PT-2025-19732 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the ifname parameter in the apcli do enr pbc wps function. Recommendations: For version 1.0.2.26, consider...

PT-2025-19716 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.05.14 Description: A command injection issue was found via the Telnet function. Recommendations: For Tenda AC9 version 15.03.05.14, consider disabling the Telnet function until a patch is available...

PT-2025-19789

Name of the Vulnerable Software and Affected Versions Langroid versions prior to 0.53.4 Description A LLM application leveraging the XMLToolMessage class may be exposed to untrusted XML input, potentially resulting in Denial of Service DoS and/or exposing local files with sensitive information. T...

PT-2025-19886 · Dell · Dell Storage Manager

Name of the Vulnerable Software and Affected Versions: Dell Storage Center - Dell Storage Manager version 20.1.20 Description: The issue is related to an Improper Restriction of XML External Entity Reference, which could be exploited by an unauthenticated attacker with adjacent network access. Th...

PT-2025-19340 · Unknown · Phpgurukul Emergency Ambulance Hiring Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description: A critical vulnerability was found in the PHPGurukul Emergency Ambulance Hiring Portal. The issue affects an unknown functionality of the file /admin/contact-us.php. The...

PT-2025-19719 · Unknown · Kashipara Online Service Management Portal

Name of the Vulnerable Software and Affected Versions: kashipara Online Service Management Portal version V1.0 Description: The issue is related to SQL Injection in the osms/Requester/CheckStatus.php file via the checkid parameter. This allows for potential exploitation. Recommendations: For...

PT-2025-19803 · Ideacms · Ideacms

Name of the Vulnerable Software and Affected Versions: IdeaCMS versions up to 1.6 Description: A critical vulnerability was found in IdeaCMS, affecting the saveUpload function. This vulnerability allows for unrestricted upload and can be exploited remotely. The exploit has been disclosed to the...

PT-2025-19769 · Misskey · Misskey

Name of the Vulnerable Software and Affected Versions: Misskey versions 12.0.0 through 2025.4.0 Description: The issue arises from an oversight in validation performed in UrlPreviewService and MkUrlPreview, allowing an attacker to inject arbitrary CSS into the MkUrlPreview component. This can lea...

PT-2025-19794 · Pytorch +1 · Pytorch +1

Name of the Vulnerable Software and Affected Versions: PyTorch version 2.6.0+cu124 Description: A vulnerability was found in PyTorch, affecting the function torch.cuda.nccl.reduce of the file torch/cuda/nccl.py. This issue leads to denial of service and can be exploited on the local host. The...

PT-2025-19724 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the iface parameter in the vif enable function. This allows for potential exploitation. Recommendations: For versio...

PT-2025-19325 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.2 Description: A problematic vulnerability has been found in SeaCMS, affecting the processing of the file /admin pay.php. The manipulation of the cstatus argument leads to cross-site scripting. The attack can be initiated...

PT-2025-19784 · Brcc · Brcc

Name of the Vulnerable Software and Affected Versions: brcc version 1.2.0 Description: The issue is related to incorrect access control in the "/admin/" API endpoint, which allows attackers to gain access to Admin rights via a crafted request. Recommendations: For brcc version 1.2.0, as a tempora...

PT-2025-19715 · Unknown · Output Messenger

Name of the Vulnerable Software and Affected Versions: Output Messenger versions prior to 2.0.63 Description: A reflected cross-site scripting XSS vulnerability was discovered in Output Messenger, where unsanitized input could be injected into the web application’s response. This occurs when...

PT-2025-19760 · Hcl · Hcl Bigfix Compliance

Name of the Vulnerable Software and Affected Versions: HCL BigFix Compliance affected versions not specified Description: The issue is related to an improper or missing SameSite attribute, which can lead to Cross-Site Request Forgery CSRF attacks. A malicious site could trick a user's browser int...

PT-2025-19774 · Unknown · Mezzanine Cms

Name of the Vulnerable Software and Affected Versions: Mezzanine CMS version 6.0.0 Description: A Cross-Site Scripting XSS issue exists in the "View Entries" feature within the Forms module. This allows for potential malicious script execution. Recommendations: For Mezzanine CMS version 6.0.0,...

PT-2025-19768

Name of the Vulnerable Software and Affected Versions Mobile Security Framework MobSF versions up to and including 4.3.2 Description A Stored Cross-Site Scripting XSS issue has been identified in MobSF. The issue arises from improper sanitization of user-supplied SVG files during the Android APK...

PT-2025-20023 · Rt · Rt-Labs P-Net

Name of the Vulnerable Software and Affected Versions: RT-Labs P-Net versions 1.0.1 and earlier Description: The issue is related to an unchecked input for a loop condition, which allows an attacker to cause IO devices using the library to enter an infinite loop by sending a malicious RPC packet...

PT-2025-19320 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.2 Description: A problematic vulnerability was found in SeaCMS, affecting unknown code of the file /admin paylog.php. The manipulation of the cstatus argument leads to cross-site scripting. The attack can be initiated...

Fedora: Security Advisory (FEDORA-2025-59ebc165fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Vulnerability in commons-compress affects IBM Cloud Pak for Data System 1.0(CPDS 1.0)[CVE-2024-25710, CVE-2024-26308].

Summary The commons-compress package is used by IBM Cloud Pak for Data System 1.0. IBM Cloud Pak for Data System 1.0 has addressed the applicable CVE CVE-2024-25710, CVE-2024-26308. Vulnerability Details CVEID:CVE-2024-25710 DESCRIPTION: Loop with Unreachable Exit Condition 'Infinite Loop'...