Exploit for Improper Restriction of Excessive Authentication Attempts in Fortinet Fortimail

CVE-2022-29056 Exploit Automation Para Fins Educacionais 🚨 📌...

PT-2025-11105 · Softether · Softether Vpn

Name of the Vulnerable Software and Affected Versions: SoftEther VPN version 5.02.5187 Description: The issue is related to a Buffer Overflow in the Internat.c file via the UniToStrForSingleChars function. Recommendations: For SoftEther VPN version 5.02.5187, consider disabling the...

PT-2025-11003 · WordPress · Workreap

Name of the Vulnerable Software and Affected Versions: Workreap plugin for WordPress versions up to, and including, 3.2.5 Description: The issue is due to the plugin not properly validating a user's identity prior to performing a social auto-login or updating their profile details, such as the...

PT-2025-11128

Name of the Vulnerable Software and Affected Versions: ruby-saml versions prior to 1.12.4 and 1.18.0 Description: The issue is related to the ruby-saml library, which provides security assertion markup language SAML single sign-on SSO for Ruby. The library is susceptible to remote Denial of Servi...

PT-2025-11046

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 21.2R3-S9 Juniper Junos OS versions 21.4 before 21.4R3-S10 Juniper Junos OS versions 22.2 before 22.2R3-S6 Juniper Junos OS versions 22.4 before 22.4R3-S6 Juniper Junos OS versions 23.2 before 23.2R2-S3 Junip...

PT-2025-11114

Name of the Vulnerable Software and Affected Versions graphql-ruby versions 1.11.5 through 1.11.7 graphql-ruby versions 1.12.0 through 1.12.24 graphql-ruby versions 1.13.0 through 1.13.23 graphql-ruby versions 2.0.0 through 2.0.31 graphql-ruby versions 2.1.0 through 2.1.13 graphql-ruby versions...

PT-2025-16812 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

CVE-2025-25267

CVE-2025-25267 affects Siemens Tecnomatix Plant Simulation: V2302 (< V2302.0021) and V2404 (

PT-2025-10750 · Mrcms · Mrcms

Name of the Vulnerable Software and Affected Versions: MRCMS version 3.1.2 Description: A critical issue has been discovered that affects the delete function of the /admin/file/delete.do endpoint, specifically within the org.marker.mushroom.controller.FileController component. The manipulation of...

Siemens SCALANCE LPE9403 路径遍历漏洞

Siemens SCALANCE and Siemens SCALANCE LPE9403 are both products of Siemens, Germany.Siemens SCALANCE is a series of Ethernet switches. It connects to Industrial Control System ICS devices, including Programmable Logic Controllers PLCs and Human Machine Interface HMI systems.Siemens SCALANCE LPE94...

SAP S/4HANA 安全漏洞

SAP S/4HANA is an enterprise resource management software based on the SAP HANA in-memory database system from SAP, Germany. A security vulnerability exists in SAP S/4HANA that stems from bypassing a functionality restriction that could result in uploading files to a reverse bank statement...

PT-2025-10777 · Zucchetti · Zucchetti Ad Hoc Infinity

Name of the Vulnerable Software and Affected Versions: Zucchetti Ad Hoc Infinity version 2.4 Description: A Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity allows an authenticated attacker to achieve Remote Code Execution via the "/jsp/home.jsp", "/jsp/gsfr feditorHTML.jsp",...

The vulnerability in the security.php script of the NetAlert X intrusion notification network infrastructure allows a perpetrator to read arbitrary files.

The vulnerability in the security.php script of the NetAlert X intrusion notification network infrastructure is related to an incorrect restriction on the path to the restricted directory, resulting from a lack of authentication. Exploiting this vulnerability allows an attacker to read arbitrary...

PT-2025-10895 · Unknown · Aitangbao Springboot-Manager

Name of the Vulnerable Software and Affected Versions: aitangbao springboot-manager version 3.0 Description: A problematic vulnerability has been found in aitangbao springboot-manager, affecting an unknown part of the file /sys/permission. The manipulation of the name argument leads to cross-site...

CVE-2025-22603 AutoGPT SSRF vulnerability

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Versions prior to autogpt-platform-beta-v0.4.2 contains a server-side request forgery SSRF vulnerability inside component or block Send Web Request. The...

PT-2025-16664

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.0-rc6+ Description A vulnerability in the Linux kernel has been resolved, related to the management of listener transports in the nfsd module. When no active threads are running, a root user using the nfsdct...

The vulnerability of Smartwares CIP-37210AT and C724IP IP cameras’ microprogramming software lies in the improper limitation of the path name to the restricted access directory. This allows intruders to gain unauthorized access to protected information.

The vulnerability of the Microprogrammed Software for Smartwares CIP-37210AT and C724IP cameras is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a intruder to gain unauthorized access to protected information...

PT-2025-17239 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB version 1.8.38 Description: An issue in MyBB allows a remote attacker to obtain sensitive information via the Import a Theme function. The supplier disputes this due to the allowed actions of Board administrators and SSRF mitigation...

com.xwiki.confluencepro:application-confluence-migrator-pro-ui's application homepage is public

Impact The homepage of the application is public which enables a guest to download the package which might contain sensitive information. Patches 1.11.7 Workarounds The access to the page can be manually restricted to a specific set of users or groups...

PT-2025-10037 · Unknown · Insurance Management System

Name of the Vulnerable Software and Affected Versions: projectworlds Life Insurance Management System version 1.0 Description: A critical vulnerability was found in the projectworlds Life Insurance Management System. This issue affects an unknown part of the file /editAgent.php. The manipulation ...