PT-2025-15366 · Sap · Sap Kmc Wpc

Name of the Vulnerable Software and Affected Versions: SAP KMC WPC affected versions not specified Description: The issue allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query, potentially exposing sensitive information and causing low impact on the...

PT-2025-15382 · WordPress · 3Dprint Lite

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite plugin for WordPress versions up to, and including, 2.1.3.6 Description: The issue arises from insufficient escaping on the user-supplied material text parameter and lack of sufficient preparation on the existing SQL query, makin...

PT-2025-15547 · Microsoft · Azure Local

Name of the Vulnerable Software and Affected Versions: Azure Local affected versions not specified Description: The issue is related to improper input validation in Azure Local, which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no...

PT-2025-15583 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to improper access control in Visual Studio, allowing an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no informatio...

PT-2025-15501 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue concerns sensitive data storage in improperly locked memory, allowing an authorized attacker to elevate privileges locally. This elevation-of-privilege vulnerability can be...

PT-2025-15578 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft Office SharePoint affected versions not specified Description: The issue allows an authorized attacker to execute code over a network by deserializing untrusted data. This enables remote attackers to execute arbitrary code and affec...

PT-2025-15176 · Mediatek · Mt7915 +6

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: In the wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote information disclosure with no additional execution privileges neede...

PT-2025-20419 · Totolink · Totolink A3100R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3100R version 5.9c.1527 Description: The issue is related to a Buffer Overflow that can be triggered via the priority parameter in the setMacQos interface of /lib/cste modules/firewall.so. This can be accessed through the API endpoi...

PT-2025-16585 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue affects the SIZE Command Handler component, leading to a buffer overflow. This can be exploited remotely. Recommendations: For PCMan FTP Server version 2.0.7, consider disabling the...

PT-2025-16897 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been discovered, affecting the STATUS Command Handler component. This issue leads to a buffer overflow and can be initiated remotely. The exploit details have been publicly...

PT-2025-15137 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/menu update.php. The manipulation of the menu argument leads to SQL...

PT-2025-15128 · Iteaj · Iteaj Iboot

Name of the Vulnerable Software and Affected Versions: iteaj iboot 物联网网关 version 1.1.3 Description: A issue was found in the File Upload component, affecting the processing of the file /common/upload/batch. The manipulation of the File argument leads to cross-site scripting. The attack may be...

PT-2025-15272 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been identified in the CONF Command Handler component of the affected software, leading to a buffer overflow. This can be exploited remotely. Recommendations: For PCMan FTP Serv...

PT-2025-20417 · Totolink · Totolink A3100R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3100R version 5.9c.1527 Description: The issue is related to a Buffer Overflow that can be triggered via the comment parameter in the setMacFilterRules function. This allows for potential exploitation. Recommendations: For TOTOLINK...

PT-2025-15443 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: A local code execution issue exists due to an uninitialized pointer, resulting from improper validation of user-supplied data. This allows a threat actor to disclose...

PT-2025-15243 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the jobId parameter. Recommendations: For RUoYi version 4.8.0, consider restricting access to the jobId parameter to minimize the risk of...

PT-2025-16883 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue affects the MDTM Command Handler component of PCMan FTP Server, leading to a buffer overflow. The manipulation can be initiated remotely. The exploit has been disclosed to the publi...

PT-2025-15115 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical issue was found in the codeprojects Online Restaurant Management System. The vulnerability affects an unknown functionality of the file /admin/combo.php. The...

PT-2025-18022 · Totolink · Totolink N150Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical vulnerability was found in the TOTOLINK N150RT, affecting an unknown functionality of the file /boafrm/formStaticDHCP. The manipulation of the Hostname argument leads to a buffer...

PT-2025-18021 · Totolink · Totolink N150Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical vulnerability has been found in the TOTOLINK N150RT router. The issue affects an unknown function of the file /boafrm/formPortFw. The manipulation of the service type argument...