PT-2025-20729 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 v4 version V16.03.10.13 Description: The issue concerns a Buffer Overflow vulnerability in the GetParentControlInfo function. This vulnerability can be exploited, potentially leading to unauthorized access or control. No informatio...

PT-2025-11232 · WordPress · Wp Jobhunt

Name of the Vulnerable Software and Affected Versions: WP JobHunt plugin for WordPress versions up to, and including, 7.1 Description: The issue is related to authentication bypass. This is due to the wp ajax google api login callback function not properly verifying a user's identity prior to...

PT-2025-11155 · WordPress · Limit Bio Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Limit Bio WordPress plugin versions 1.0 and earlier Description: The issue concerns a lack of CSRF check when updating settings in the Limit Bio WordPress plugin, along with missing sanitization and escaping. This could allow attackers to mak...

PT-2025-11127 · Ruby-Saml +3 · Ruby-Saml +3

Name of the Vulnerable Software and Affected Versions: ruby-saml versions prior to 1.12.4 and 1.18.0 Description: An authentication bypass vulnerability was found in ruby-saml due to a parser differential. ReXML and Nokogiri parse XML differently; the parsers can generate entirely different...

PT-2025-11089 · Unknown · Softether Vpn

Name of the Vulnerable Software and Affected Versions: SoftEther VPN version 5.02.5187 Description: The issue is related to a Buffer Overflow in the Command.c file, specifically via the PtMakeCert and PtMakeCert2048 functions. Recommendations: For SoftEther VPN version 5.02.5187, consider disabli...

PT-2025-10808 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Server version 10.0.17763.0 Description: The issue is related to a heap-based buffer overflow in the Windows Telephony Server, which allows an unauthorized attacker to execute code over a network. This can enable remote...

PT-2025-10751 · Mrcms · Mrcms

Name of the Vulnerable Software and Affected Versions: MRCMS version 3.1.2 Description: A vulnerability was found in the function list of the file "/admin/file/list.do" of the component org.marker.mushroom.controller.FileController. The manipulation of the path argument leads to cross-site...

PT-2025-16456

Name of the Vulnerable Software and Affected Versions MySQL Client versions 8.0.0 through 8.0.41 MySQL Client versions 8.4.0 through 8.4.4 MySQL Client versions 9.0.0 through 9.2.0 Description The issue allows a low-privileged attacker with network access via multiple protocols to compromise the...

PT-2025-16890 · Tp Link · Tp-Link M7450

Name of the Vulnerable Software and Affected Versions: TP-Link M7450 4G LTE Mobile Wi-Fi Router Firmware version 1.0.2 Build 170306 Rel.1015n Description: A SQL Injection vulnerability exists, allowing an unauthenticated attacker to inject malicious SQL statements via the username and password...

PT-2025-10821

Name of the Vulnerable Software and Affected Versions Microsoft Office versions prior to 2.3 Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Word affected versions not specified Microsoft Office Long Term Servicing Channel affected versions not specified Description Th...

PT-2025-10846 · Microsoft · Office Access

Name of the Vulnerable Software and Affected Versions: Microsoft Office Access versions prior to the fixed version Description: The issue is related to a use-after-free vulnerability in Microsoft Office Access, which allows an unauthorized attacker to execute code locally. This vulnerability can ...

PT-2025-10571 · Laravel +1 · Laravel +1

Name of the Vulnerable Software and Affected Versions: Laravel framework versions 11.9.0 through 11.35.1 Description: The Laravel framework is susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page. This issue allows an attacke...

PT-2025-14348

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the ksmbd component of the Linux kernel. Specifically, the interim entry of ksmbd work could be deleted after an oplock is freed...

PT-2025-9898 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.26.71 Description: The issue is related to an out-of-bounds read in parsing image data, allowing local attackers to access out-of-bounds memory. Recommendations: For versions prior to 4.4.26.71, update to...

PT-2025-9992 · Publiccms · Publiccms

Name of the Vulnerable Software and Affected Versions: PublicCMS version 4.0.202406 Description: The issue is related to an arbitrary file upload vulnerability in the /cms/CmsWebFileAdminController.java component. This allows attackers to execute arbitrary code by uploading a crafted svg or xml...

PT-2025-9833 · Opentext · Opentext Identity Manager Advanced Edition

Name of the Vulnerable Software and Affected Versions: OpenText Identity Manager Advanced Edition versions 4.8.0.0 through 4.9.0.0 Description: The issue is related to insufficiently protected credentials, allowing an authenticated user to obtain higher privileged user’s sensitive information via...

PT-2025-9870 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform version 2.0 Description: The issue is related to incorrect access control in Unifiedtransform 2.0, which leads to privilege escalation. This allows teachers to change the section name and room number, permissions that should ...

PT-2025-9682

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.12 Rack versions prior to 3.0.13 Rack versions prior to 3.1.11 Description The issue concerns the Rack::Sendfile middleware, which logs unsanitised header values from the X-Sendfile-Type header. An attacker can explo...

PT-2025-9660 · Mozilla +10 · Firefox +10

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 136 Firefox ESR versions prior to 128.8 Description: A web page could trick a user into setting that site as the default handler for a custom URL protocol. Recommendations: For Firefox versions prior to 136, update t...

PT-2025-9656 · Mozilla +10 · Firefox +10

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 136 Firefox ESR versions prior to 115.21 Firefox ESR versions prior to 128.8 Description: A use-after-free issue in the content process side of a WebTransport connection could lead to a potentially exploitable crash...