PT-2025-23807 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue has been found in the PASSIVE Command Handler component, leading to a buffer overflow. This can be exploited remotely. Recommendations: For FreeFloat FTP Server version 1.0,...

PT-2025-23734

Name of the Vulnerable Software and Affected Versions PHPGurukul Rail Pass Management System version 1.0 Description A critical vulnerability was found in the PHPGurukul Rail Pass Management System. The issue affects an unknown functionality of the file /download-pass.php. The manipulation of the...

PT-2025-23774 · Unknown · Phpgurukul Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A critical vulnerability was found in the PHPGurukul Dairy Farm Shop Management System. This issue affects unknown code of the file /add-product.php. The manipulation of th...

PT-2025-23770 · D Link · D-Link Dcs-932L

Name of the Vulnerable Software and Affected Versions: D-Link DCS-932L version 2.18.01 Description: A critical issue was found in the function setSystemAdmin of the file /setSystemAdmin. The manipulation of the argument AdminID leads to os command injection. It is possible to launch the attack...

PT-2025-23793 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: A vulnerability was found in the PHPGurukul Hospital Management System. It has been classified as problematic and affects an unknown function of the file...

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM Business Automation Workflow due to the April 2025 CPU

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow. Information about a security vulnerability affecting IBM WebSphere Application Server Traditional have been published in a security bulletin. Vulnerability Details Refer to the security bulletins...

PT-2025-23595 · WordPress · Wp Plugin Info Card

Name of the Vulnerable Software and Affected Versions: WP Plugin Info Card plugin for WordPress versions up to, and including, 5.3.1 Description: The issue is related to Stored Cross-Site Scripting via the containerid parameter due to insufficient input sanitization and output escaping. This allo...

PT-2025-23631 · Jehc-Bpm · Jehc-Bpm

Name of the Vulnerable Software and Affected Versions: JEHC-BPM version 2.0.1 Description: The issue allows attackers to execute arbitrary code via uploading a crafted file to the "/server/executeExec" API endpoint. This is due to an arbitrary file upload vulnerability in the component...

PT-2025-23636

Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10 Description A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via the "failure.aspx" component. Recommendations For versions prior to 10, update to version 10 or later to resolv...

PT-2025-23616 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: Foxcms version 1.25 Description: The issue is related to a SQL time injection in the installdb.php script, specifically affecting the $ POST'dbname' parameter. This allows for potential exploitation. Recommendations: For Foxcms version 1.25,...

PT-2025-23644 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions 1480 and 2400 Description: An issue was discovered in the Samsung Mobile Processor Exynos, where the lack of a length check leads to out-of-bounds writes. Recommendations: For Samsung Mobile Processor...

PT-2025-23673 · Auth0 · Auth0/Wordpress +3

Name of the Vulnerable Software and Affected Versions: Auth0-PHP versions 8.0.0-BETA3 through 8.14.0 Description: The issue is due to insecure deserialization of cookie data. If exploited, a threat actor could send a specially crafted cookie containing malicious serialized data, as the SDK...

PT-2025-23653 · Umbraco · Umbraco

Name of the Vulnerable Software and Affected Versions: Umbraco versions 14.0.0 through 15.4.1 Description: The issue allows uploading a file that does not adhere to the configured allowable file extensions via a manipulated API request. The problem is resolved in versions 15.4.2 and 16.0.0...

PT-2025-23607

Name of the Vulnerable Software and Affected Versions Python versions 3.12 through 3.13 Description An issue exists in the tarfile module when extracting untrusted tar archives. When using the TarFile.extractall or TarFile.extract functions with the filter parameter set to data or tar, it is...

PT-2025-23596

Name of the Vulnerable Software and Affected Versions Parallels Desktop for Mac version 20.1.1 55740 Description A privilege escalation issue exists in the virtual machine archive restoration functionality. When an archived virtual machine is restored, the prl vmarchiver tool decompresses the fil...

PT-2025-23504 · Sslh +1 · Sslh +1

Name of the Vulnerable Software and Affected Versions: sslh versions prior to 2.2.4 Description: A resource allocation issue without limits or throttling in sslh allows attackers to exhaust file descriptors, denying service to legitimate users. This issue can be exploited to impact user service...

PT-2025-23526

Name of the Vulnerable Software and Affected Versions xls2csv utility version 0.95 Description A memory corruption issue exists in the Shared String Table Record Parser implementation. This can be triggered by a specially crafted malformed file, leading to a heap buffer overflow. An attacker can...

PT-2025-23553 · Samsung · Samsung Mobile Processor Exynos

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions 1480 and 2400 Description: The issue is related to the lack of a length check, which leads to out-of-bounds writes. This problem was discovered in the Samsung Mobile Processor Exynos. Recommendations:...

PT-2025-23447 · Unknown · Juzawebcms

Name of the Vulnerable Software and Affected Versions: juzaweb CMS versions up to 3.4.2 Description: A critical issue affects the Media Page component, specifically the file /admin-cp/media, leading to improper access controls. The attack can be initiated remotely. The vendor was contacted about...

PT-2025-23479 · Marwal Infotech · Marwal Infotech Cms

Name of the Vulnerable Software and Affected Versions: Marwal Infotech CMS version 1.0 Description: A critical vulnerability was found in Marwal Infotech CMS, affecting unknown code of the file /page.php. The manipulation of the ID argument leads to SQL injection. The attack can be initiated...