PT-2025-17425 · Gobgp +4 · Gobgp +4

Name of the Vulnerable Software and Affected Versions: GoBGP versions prior to 3.35.0 Description: An issue was discovered that allows attackers to cause a panic via a zero value for softwareVersionLen. Recommendations: For versions prior to 3.35.0, update to version 3.35.0 or later to resolve th...

PT-2025-22357

Name of the Vulnerable Software and Affected Versions FW-WGS-804HPT version 1.305b241111 Description A stack overflow issue was discovered through the ownekey parameter in the web rmon alarm post rmon alarm function. This issue allows for potential exploitation. Recommendations For FW-WGS-804HPT...

PT-2025-17423 · Libheif +1 · Libheif +1

Name of the Vulnerable Software and Affected Versions: libheif versions prior to 1.19.6 Description: The issue is caused by a NULL pointer dereference in ImageItem Grid::get decoder in image-items/grid.cc, which occurs when a grid image references a nonexistent image item. Recommendations: For...

PT-2025-17398 · Unknown · Gnu Mailman

Name of the Vulnerable Software and Affected Versions: GNU Mailman version 2.1.39 Description: The issue allows unauthenticated attackers to execute arbitrary OS commands via shell metacharacters in an email Subject line. This occurs in certain external archiver configurations. Recommendations: F...

PT-2025-17366 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a command injection problem. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

PT-2025-17320 · Alkacon · Alkacon Opencms

Name of the Vulnerable Software and Affected Versions: Alkacon OpenCMS version 17.0 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function...

PT-2025-17326 · Worldcast Systems · Worldcast Systems Ecreso Fm/Dab/Tv Transmitter

Name of the Vulnerable Software and Affected Versions: WorldCast Systems ECRESO FM/DAB/TV Transmitter version 1.10.1 Description: The issue allows authenticated attackers to escalate privileges via a crafted JSON payload. Recommendations: For WorldCast Systems ECRESO FM/DAB/TV Transmitter version...

PT-2025-21031 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: A buffer overflow issue was discovered via the dnsaddr parameter in the "formDhcpv6s" interface. Recommendations: For TOTOLINK A3002R version 4.0.0-B20230531.1404, avoid using the...

PT-2025-17347

Name of the Vulnerable Software and Affected Versions PHPGurukul Men Salon Management System version 1.0 Description A critical issue has been discovered, affecting an unknown part of the file /admin/contact-us.php. The manipulation of the arguments pagetitle, pagedes, email, mobnumber, and timin...

PT-2025-17328

Name of the Vulnerable Software and Affected Versions DAEnetIP4 METO version 1.25 Description The issue is related to improper session management in the "/login ok.htm" endpoint, which allows attackers to execute a session hijacking attack. Recommendations For DAEnetIP4 METO version 1.25, conside...

PT-2025-17259 · WordPress · Mappress Maps

Name of the Vulnerable Software and Affected Versions: MapPress Maps for WordPress versions prior to 2.94.10 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, f...

PT-2025-17325 · Nautel · Nautel Vx Series

Name of the Vulnerable Software and Affected Versions: Nautel VX Series transmitters VX SW versions 6.4.0 and below Description: The issue is related to a remote code execution RCE vulnerability in the firmware update process. This allows attackers to execute arbitrary code by supplying a crafted...

PT-2025-17334

Name of the Vulnerable Software and Affected Versions NodeBB versions prior to 4.0.5 Description A Cross-Site Scripting XSS issue allows remote attackers to store arbitrary code in the admin API Access token generator. This could potentially lead to the execution of malicious code. Recommendation...

PT-2025-22307 · Unknown · Fw-Wgs-804Hpt

Name of the Vulnerable Software and Affected Versions: FW-WGS-804HPT version 1.305b241111 Description: A stack overflow issue was discovered via the theauthName parameter in the web aaa loginAuthlistEdit function. Recommendations: For FW-WGS-804HPT version 1.305b241111, consider disabling the web...

PT-2025-17305 · Totolink · Totolink X18

Name of the Vulnerable Software and Affected Versions: TOTOLINK X18 version 9.1.0cu.2024 B20220329 Description: The issue concerns an unauthorized arbitrary command execution in the enable parameter of the sub 41105C function of cstecgi.cgi. Recommendations: For TOTOLINK X18 version 9.1.0cu.2024...

PT-2025-17281 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.23 Linux kernel versions prior to 6.13.11 Linux kernel versions prior to 6.14.2 Description: A potential out-of-bounds stack read issue exists due to the iteration code in nvmet ctrl state show accessing th...

PT-2025-17292 · Ibm · Ibm Sterling Connect:Direct Web Services

Name of the Vulnerable Software and Affected Versions: IBM Sterling Connect:Direct Web Services versions 6.1.0 through 6.3.0 Description: The issue arises because the system does not invalidate a session after a browser closure, which could allow an authenticated user to impersonate another user ...

PT-2025-17133 · Sajjad Aslani · Awsa Shipping

Name of the Vulnerable Software and Affected Versions: Sajjad Aslani AWSA Shipping versions 1.3.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

PT-2025-17211 · Unknown · Think Router Tk-Rt-Wr135G

Name of the Vulnerable Software and Affected Versions: Think Router Tk-Rt-Wr135G version 3.0.2-X000 Description: The issue allows attackers to bypass authentication via a crafted cookie. Recommendations: For Think Router Tk-Rt-Wr135G version 3.0.2-X000, as a temporary workaround, consider...

PT-2025-17222 · Unknown · Dietiqa App

Name of the Vulnerable Software and Affected Versions: Dietiqa App version 1.0.20 Description: A SQL Injection issue exists in the u parameter of the "progress-body-weight.php" endpoint. Recommendations: For Dietiqa App version 1.0.20, avoid using the u parameter in the "progress-body-weight.php"...