Adobe ColdFusion 路径遍历漏洞

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from a path traversal vulnerability that originates from an improperly...

PT-2025-23257 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: FreeScout is a free self-hosted help desk and shared mailbox. The issue arises when creating a translation of a phrase that appears in a flash-message after a completed action, allowing the...

PT-2025-20995 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver versions prior to the fixed version Description: The issue is related to a use-after-free flaw in the Windows Common Log File System Driver, which allows an authorized attacker to elevate privileges...

PT-2025-20974

Name of the Vulnerable Software and Affected Versions: Web Threat Defense versions prior to May 2025 update Description: The issue is an out-of-bounds read in Web Threat Defense WTD.sys that allows an unauthorized attacker to deny service over a network. This can be exploited by remote attackers ...

PT-2025-20863 · Unknown · Apogee Pxc+Talon Tc Series

Name of the Vulnerable Software and Affected Versions: APOGEE PXC+TALON TC Series BACnet All versions Description: A vulnerability has been identified that could allow an attacker residing in the same BACnet network to send a specially crafted message, resulting in a partial denial of service...

PT-2025-20879 · Unknown · Domainspro

Name of the Vulnerable Software and Affected Versions: DomainsPRO version 1.2 Description: The issue is an SQL injection vulnerability that could allow an attacker to retrieve, create, update, and delete databases. This is achieved via the d parameter in the "/article.php" endpoint...

PT-2025-15: Kiosk restriction bypass in RED OS

The vulnerability was identified in RedOS, versions 7.3.5-20241106.3. The discovered vulnerability in the RedOS kiosk utility due to incorrect restrictions. Exploitation of the vulnerability may allow an attacker to execute arbitrary commands on the system outside the imposed restrictions...

ALSA-2025:7512 Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat CVE-2024-8176 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to th...

CVE-2024-36292: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions for some IntelR Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial of service via local access...

[ASA-202505-1] screen: multiple issues

Arch Linux Security Advisory ASA-202505-1 ========================================= Severity: High Date : 2025-05-13 CVE-ID : CVE-2025-23395 CVE-2025-46802 CVE-2025-46803 CVE-2025-46804 CVE-2025-46805 Package : screen Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-28...

Improper URL Parsing

Browser-Use is vulnerable to Improper URL parsing. The vulnerability is due to mishandled handling of alloweddomains when userinfo is included in the authority component within the isurlallowed method, which allows attackers to bypass domain restrictions...

PT-2025-20801 · Kanboard · Kanboard

Name of the Vulnerable Software and Affected Versions: Kanboard versions 1.2.26 through 1.2.44 Description: The issue is a Stored Cross-Site Scripting XSS vulnerability in the name parameter of the "http://localhost/?controller=ProjectCreationController&action=create" form. This allows attackers ...

PT-2025-20707 · Vvveb Cms · Vvveb Cms

Name of the Vulnerable Software and Affected Versions: vvveb CMS version 1.0.6 Description: An issue in vvveb CMS allows a remote attacker to execute arbitrary code via the Plugin mechanism. Recommendations: For vvveb CMS version 1.0.6, consider disabling the Plugin mechanism until a patch is...

CVE-2025-31246: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6. Connecting to a malicious AFP server may corrupt kernel memory...

PT-2025-20676 · Unknown · Phpgurukul Apartment Visitors Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Apartment Visitors Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /admin/bwdates-passreports-details.php. The manipulation of the fromdate and todate...

PT-2025-20688 · Asio3.Sys · Asio3.Sys

Name of the Vulnerable Software and Affected Versions: ASUS Armoury Crate versions V6.1.13 and earlier Description: A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, which may lead to a system crash BSOD or other...

PT-2025-20708 · Unknown · Engineercms

Name of the Vulnerable Software and Affected Versions: EngineerCMS versions 1.02 through 2.0.5 Description: The issue is a SQL injection vulnerability in the "/project/addprojtemplet" interface. This vulnerability allows for the injection of malicious SQL code, potentially leading to unauthorized...

PT-2025-20675 · Unknown · Phpgurukul Apartment Visitors Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Apartment Visitors Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /admin/bwdates-reports-details.php. The manipulation of the fromdate and todat...

PT-2025-20674 · Unknown · Continew Admin

Name of the Vulnerable Software and Affected Versions: ContiNew Admin versions up to 3.6.0 Description: A vulnerability has been found in ContiNew Admin, allowing for unverified password change. The issue affects an unknown functionality of the file "/dev-api/system/user/1/password". This can be...

PT-2025-20671 · Unknown · Campcodes Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Food Ordering System version 1.0 Description: A critical issue was found in the system, affecting the file /routers/register-router.php. The manipulation of the Name argument leads to SQL injection. This issue can be exploite...