PT-2025-16849 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

PT-2025-16622 · Unknown · Woocommerce Product Table Lite

Name of the Vulnerable Software and Affected Versions: WooCommerce Product Table Lite versions 3.9.5 and earlier Description: The issue is related to a Missing Authorization vulnerability in WC Product Table, which allows exploiting incorrectly configured access control security levels...

PT-2025-16796 · Sourcecodester · Sourcecodester Online Id Generator System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online ID Generator System version 1.0 Description: The issue is related to Stored Cross Site Scripting XSS via the id generator/classes/SystemSettings.php?f=update settings endpoint, with the point of vulnerability being in th...

PT-2025-16780 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue has been discovered, affecting the Login Handler component. The manipulation of the login email argument leads to SQL injection. This issue...

PT-2025-16833 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

PT-2025-16855 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

Siemens TeleControl Server Basic SQL

SUMMARY TeleControl Server Basic before V3.1.2.2 contains multiple SQL Injection vulnerabilities that could allow an attacker to read and write to the application's DB, cause denial of service and execute code in an OS shell with limited "NT AUTHORITY\NetworkService" permissions. Siemens has...

PT-2025-16875

Name of the Vulnerable Software and Affected Versions Whoogle search version 0.9.0 Description The issue allows attackers to execute arbitrary code via supplying a crafted search query in the /models/config.py component. Recommendations For Whoogle search version 0.9.0, consider restricting acces...

CVE-2025-1688

Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from older versions using specific installers. The system configuration password is an additional, optional protection that is enabled on the...

National Instruments LabVIEW

RISK EVALUATION Successful exploitation of these vulnerabilities lead to the execution of arbitrary code on affected installations of LabVIEW, which could result in invalid memory writes. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation...

Mitsubishi Electric Europe B.V. smartRTU

RISK EVALUATION Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to disclose, tamper with, destroy or delete information in the product, or cause a denial-of service condition on the product. 2. RECOMMENDED PRACTICES CISA recommends users take...

Security Bulletin: Multiple Security Vulnerabilites were discovered in the IBM Verify Directory Server Container (CVE-2024-49814, CVE-2024-51450)

Summary Security Vulnerabilities have been addressed in the IBM Security Verify Directory Server Container. Vulnerability Details CVEID:CVE-2024-49814 DESCRIPTION: IBM Security Verify Access Appliance could allow a locally authenticated user to increase their privileges due to execution with...

Security Bulletin: A Security Vulnerability was discovered in IBM Security Directory Integrator (CVE-2024-28767)

Summary A Security Vulnerability was adressed in IBM Security Directory Integrator. Vulnerability Details CVEID:CVE-2024-28767 DESCRIPTION: IBM Security Directory Integrator could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted...

PT-2025-16401

Name of the Vulnerable Software and Affected Versions: Oracle Commerce Platform versions 11.3.0 through 11.3.2 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise the Oracle Commerce Platform. Successful attacks require human interaction from a perso...

PT-2025-16373 · Code-Gen · Code-Gen

Name of the Vulnerable Software and Affected Versions: code-gen versions 2.0.6 and earlier Description: The issue is related to Incorrect Access Control, where the project lacks permission control, allowing anyone to access such projects. Recommendations: For code-gen versions 2.0.6 and earlier,...

PT-2025-16319 · Jetpopup · Jetpopup

Name of the Vulnerable Software and Affected Versions: JetPopup versions n/a through 2.0.11 Description: The issue is related to a Missing Authorization vulnerability in JetPopup, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions n/a through...

PT-2025-25657

Name of the Vulnerable Software and Affected Versions ZendTo versions 6.15 through 7 ZendTo version 6.15-8 fixed version Description A path traversal vulnerability exists in the file dropoff functionality of ZendTo. This flaw allows attackers to bypass security controls to access or modify...

PT-2025-16367

Name of the Vulnerable Software and Affected Versions WinZip versions prior to 29.0 Description The issue is related to the handling of archived files in WinZip, allowing attackers to bypass the Mark-of-the-Web protection mechanism. This can be exploited when a user extracts files from a crafted...

PT-2025-16324 · Unknown · Dsgvo Youtube

Name of the Vulnerable Software and Affected Versions: DSGVO Youtube versions n/a through 1.5.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This problem affects DSGVO Youtube. Recommendations: For versions n/a...

PT-2025-16342 · Unknown · Perfreeblog

Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 4.0.11 Description: The issue allows regular users to exploit an arbitrary file upload vulnerability in the attach component, enabling them to upload arbitrary files and execute code within them. Recommendations: For...