PT-2025-21222 · Dlib · Dlib

Name of the Vulnerable Software and Affected Versions: dlib versions prior to 19.24.7 Description: The issue allows remote attackers to cause a denial of service via a crafted file. This is a Divide By Zero vulnerability. Recommendations: For versions prior to 19.24.7, update to version 19.24.7 o...

PT-2025-21225 · Unknown +1 · Pointcloudlibrary +1

Name of the Vulnerable Software and Affected Versions: PointCloudLibrary versions prior to 1.14.0 Description: The issue is an Out-of-bounds Write vulnerability in PointCloudLibrary, allowing Overflow Buffers due to a zlib issue. This vulnerability is relevant for versions older than 1.14.0 or if...

PT-2025-21916 · V-Sft · V-Sft

Name of the Vulnerable Software and Affected Versions: V-SFT versions 6.2.5.0 and earlier Description: The issue is related to an out-of-bounds write in the VS6EditData!CDataRomErrorCheck::MacroCommandCheck function. Opening specially crafted V7 or V8 files may lead to a crash, information...

PT-2025-21918 · V-Sft · V-Sft

Name of the Vulnerable Software and Affected Versions: V-SFT versions 6.2.5.0 and earlier Description: The issue is related to an out-of-bounds read in the VS6EditData!CDrawSLine::GetRectArea function. Opening specially crafted V7 or V8 files may lead to a crash, information disclosure, and...

PT-2025-21139 · Lf Edge · Ekuiper

Name of the Vulnerable Software and Affected Versions: LF Edge eKuiper versions prior to 2.1.0 Description: LF Edge eKuiper is a lightweight internet of things IoT data analytics and stream processing engine. A user with rights to modify the service, such as the kuiperUser role, can inject a...

CVE-2024-48869

Improper restriction of software interfaces to hardware features for some IntelR XeonR 6 processor with E-cores when using IntelR Trust Domain Extensions IntelR TDX or IntelR Software Guard Extensions IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local...

CVE-2025-4632

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority...

PT-2025-20871 · Siemens · Scalance Lpe9403

Name of the Vulnerable Software and Affected Versions: SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions Description: A vulnerability has been identified where affected devices do not properly validate incoming Profinet packets. An unauthenticated remote attacker can exploit this flaw by sending a...

PT-2025-20913 · Unknown · Engineercms

Name of the Vulnerable Software and Affected Versions: EngineerCMS versions 1.02 through 2.0.5 Description: The issue is a SQL injection vulnerability in the "/project/addproject" interface. This vulnerability allows for the injection of malicious SQL code, potentially leading to unauthorized...

PT-2025-20923 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: A command injection issue was discovered via the FUN 00459fdc function. This allows for potential exploitation. Recommendations: For TOTOLINK A3002R version 4.0.0-B20230531.1404,...

PT-2025-20879 · Unknown · Domainspro

Name of the Vulnerable Software and Affected Versions: DomainsPRO version 1.2 Description: The issue is an SQL injection vulnerability that could allow an attacker to retrieve, create, update, and delete databases. This is achieved via the d parameter in the "/article.php" endpoint...

PT-2025-21035 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Substance3D - Stager versions 3.1.1 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

PT-2025-23255 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: FreeScout is a free self-hosted help desk and shared mailbox. The application is vulnerable to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input...

Adobe ColdFusion 路径遍历漏洞

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from a path traversal vulnerability that originates from an improperly...

PT-2025-23178 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: The application incorrectly checks user access rights for conversations. Users with show only assigned conversations enabled can assign themselves to an arbitrary conversation from the mailbox ...

PT-2025-20995 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver versions prior to the fixed version Description: The issue is related to a use-after-free flaw in the Windows Common Log File System Driver, which allows an authorized attacker to elevate privileges...

PT-2025-20863 · Unknown · Apogee Pxc+Talon Tc Series

Name of the Vulnerable Software and Affected Versions: APOGEE PXC+TALON TC Series BACnet All versions Description: A vulnerability has been identified that could allow an attacker residing in the same BACnet network to send a specially crafted message, resulting in a partial denial of service...

PT-2025-20974

Name of the Vulnerable Software and Affected Versions: Web Threat Defense versions prior to May 2025 update Description: The issue is an out-of-bounds read in Web Threat Defense WTD.sys that allows an unauthorized attacker to deny service over a network. This can be exploited by remote attackers ...

PT-2025-23173 · Apache +1 · Apache Web Server +1

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.179 Description: The issue concerns insufficient checking of files uploaded to the application, allowing files with phtml and phar extensions to be uploaded. This can lead to remote code execution if the Apache...

PT-2025-21085 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.100 Description: The issue is related to a use after free condition that may allow an unauthenticated user to potentially enable denial of service via adjacent access. This...