PT-2025-11185 · Celk Sistemas · Celk Saude

Name of the Vulnerable Software and Affected Versions: Celk Sistemas Celk Saude version 3.1.252.1 Description: The issue concerns user enumeration via discrepancies in error messages in the password recovery functionality, allowing a remote attacker to enumerate users through different responses...

PT-2025-11216 · Microsoft · Dataverse

Name of the Vulnerable Software and Affected Versions: Microsoft Dataverse affected versions not specified Description: Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information about ...

PT-2025-11105 · Softether · Softether Vpn

Name of the Vulnerable Software and Affected Versions: SoftEther VPN version 5.02.5187 Description: The issue is related to a Buffer Overflow in the Internat.c file via the UniToStrForSingleChars function. Recommendations: For SoftEther VPN version 5.02.5187, consider disabling the...

PT-2025-10757 · Mrcms · Mrcms

Name of the Vulnerable Software and Affected Versions: MRCMS version 3.1.2 Description: A vulnerability was found in the function upload of the file "/admin/file/upload.do" of the component org.marker.mushroom.controller.FileController. The manipulation of the argument path leads to cross-site...

PT-2025-10800 · Microsoft · Windows Remote Desktop Services +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services affected versions not specified Windows Server 2019 version 10.0.17763.0 Description: The issue is related to sensitive data storage in improperly locked memory in Windows Remote Desktop Services, allowing an...

PT-2025-10923 · Unknown · Shanebp Bp Email Assign Templates

Name of the Vulnerable Software and Affected Versions: shanebp BP Email Assign Templates versions n/a through 1.6 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...

PT-2025-10700 · Libzvbi +5 · Libzvbi +5

Name of the Vulnerable Software and Affected Versions: libzvbi versions 0.2.43 and earlier Description: A problem has been found in the function vbi strndup iconv ucs2 of the file src/conv.c. The manipulation of the argument src length leads to an uninitialized pointer. It is possible to launch t...

CVE-2025-26865

CVE-2025-26865 affects Apache OFBiz 18.12.17 through 18.12.18, due to improper neutralization of special elements in the template engine. It's a regression between 18.12.17 (safe) and 18.12.18 (patched). Affected component is the template engine in OFBiz; Red Hat, CNVD, OSV, NVD, and CVE lists de...

PT-2025-10455 · Joomlaux · Joomlaux Jux Real Estate

Name of the Vulnerable Software and Affected Versions: JoomlaUX JUX Real Estate version 3.4.0 Description: A problematic issue was found in the software, affecting an unknown function of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties. The manipulation of the...

PT-2025-10459 · Unknown +1 · Hoteldruid +1

Name of the Vulnerable Software and Affected Versions: HotelDruid versions 3.0.7 and earlier Description: The issue allows users to set weak passwords due to the lack of enforcement of password strength policies. Recommendations: For HotelDruid versions 3.0.7 and earlier, consider implementing a...

PT-2025-9955 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the drm/i915 component, where the intel display is grabbed from the encoder to avoid potential problems...

PT-2025-9899 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.26.71 Description: The issue is related to an out-of-bounds read in the parsing of wbmp images. This allows local attackers to access out-of-bounds memory. Recommendations: For versions prior to 4.4.26.71,...

PT-2025-10001 · Unknown · Code-Projects Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank Management System version 1.0 Description: A critical issue affects the processing of the file /upload/, leading to exposure of information through directory listing. This can be initiated remotely. Recommendations: F...

PT-2025-9995 · Unknown · Code-Projects Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank Management System version 1.0 Description: A critical issue has been discovered, affecting the /user dashboard/delete requester.php file. The manipulation of the requester id argument leads to SQL injection. This issu...

Linux Distros Unpatched Vulnerability : CVE-2023-5345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in...

PT-2025-9871 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform version 2.0 Description: The issue is related to Cross Site Scripting XSS in the Create assignment function, allowing attackers to execute malicious scripts in the context of other users. Recommendations: For Unifiedtransform...

PT-2025-9848

Name of the Vulnerable Software and Affected Versions Laravel versions prior to 11.44.1 Laravel versions prior to 12.1.1 Description Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could...

Linux Distros Unpatched Vulnerability : CVE-2021-22573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's payload comes from...

PT-2025-9684 · Unknown · Xxyopen Novel-Plus

Name of the Vulnerable Software and Affected Versions: xxyopen novel plus versions prior to 4.4.0 Description: The issue allows a remote attacker to execute arbitrary code via the PageController.java file. Recommendations: For versions prior to 4.4.0, update to a version that contains a fix for...

PT-2025-9162 · WordPress · Authors List

Name of the Vulnerable Software and Affected Versions: The Authors List plugin for WordPress versions up to and including 2.0.6 Description: The issue arises from the software's failure to properly validate a value before executing the do shortcode action, allowing unauthenticated attackers to...