CVE-2025-30195 A crafted zone can lead to an illegal memory access in the PowerDNS Recursor

An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service. The remedy is: upgrade to the patched 5.2.1 version. We would like to thank Volodym...

CVE-2025-30473 Apache Airflow Common SQL Provider: Remote Code Execution via Sql Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

PT-2025-15246 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the jobLogId parameter. Recommendations: For RUoYi version 4.8.0, consider restricting access to the jobLogId parameter to minimize the ris...

PT-2025-15236

Name of the Vulnerable Software and Affected Versions tarteaucitron.js versions prior to 1.20.1 Description A vulnerability was identified in the addOrUpdate function of tarteaucitron.js, which did not properly validate input. This allowed an attacker with direct access to the site's source code ...

PT-2025-16585 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue affects the SIZE Command Handler component, leading to a buffer overflow. This can be exploited remotely. Recommendations: For PCMan FTP Server version 2.0.7, consider disabling the...

PT-2025-15131

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 5.0.2 Description The issue allows a local attacker to cause a denial of service DOS through an out-of-bounds read. Recommendations For versions prior to 5.0.2, update to a version newer than 5.0.2 to resolve the...

PT-2025-16897 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been discovered, affecting the STATUS Command Handler component. This issue leads to a buffer overflow and can be initiated remotely. The exploit details have been publicly...

PT-2025-15128 · Iteaj · Iteaj Iboot

Name of the Vulnerable Software and Affected Versions: iteaj iboot 物联网网关 version 1.1.3 Description: A issue was found in the File Upload component, affecting the processing of the file /common/upload/batch. The manipulation of the File argument leads to cross-site scripting. The attack may be...

PT-2025-23562

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 137.0.7151.68 Description A use after free issue in Blink allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The estimated number of potentially affected devices is not...

PT-2025-20417 · Totolink · Totolink A3100R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3100R version 5.9c.1527 Description: The issue is related to a Buffer Overflow that can be triggered via the comment parameter in the setMacFilterRules function. This allows for potential exploitation. Recommendations: For TOTOLINK...

PT-2025-15295

Name of the Vulnerable Software and Affected Versions Apollo Gateway versions prior to 2.10.1 Description A vulnerability in Apollo Gateway allowed queries with deeply nested and reused named fragments to be prohibitively expensive to query plan, due to internal optimizations being frequently...

PT-2025-15241 · Unknown · Estree-Util-Value-To-Estree

Name of the Vulnerable Software and Affected Versions: estree-util-value-to-estree versions prior to 3.3.3 Description: The issue arises when estree-util-value-to-estree converts a JavaScript value to an ESTree expression. Specifically, when generating an ESTree from a value with a property named...

PT-2025-15443 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: A local code execution issue exists due to an uninitialized pointer, resulting from improper validation of user-supplied data. This allows a threat actor to disclose...

PT-2025-15176 · Mediatek · Mt7915 +6

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: In the wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote information disclosure with no additional execution privileges neede...

PT-2025-15243 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the jobId parameter. Recommendations: For RUoYi version 4.8.0, consider restricting access to the jobId parameter to minimize the risk of...

PT-2025-15137 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/menu update.php. The manipulation of the menu argument leads to SQL...

PT-2025-15272 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been identified in the CONF Command Handler component of the affected software, leading to a buffer overflow. This can be exploited remotely. Recommendations: For PCMan FTP Serv...

PT-2025-15290

Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.16.1 Description The issue arises from the heifsave operation in libvips, which can incorrectly determine the presence of an alpha channel in a "multiband" input. This can occur with a well-crafted TIFF image, leadi...

PT-2025-16883 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue affects the MDTM Command Handler component of PCMan FTP Server, leading to a buffer overflow. The manipulation can be initiated remotely. The exploit has been disclosed to the publi...

PT-2025-20419 · Totolink · Totolink A3100R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3100R version 5.9c.1527 Description: The issue is related to a Buffer Overflow that can be triggered via the priority parameter in the setMacQos interface of /lib/cste modules/firewall.so. This can be accessed through the API endpoi...