PT-2025-18683 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase versions prior to 2.10.9 Description: DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete Remote Code Execution RCE through the backend JDBC link. This issue has been...

PT-2025-18709 · Tenda · Tenda Rx2 Pro

Name of the Vulnerable Software and Affected Versions: Tenda RX2 Pro version 16.03.30.14 Description: An issue was discovered that allows an attacker, who is authenticated to the guest Wi-Fi network, to access resources on the router and/or resources and devices on other networks hosted by the...

PT-2025-18697 · Kunbus · Kunbus Pictory

Name of the Vulnerable Software and Affected Versions: KUNBUS PiCtory versions 2.11.1 and earlier Description: The issue allows for cross-site scripting attacks via the sso token used for authentication. If an attacker provides a user with a KUNBUS PiCtory URL containing an HTML script as an sso...

PT-2025-18645 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A null pointer dereference issue has been identified in the Linux kernel's SUNRPC component. This issue occurs when the allocation of sysfs for xps fails, potentially leading to a...

PT-2025-18617 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue occurs in the piix4 driver, where the adapter is not properly removed when the piix4 module is removed. This happens...

PT-2025-18559 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free issue has been identified in the Linux kernel, specifically in the ASoC core. The issue arises when snd soc util init fails, but its return value is ignored, leading t...

PT-2025-18648 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the IB/hfi1 module, where a commit incorrectly tries to move a list from one list head to another,...

PT-2025-18434

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the fix for the double free issue in cpumf pmu event init Description A double free issue was found in the Linux kernel's PMU event initialization functions, specifically in cpumf pmu event...

PT-2025-18455 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0-rc1-ktest-g189e17946605 19327 Description: A vulnerability in the Linux kernel has been resolved, which was causing crashes while running buffered io tests with alloc tagging slab alloc hook at the top of...

PT-2025-18615 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the btrfs file system. The issue is related to the mishandling of the tree mod log for reallocated nodes, which c...

Exploit for Code Injection in Geoserver

⚠️ Disclaimer: This tool is intended only for security resea...

PT-2025-18360 · NetGear · Netgear Ex6200

Name of the Vulnerable Software and Affected Versions: Netgear EX6200 version 1.0.3.94 Description: A critical issue was found in the Netgear EX6200, affecting the function sub 54340. The manipulation of the host argument leads to a buffer overflow. This issue can be exploited remotely. The vendo...

PT-2025-18682

Name of the Vulnerable Software and Affected Versions Vite versions prior to 6.3.4 Vite versions prior to 6.2.7 Vite versions prior to 6.1.6 Vite versions prior to 5.4.19 Vite versions prior to 4.5.14 Description The issue concerns Vite, a frontend tooling framework for JavaScript. In affected...

PT-2025-18315 · Elastic +2 · Elastic +2

Name of the Vulnerable Software and Affected Versions: Volcano versions prior to 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2 Description: The issue is related to a privilege escalation that can cause denial of service of the scheduler. If an attacker compromises...

PT-2025-18283 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A HTML Injection issue was discovered in the foreigner-search.php file, allowing remote attackers to execute arbitrary code via the searchdata POST request parameter in the...

PT-2025-18280 · Unknown · Weitong Mall

Name of the Vulnerable Software and Affected Versions: Weitong Mall version 1.0.0 Description: A critical issue was found in the Product Statistics Handler component, specifically affecting the /queryTotal file. The manipulation of the isDelete argument with the input 1 leads to improper access...

PT-2025-18268 · Abb · Abb Automation Builder

Name of the Vulnerable Software and Affected Versions: ABB Automation Builder versions prior to 2.8.0 Description: The issue is related to an incorrect permission assignment for critical resources in ABB Automation Builder. Recommendations: For versions prior to 2.8.0, update to version 2.8.0 or...

PT-2025-18303

Name of the Vulnerable Software and Affected Versions: Azure Bot Framework SDK affected versions not specified Description: The issue is related to improper authorization in the Azure Bot Framework SDK, allowing an unauthorized attacker to elevate privileges over a network. Recommendations: At th...

PT-2025-18272 · Unknown · Phpgurukul Time Table Generator System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Timetable Generator System version 1.0 Description: A Reflected Cross-Site Scripting XSS issue was discovered in the profile.php file. This issue allows remote attackers to execute arbitrary JavaScript code via the adminname...

PT-2025-18310 · Anc · Anc

Name of the Vulnerable Software and Affected Versions: ANC software versions 1.1.4 and earlier Description: The issue allows an authenticated attacker to bypass the old password check in the password change form via a web HMI. Recommendations: For ANC software versions 1.1.4 and earlier, update t...