PT-2025-20991 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel versions 2016 through 2024 Microsoft Office Excel version 365 Description: The issue is an out-of-bounds read in Microsoft Office Excel, allowing an unauthorized attacker to execute code locally. This can enable remote...

PT-2025-20918 · Unknown · Upset-Gal-Web

Name of the Vulnerable Software and Affected Versions: upset-gal-web version 7.1.0 Description: The issue concerns an arbitrary file read. It affects the /api/music/v1/cover.ts endpoint. Recommendations: For version 7.1.0, consider restricting access to the /api/music/v1/cover.ts endpoint until a...

PT-2025-21082 · Intel · Intel Graphics

Name of the Vulnerable Software and Affected Versions: IntelR Graphics software affected versions not specified Description: The issue is related to improper access control in some IntelR Graphics software, which may allow an authenticated user to potentially enable denial of service via local...

PT-2025-20838 · WordPress · Frontend Dashboard

Name of the Vulnerable Software and Affected Versions: Frontend Dashboard plugin for WordPress versions 1.0 through 2.2.7 Description: The issue is related to a missing capability check on the fed admin setting form function function. This allows authenticated attackers with Subscriber-level acce...

PT-2025-21043 · Adobe · Connect

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 12.8 and earlier Description: A stored Cross-Site Scripting XSS issue affects Adobe Connect, allowing a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim browses to the page...

PT-2025-21119

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged...

PT-2025-21127

Name of the Vulnerable Software and Affected Versions: .NET versions prior to the fixed version Visual Studio affected versions not specified Build Tools for Visual Studio affected versions not specified Description: The issue allows an authorized attacker to perform spoofing over a network due t...

PT-2025-23250 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.178 Description: The issue is related to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input data in the conversation POST data body. Recommendations: For versions...

PT-2025-23067

Name of the Vulnerable Software and Affected Versions Fortinet FortiClientWindows versions 7.2.0 through 7.2.1 Description The issue allows an unauthorized remote attacker to view application information by navigating to a hosted webpage, if Windows is configured to accept incoming connections to...

PT-2025-20820 · Sap Se · Sap S/4Hana Hcm Portugal/Sap Erp Hcm Portugal

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a missing authorization check, allowing an unauthorized user to view the files of other companies. This could lead to the disclosure of personal data of employees...

PT-2025-20829 · Gnu · Gnu Screen

Name of the Vulnerable Software and Affected Versions: Screen versions 5.0.0 Description: The issue is related to the logfile reopen function in the GNU screen terminal multiplexer. When Screen runs with setuid-root privileges, it does not drop privileges while operating on a user-supplied path...

PT-2025-25203 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 10.7.x through 10.7.1 Mattermost versions 10.6.x through 10.6.3 Mattermost versions 10.5.x through 10.5.4 Mattermost versions 9.11.x through 9.11.13 Description: The issue is related to the improper validation of LDAP grou...

PT-2025-20762 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 Description: Processing web content may lead to a denial-of-service. The issue was addressed with improved UI. Recommendations: For iPadOS versions prior...

PT-2025-20660 · Unknown · Kkfileview

Name of the Vulnerable Software and Affected Versions: kkFileView version 4.4.0 Description: A critical issue affects an unknown part of the file /fileUpload. The manipulation of the File argument leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been...

PT-2025-20656 · Sungrow · Sungrow Logger1000

Name of the Vulnerable Software and Affected Versions: SunGrow Logger1000 version 01 A Description: A problematic issue has been found in the software, affecting some unknown processing. The manipulation leads to weak password requirements. The attack may be initiated remotely. The complexity of ...

PT-2025-20623 · Unknown · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Hospital Management System version 1.0 Description: A critical vulnerability was found in the Simple Hospital Management System. The issue affects the Add function of the Add Information component. Manipulation of the...

PT-2025-20615 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco ASA affected versions not specified Description: The issue concerns a bypass of SSL/TLS certificate pinning. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

PT-2025-20631 · Unknown · Phpgurukul Apartment Visitors Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Apartment Visitors Management System version 1.0 Description: A critical issue has been found in the PHPGurukul Apartment Visitors Management System. The vulnerability affects an unknown functionality of the file /category.php...

PT-2025-20619 · WordPress · The Wordpress Review Plugin

Name of the Vulnerable Software and Affected Versions: The WordPress Review Plugin: The Ultimate Solution for Building a Review Website versions up to, and including, 5.3.5 Description: The WordPress Review Plugin is vulnerable to Local File Inclusion, allowing authenticated attackers with...

PT-2025-20624 · Code Projects · Code-Projects Hotel Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hotel Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Hotel Management System. The issue affects the Edit function of the Edit Room component. The manipulation of the...