-05-14-production.0 through 2025-05-20-production.0 Description: The issue is related to a regression in the session invalidation process. When a user logs out of the Wire webapp, they could be automatically logged in...

PT-2025-22558 · Ocuco Innovation · Reports.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation - REPORTS.EXE version 2.10.24.13 Description: The issue allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. Recommendations: For Ocuco Innovation - REPORTS.EXE version...

PT-2025-22462 · Forcepoint · Forcepoint Fie Endpoint

Name of the Vulnerable Software and Affected Versions: Forcepoint FIE Endpoint versions prior to 25.05 Description: The issue is related to an Uncontrolled Search Path Element vulnerability, which allows for Privilege Escalation, Code Injection, and Hijacking a privileged process. Recommendations...

PT-2025-22525 · Unknown · Wire-Webapp

Name of the Vulnerable Software and Affected Versions: wire-webapp versions prior to 2025-05-14-production.0 Description: A regression issue in the function to delete local data causes the client's local database not to be deleted upon user logout, even when instructed to do so. This affects both...

PT-2025-22512 · Sandboxie · Sandboxie

Name of the Vulnerable Software and Affected Versions: Sandboxie versions 1.3.0 through 1.15.12 Description: The issue arises from the failure of Api SetSecureParam to sanitize incoming pointers, implicitly trusting the pointer passed by the user as safe to read from. This allows SetRegValue to...

PT-2025-22451 · WordPress · Hot Random Image

Name of the Vulnerable Software and Affected Versions: Hot Random Image plugin for WordPress versions up to, and including, 1.9.2 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with...

CVE-2009-10004

A vulnerability was found in Turante Sandbox Theme up to 1.5.2. It has been classified as problematic. This affects the function sandboxbodyclass of the file functions.php. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. Upgradi...

CVE-2009-10003

A vulnerability was found in capnsquarepants wordcraft up to 0.6. It has been classified as problematic. Affected is an unknown function of the file tag.php. The manipulation of the argument tag leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 0.7 ...