PT-2025-26324 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.11.x through 9.11.15 Mattermost versions 10.5.x through 10.5.5 Mattermost versions 10.6.x through 10.6.5 Mattermost versions 10.7.x through 10.7.2 Mattermost versions 10.8.x through 10.8.0 Description: The issue is relat...

PT-2025-26471 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical vulnerability affects the unknown code of the file /goform/formSetDomainFilter. The manipulation of the argument curTime/sched name %d/url %d leads to a stack-based buffer overflow. The...

PT-2025-26292 · Unknown · Phpgurukul Pre-School Enrollment System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Pre-School Enrollment System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Pre-School Enrollment System. The issue affects an unknown functionality of the file /admin/add-subadmin.php, where the...

PT-2025-26390 · Unknown · Buying Buddy Idx Crm

Name of the Vulnerable Software and Affected Versions: Buying Buddy IDX CRM versions through 2.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This enables potential attackers to...

PT-2025-26484 · Dnn · Dnn

Name of the Vulnerable Software and Affected Versions: DNN formerly DotNetNuke versions 6.0.0 through 10.0.0 Description: The issue allows a specially crafted series of malicious interactions to potentially expose NTLM hashes to a third-party SMB server. This is a problem in the DNN.PLATFORM, par...

PT-2025-26237 · Unknown +1 · Webassembly Wabt +1

Name of the Vulnerable Software and Affected Versions: WebAssembly wabt versions up to 1.0.37 Description: A vulnerability was found in WebAssembly wabt, affecting the function GetFuncOffset of the file src/interp/binary-reader-interp.cc. The manipulation leads to use after free. It is possible t...

PT-2025-26236 · Unknown +1 · Webassembly Wabt +1

Name of the Vulnerable Software and Affected Versions: WebAssembly wabt versions up to 1.0.37 Description: A vulnerability was found in WebAssembly wabt, classified as problematic. The function OnDataCount of the file src/interp/binary-reader-interp.cc is affected, leading to resource consumption...

PT-2025-27045

Name of the Vulnerable Software and Affected Versions: Linksys WRT1900ACS, EA7200, EA7450, and EA7500 versions up to 20250619 Description: A critical vulnerability exists in Linksys routers due to a stack-based buffer overflow. The issue is located in the SetDefaultConnectionService function with...

PT-2025-26248 · Unknown · Phpgurukul Car Rental Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Car Rental Portal version 3.0 Description: The issue affects unknown code and leads to cross-site request forgery. The attack can be initiated remotely. Recommendations: For PHPGurukul Car Rental Portal version 3.0, consider...

PT-2025-26260 · Microsoft · Dynamics 365 Fasttrack Implementation Assets

Name of the Vulnerable Software and Affected Versions: Dynamics 365 FastTrack Implementation Assets affected versions not specified Description: The issue concerns the exposure of private personal information to unauthorized actors in Dynamics 365 FastTrack Implementation Assets, allowing attacke...

PT-2025-26228 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.5 through 7.5.0 Update Package 12 Description: The issue allows a privileged user to modify configuration files, enabling the upload of a malicious autoupdate file to execute arbitrary commands. Recommendations: For...

PT-2025-26270 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5232 B20210713 Description: A critical vulnerability was found in the TOTOLINK EX1200T, affecting the setStaticDhcpConfig function of the file /cgi-bin/cstecgi.cgi. The manipulation of the Comment argument lea...

PT-2025-26249 · Unknown · Phpgurukul Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul COVID19 Testing Management System 2021 Description: A problematic issue affects the processing of the file /search-report-result.php, where the manipulation of the argument q leads to cross-site scripting. This issue may be initiat...

PT-2025-26243

Name of the Vulnerable Software and Affected Versions CrafterCMS versions 4.0.0 through 4.2.2 Description An issue exists in Crafter Studio of CrafterCMS that allows authenticated developers to execute operating system commands. This is due to improper control of dynamically-managed code resource...

PT-2025-28942

Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration Suite versions prior to 9.0.0 Patch 46 Zimbra Collaboration Suite versions 10.0.x prior to 10.0.15 Zimbra Collaboration Suite versions 10.1.x prior to 10.1.9 Description: The software is susceptible to a denial of service...

PT-2025-26174 · Ibm · Ibm Sterling File Gateway +1

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4 Description: The issue is related to cross-site request...

PT-2025-26207 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.2 Description: A SQL Injection issue was identified in the id parameter of the "/WeGIA/controle/control.php" endpoint, allowing attackers to manipulate SQL queries and access sensitive database information, such as...

PT-2025-26206 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.2 Description: The issue is related to an OS Command Injection flaw in the "/html/configuracao/debug info.php" endpoint. The branch parameter is not properly sanitized before being concatenated and executed in a...

PT-2025-25777 · Funnelkit · Recover Woocommerce Cart Abandonment

Name of the Vulnerable Software and Affected Versions: Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit versions up to, and including, 3.5.3 Description: The issue is related to a missing capability check on the install or activate addon plugins...

PT-2025-25934 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0+ Description: A vulnerability in the Linux kernel has been identified, where the assumption in disable kprobe is incorrect, leading to an attempt to disarm an already disarmed kprobe and triggering a WARN...