PT-2025-20547 · Unknown · Code-Projects Departmental Store Management System

Name of the Vulnerable Software and Affected Versions: code-projects Departmental Store Management System version 1.0 Description: A critical issue was found in the function bill. The manipulation of the Item Code argument leads to a stack-based buffer overflow. This issue can be exploited locall...

PT-2025-20487 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been identified, related to the SMB client. The issue arises from an imbalance in the netns reference count, leading to potential leaks and...

PT-2025-20475 · Sparx Systems · Sparx Systems Pro Cloud Server

Name of the Vulnerable Software and Affected Versions: Sparx Systems Pro Cloud Server versions earlier than 6.0.165 Description: The issue is caused by an Improper Limitation of a Pathname, leading to a Path Traversal vulnerability in Sparx Systems Pro Cloud Server. This vulnerability is present ...

PT-2025-20601 · Unknown · Jadmin-Java

Name of the Vulnerable Software and Affected Versions: JAdmin-JAVA JAdmin version 1.0 Description: A critical vulnerability was found in the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to...

PT-2025-20477

Name of the Vulnerable Software and Affected Versions Gym Management System version 1.0 Description A critical issue was found in the Gym Management System. The problem affects an unknown function of the file "/ajax.php?action=save package". The manipulation of the ID argument leads to SQL...

PT-2025-20551

Name of the Vulnerable Software and Affected Versions Kong Insomnia Desktop Application versions prior to 11.0.2 Description The Kong Insomnia Desktop Application is susceptible to a template injection issue. This flaw stems from inadequate validation of user-provided input during template string...

PT-2025-20459 · Unknown · Project Worlds Car Rental Project

Name of the Vulnerable Software and Affected Versions: Project Worlds Car Rental Project version 1.0 Description: A critical vulnerability has been found in the Project Worlds Car Rental Project. The issue affects an unknown function of the file /signup.php. The manipulation of the fname argument...

PT-2025-20603 · Retool · Retool

Name of the Vulnerable Software and Affected Versions: Retool self-hosted versions prior to 3.196.0 Description: The issue allows for Host header injection when the BASE DOMAIN environment variable is not set, enabling manipulation of the HTTP host header. Recommendations: For versions prior to...

PT-2025-20566

Name of the Vulnerable Software and Affected Versions Victure RX1800 version EN V1.0.0 r12 110933 Description The issue is related to a weak default password used by the Victure RX1800, which includes the last 8 digits of the Mac address. Recommendations For version EN V1.0.0 r12 110933, consider...

PT-2025-24424 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior Description: The issue is related to authenticated SQL injection in the alerts module. Recommendations: For versions 8510 and prior, consider disabling the alerts module until a patch...

Debian dla-4158 : fossil - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4158 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4158-1 [email protected] https://www.debian.org/lts/security/...

PT-2025-20486 · WordPress · Frontend Login/Registration Blocks

Name of the Vulnerable Software and Affected Versions: Frontend Login and Registration Blocks plugin for WordPress versions 1.0.0 through 1.0.7 Description: The issue is related to privilege escalation via account takeover. This occurs because the plugin does not properly validate a user's identi...

PT-2025-20602 · WordPress · Wpforms

Name of the Vulnerable Software and Affected Versions: WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress versions up to, and including, 1.9.5 Description: The issue is related to Stored Cross-Site Scripting via the start timestamp...

PT-2025-20556 · Enersys · Enersys Ampa

Name of the Vulnerable Software and Affected Versions: EnerSys AMPA versions 24.04 through 24.16 Description: The issue allows for command injection, which can lead to privileged remote shell access. Recommendations: For EnerSys AMPA versions 24.04 through 24.16, update to a version that is not...

PT-2025-20506

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue has been identified in the Linux kernel, specifically in the drm/amd/display component. This issue arises when the dc-res pool pointer may be null under...

[SECURITY] [DLA 4156-1] openssh security update

Debian LTS Advisory DLA-4156-1 [email protected] https://www.debian.org/lts/security/ Colin Watson May 08, 2025 https://wiki.debian.org/LTS Package : openssh Version : 1:8.4p1-5+deb11u5 CVE ID : CVE-2025-32728 Debian Bug : 1102603...

PT-2025-20395 · Alfa · Alfa Aip-W512

Name of the Vulnerable Software and Affected Versions: ALFA AIP-W512 version 3.2.2.2.3 Description: The issue is related to an authenticated stack overflow. It occurs via the torrentsindex parameter in the formBTClinetSetting function. Recommendations: For ALFA AIP-W512 version 3.2.2.2.3, conside...

PT-2025-20423 · Unknown · Grocery-Cms-Php-Restful-Api

Name of the Vulnerable Software and Affected Versions: Grocery-CMS-PHP-Restful-API version 1.3 Description: The issue concerns a file upload vulnerability via the "/admin/add-category.php" API endpoint. This allows for potential malicious file uploads. Recommendations: For...

PT-2025-20456 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.04B04 Description: A critical issue affects the formSysCmd function, where manipulation of the sysCmd argument leads to command injection. This can be initiated remotely. The vendor was contacted about this disclosur...

PT-2025-20420 · Totolink · Totolink A950Rg

Name of the Vulnerable Software and Affected Versions: TOTOlink A950RG version 4.1.2cu.5204 B20210112 Description: The issue arises from improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of the /lib/cste modules/system.so module. This leads to a buffer overflow...