PT-2025-20992 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft Office SharePoint affected versions not specified Description: The issue concerns the deserialization of untrusted data in Microsoft Office SharePoint, allowing an unauthorized attacker to execute code locally. This enables remote...

PT-2025-20872 · Siemens · Scalance Lpe9403

Name of the Vulnerable Software and Affected Versions: SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions Description: A vulnerability has been identified where affected devices do not properly validate incoming Profinet packets. An unauthenticated remote attacker can exploit this flaw by sending a...

PT-2025-23179 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: The system does not provide a check on which clients an authorized user can view and edit. As a result, an authorized user without access to existing mailboxes or conversations can view and edi...

PT-2025-21004 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio versions prior to 17.13.3 Description: The issue is related to improper neutralization of special elements used in a command, allowing an unauthorized attacker to execute code locally. This is a command injection vulnerability i...

PT-2025-20910 · Owl-Admin · Owladmin

Name of the Vulnerable Software and Affected Versions: owl-admin versions 3.2.2 through 4.10.2 Description: The issue is related to SQL Injection in the "/admin-api/system/admin menus/save order" API endpoint. Recommendations: For versions 3.2.2 through 4.10.2, consider disabling access to the...

PT-2025-21101 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.100 Description: The issue is a stack-based buffer overflow that may allow a privileged user to potentially enable denial of service via local access. This could impact a...

PT-2025-20952 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in Windows Installer. This allows an authorized attacker to disclose informati...

PT-2025-20776 · Apple · Ipados +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.5 iPadOS versions prior to 18.5 Description: A logic issue was addressed with improved checks. An attacker with physical access to a device may be able to access a deleted call recording. Recommendations: For iOS...

PT-2025-20694 · Unknown · Abantecart

Name of the Vulnerable Software and Affected Versions: AbanteCart version 1.4.0 Description: A Reflected Cross-Site Scripting XSS issue allows an attacker to execute JavaScript code in a victim's browser by sending a malicious URL. This can be exploited to steal sensitive user data, such as sessi...

PT-2025-20799 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.5 Description: The issue was addressed with improved input sanitization. An app may be able to gain elevated privileges. Recommendations: For versions prior to 15.5, update to macOS Sequoia 15.5 to resolve the issue...

PT-2025-20704 · Sudo-Rs · Sudo-Rs

Name of the Vulnerable Software and Affected Versions: sudo-rs versions prior to 0.2.6 Description: The issue allows users with limited sudo privileges to enumerate the sudoers file, revealing sensitive information about other users' permissions. This can be achieved using the -U flag. Attackers...

PT-2025-20727 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version V15.03.06.46 Description: The issue is related to a Buffer Overflow in the formSetPPTPUserList handler. This occurs via the list POST parameter. Recommendations: For Tenda AC10 version V15.03.06.46, as a temporary workaroun...

PT-2025-20728 · Flytxt · Flytxt Neon-Dx

Name of the Vulnerable Software and Affected Versions: Flytxt NEON-dX version 0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c Description: The issue concerns the userId parameter in the change password function, allowing attackers to execute brute force attacks to discover user passwords. This could potential...

PT-2025-20802 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the username parameter of the "loginCheck.php" resource does not validate the characters received and they are...

PT-2025-20664 · Unknown · Freeebird Hotel

Name of the Vulnerable Software and Affected Versions: Freeebird Hotel 酒店管理系统 API versions up to 1.2 Description: A problematic issue has been found in the API, affecting some unknown functionality of the file /src/main/java/cn/mafangui/hotel/tool/SessionInterceptor.java. This leads to a permissi...

PT-2025-20607 · Totolink · Totolink T10 +6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R versions 4.1.8cu.5241 B20210927 Description: A critical vulnerability exists in the CloudACMunualUpdate function of the /cgi-bin/cstecgi.cgi file in the affected devices. The...

PT-2025-20484 · Unknown · Imithemes Listing

Name of the Vulnerable Software and Affected Versions: IMITHEMES Listing plugin versions up to, and including, 3.3 Description: The issue is related to privilege escalation via account takeover. This is due to the plugin not properly validating a verification code value prior to updating a user's...

PT-2025-20547 · Unknown · Code-Projects Departmental Store Management System

Name of the Vulnerable Software and Affected Versions: code-projects Departmental Store Management System version 1.0 Description: A critical issue was found in the function bill. The manipulation of the Item Code argument leads to a stack-based buffer overflow. This issue can be exploited locall...

PT-2025-20459 · Unknown · Project Worlds Car Rental Project

Name of the Vulnerable Software and Affected Versions: Project Worlds Car Rental Project version 1.0 Description: A critical vulnerability has been found in the Project Worlds Car Rental Project. The issue affects an unknown function of the file /signup.php. The manipulation of the fname argument...

PT-2025-24424 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior Description: The issue is related to authenticated SQL injection in the alerts module. Recommendations: For versions 8510 and prior, consider disabling the alerts module until a patch...