PT-2025-18503 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the blk-cgroup, where the function blkcg css online is supposed to pin the blkcg of the parent. However,...

PT-2025-18521 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel. The issue is related to the use of a global register for current stack pointer on the s390 architecture. This uncovered an old bu...

PT-2025-18683 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase versions prior to 2.10.9 Description: DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete Remote Code Execution RCE through the backend JDBC link. This issue has been...

PT-2025-18697 · Kunbus · Kunbus Pictory

Name of the Vulnerable Software and Affected Versions: KUNBUS PiCtory versions 2.11.1 and earlier Description: The issue allows for cross-site scripting attacks via the sso token used for authentication. If an attacker provides a user with a KUNBUS PiCtory URL containing an HTML script as an sso...

PT-2025-18617 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue occurs in the piix4 driver, where the adapter is not properly removed when the piix4 module is removed. This happens...

PT-2025-18645 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A null pointer dereference issue has been identified in the Linux kernel's SUNRPC component. This issue occurs when the allocation of sysfs for xps fails, potentially leading to a...

PT-2025-18434

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the fix for the double free issue in cpumf pmu event init Description A double free issue was found in the Linux kernel's PMU event initialization functions, specifically in cpumf pmu event...

PT-2025-18455 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0-rc1-ktest-g189e17946605 19327 Description: A vulnerability in the Linux kernel has been resolved, which was causing crashes while running buffered io tests with alloc tagging slab alloc hook at the top of...

Exploit for Code Injection in Geoserver

⚠️ Disclaimer: This tool is intended only for security resea...

PT-2025-18682

Name of the Vulnerable Software and Affected Versions Vite versions prior to 6.3.4 Vite versions prior to 6.2.7 Vite versions prior to 6.1.6 Vite versions prior to 5.4.19 Vite versions prior to 4.5.14 Description The issue concerns Vite, a frontend tooling framework for JavaScript. In affected...

PT-2025-18283 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A HTML Injection issue was discovered in the foreigner-search.php file, allowing remote attackers to execute arbitrary code via the searchdata POST request parameter in the...

PT-2025-18360 · NetGear · Netgear Ex6200

Name of the Vulnerable Software and Affected Versions: Netgear EX6200 version 1.0.3.94 Description: A critical issue was found in the Netgear EX6200, affecting the function sub 54340. The manipulation of the host argument leads to a buffer overflow. This issue can be exploited remotely. The vendo...

PT-2025-18280 · Unknown · Weitong Mall

Name of the Vulnerable Software and Affected Versions: Weitong Mall version 1.0.0 Description: A critical issue was found in the Product Statistics Handler component, specifically affecting the /queryTotal file. The manipulation of the isDelete argument with the input 1 leads to improper access...

PT-2025-18268 · Abb · Abb Automation Builder

Name of the Vulnerable Software and Affected Versions: ABB Automation Builder versions prior to 2.8.0 Description: The issue is related to an incorrect permission assignment for critical resources in ABB Automation Builder. Recommendations: For versions prior to 2.8.0, update to version 2.8.0 or...

PT-2025-18272 · Unknown · Phpgurukul Time Table Generator System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Timetable Generator System version 1.0 Description: A Reflected Cross-Site Scripting XSS issue was discovered in the profile.php file. This issue allows remote attackers to execute arbitrary JavaScript code via the adminname...

PT-2025-18307 · Sourcecodester · Sourcecodester Simple Parking Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Barangay Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability is located in the "/barangay management/admin/?page=view complaint" API endpoint...

PT-2025-18212

Name of the Vulnerable Software and Affected Versions YesWiki versions prior to 4.5.4 Description The issue affects the /BazaR endpoint and the idformulaire parameter, making them vulnerable to cross-site scripting. An attacker can use a reflected cross-site scripting attack to steal cookies from...

PT-2025-18184 · Slims · Slims

Name of the Vulnerable Software and Affected Versions: Slims Senayan Library Management Systems version 9.6.1 Description: The issue is related to SQL Injection in the admin/modules/master file/coll type.php file. This allows for potential exploitation. No information is provided about the...

PT-2025-18173 · Bookgy · Bookgy

Name of the Vulnerable Software and Affected Versions: Bookgy affected versions not specified Description: A Reflected Cross-Site Scripting XSS issue allows an attacker to execute JavaScript code in the victim's browser. This is achieved by sending a malicious URL through the TEXTO parameter in t...

PT-2025-18296 · Kyverno · Kyverno

Name of the Vulnerable Software and Affected Versions: Kyverno versions prior to 1.13.5 and 1.14.0 Description: The issue concerns a policy engine where policy rules using namespace selectors in their match statements may not be applied correctly due to a missing error propagation in the...