PT-2025-27959

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A null pointer dereference issue has been identified in the Linux kernel when acquiring the remote IP of an Ethernet bearer. The issue can be reproduced by creating a tun interface...

OpenNext for Cloudflare (opennextjs-cloudflare) has a SSRF vulnerability via /_next/image endpoint

A Server-Side Request Forgery SSRF vulnerability was identified in the @opennextjs/cloudflare package. The vulnerability stems from an unimplemented feature in the Cloudflare adapter for Open Next, which allowed unauthenticated users to proxy arbitrary remote content via the /next/image endpoint...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Tracing: Do not allow mmap of persistent ring buffers. When attempting to mmap a trace instance buffer that is attached to reservemem, it would cause a crash: BUG: Unable to handle a page fault for address: ffffe97bd00025c8 PF:...

PT-2025-26494 · Totolink · Totolink N300Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N300RH version 6.1c.1390 B20191101 Description: A critical issue was found in the HTTP POST Message Handler of the TOTOLINK N300RH, affecting some unknown functionality of the file /boafrm/formPortFw. The manipulation of the service...

PT-2025-25582 · Unknown · Projectworlds Life Insurance Management System

Name of the Vulnerable Software and Affected Versions: Projectworlds Life Insurance Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /insertClient.php. The manipulation of the client id argument leads to SQL injection. It i...

PT-2025-25583 · Unknown · Projectworlds Life Insurance Management System

Name of the Vulnerable Software and Affected Versions: Projectworlds Life Insurance Management System version 1.0 Description: A critical issue has been identified, affecting the /insertNominee.php file. The client id and nominee id arguments are vulnerable to SQL injection. This issue can be...

PT-2025-25517 · Unknown · Wukongopensource Wukongcrm

Name of the Vulnerable Software and Affected Versions: WuKongOpenSource WukongCRM version 9.0 Description: A vulnerability was found in the processing of the file AdminRoleController.java, leading to cross-site request forgery. The attack may be initiated remotely. Recommendations: For version 9....

PT-2025-25557 · Liferay +1 · Liferay Portal +2

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.0.0 through 7.4.3.4 Liferay DXP versions 7.4 GA, 7.3 GA through update 34 Description: A path traversal vulnerability exists with the downloading and installation of Xuggler, allowing remote attackers to add files to...

PT-2025-25578 · Unknown · Chanjet Crm

Name of the Vulnerable Software and Affected Versions: Chanjet CRM version 1.0 Description: A critical vulnerability has been found in Chanjet CRM, affecting an unknown functionality of the file /sysconfig/departmentsetting.php. The manipulation of the gblOrgID argument leads to SQL injection. Th...

PT-2025-25532 · Nosto · Nosto

Name of the Vulnerable Software and Affected Versions: Nosto affected versions not specified Description: A Reflected Cross-Site Scripting XSS issue exists in the /pages/search-results-page endpoint of Nosto. This allows remote attackers to execute arbitrary code via the q GET request parameter...

PT-2025-25523 · Javahongxi · Whatsmars

Name of the Vulnerable Software and Affected Versions: javahongxi whatsmars version 2021.4.0 Description: A problem has been found that affects the initialize function of the file...

PT-2025-25525 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14408 Description: A critical vulnerability has been found in Tenda FH1201. This affects an unknown part of the file /goform/SafeMacFilter. The manipulation of the page argument leads to a stack-based buffer overflo...

PT-2025-25518 · Comfyui · Comfyui

Name of the Vulnerable Software and Affected Versions: comfyanonymous comfyui version 0.3.40 Description: A vulnerability was found in the function set attr of the file /comfy/utils.py, which can lead to dynamically-determined object attributes. The attack can be launched remotely, but it has a...

PT-2025-25584 · Unknown · Projectworlds Life Insurance Management System

Name of the Vulnerable Software and Affected Versions: Projectworlds Life Insurance Management System version 1.0 Description: A critical issue affects the processing of the file "/insertPayment.php". The manipulation of the argument recipt no leads to SQL injection. The attack may be initiated...

PT-2025-25542 · Unknown · Parking Management System

Name of the Vulnerable Software and Affected Versions: Das Parking Management System version 6.2.0 Description: A critical issue was found in the API component of the system, specifically affecting the /Reservations/Search file. The manipulation of the Value argument leads to SQL injection. This...

PT-2025-25533 · Unknown · Customer Support System

Name of the Vulnerable Software and Affected Versions: Customer Support System version 1.0 Description: This issue allows an authenticated attacker to retrieve, create, update, and delete databases via the id parameter in the "/customer support/manage user.php" endpoint. Recommendations: For...

PT-2025-26493 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical vulnerability was found in the HTTP POST Request Handler component of TOTOLINK X15. The issue affects an unknown function of the file /boafrm/formIPv6Addr. The manipulation of...

PT-2025-25552 · Unknown · Code-Projects Restaurant Order System

Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Order System version 1.0 Description: A critical vulnerability was found in the code-projects Restaurant Order System. This issue affects an unknown part of the file /table.php. The manipulation of the ID argument lea...

PT-2025-25593

Name of the Vulnerable Software and Affected Versions GNU ncurses versions up to 6.5-20250322 Description A stack-based buffer overflow issue has been identified, affecting the postprocess termcap function in the tinfo/parse entry.c file. This issue can be exploited locally. Recommendations For G...

PT-2025-25543 · Unknown · Parking Management System

Name of the Vulnerable Software and Affected Versions: Das Parking Management System versions 6.2.0 Description: A critical issue affects the /vehicle/search API endpoint of the component, where manipulation of the vehicleTypeCode argument leads to SQL injection. The attack can be initiated...