PT-2025-28865 · Radiflow · Isap Smart Collector

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The device has two web servers that expose unauthenticated REST APIs on the management network, specifically on TCP ports 8084 and 8086. An attacker can exploit OS command injection through...

PT-2025-28931 · Cloudbees +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Applitools Eyes Plugin versions 1.16.5 and earlier Description: The Jenkins Applitools Eyes Plugin stores Applitools API keys unencrypted in job config.xml files on the Jenkins controller. Users with Item/Extended Read permission or...

PT-2025-29097 · Ibm · Ibm Analytics Content Hub

Name of the Vulnerable Software and Affected Versions: IBM Analytics Content Hub versions 2.0 through 2.3 Description: The software may reveal detailed technical error messages, potentially exposing information about the application framework to a remote attacker. This information could be used f...

PT-2025-29071 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 13.3 through 17.11.5 GitLab EE versions 18.0 through 18.0.3 GitLab EE versions 18.1 through 18.1.1 Description: An issue exists in GitLab EE that allows authenticated project owners to bypass group-level forking restriction...

PT-2025-28956 · Evesys · Evesys

Name of the Vulnerable Software and Affected Versions: evesys versions 7.1 2152 through 8.0 2202 Description: The software contains a reflected cross-site scripting XSS issue. The issue is located in the indexeva.php file through the action parameter. Recommendations: evesys versions prior to 7.1...

PT-2025-28860 · Radiflow · Isap Smart Collector

Name of the Vulnerable Software and Affected Versions: Radiflow iSAP Smart Collector version 1.20 Description: The issue allows a deprivileged Linux user to read the entire file system content, including files belonging to other users and having restricted access, such as the root password hash...

PT-2025-29257 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 21.2R3-S9 Juniper Networks Junos OS versions 21.4 before 21.4R3-S8 Juniper Networks Junos OS versions 22.2 before 22.2R3-S6 Juniper Networks Junos OS versions 22.3 before 22.3R3-S3 Juniper Networks...

PT-2025-29095 · Ibm · Ibm Analytics Content Hub

Name of the Vulnerable Software and Affected Versions: IBM Analytics Content Hub versions 2.0 through 2.3 Description: IBM Analytics Content Hub is susceptible to information disclosure and potential further attacks due to an exposed JavaScript source map. This exposure could allow an attacker to...

PT-2025-28459 · Abis · Adjutant Core Accounting Erp

Name of the Vulnerable Software and Affected Versions: Abis, Inc Adjutant Core Accounting ERP version v.PreBeta250F Description: The issue allows a remote attacker to obtain sensitive information via the cid parameter in the GET request. This is a SQL Injection vulnerability, which means an...

PT-2025-28748 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a high-privileged attacker to inject malicious scripts into vulnerable form fields...

PT-2025-28650 · Emerson · Valvelink Products

Name of the Vulnerable Software and Affected Versions: Emerson ValveLink Products affected versions not specified Description: Emerson ValveLink Products store sensitive information in cleartext in memory. This sensitive memory may be saved to disk, stored in a core dump, or remain uncleared if t...

PT-2025-28489 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical issue has been discovered, affecting the /approve.php file. The manipulation of the ID argument leads to SQL injection. This issue can be exploited remotely. Recommendations: Fo...

PT-2025-28462 · Unknown · Code-Projects Staff Audit System

Name of the Vulnerable Software and Affected Versions: code-projects Staff Audit System version 1.0 Description: A critical issue was found in the code-projects Staff Audit System. The problem is related to an unknown function of the file /test.php, where the manipulation of the uploadedfile...

PT-2025-28508

Name of the Vulnerable Software and Affected Versions: Microsoft Configuration Manager versions 2403 and 2409 Microsoft Configuration Manager version 2503 Description: The vulnerability in Microsoft Configuration Manager stems from the improper neutralization of special elements within SQL...

PT-2025-28474 · Mediawiki · Mediawiki

Name of the Vulnerable Software and Affected Versions: Mediawiki - CheckUser extension versions 1.39.0 through 1.39.12 Mediawiki - CheckUser extension versions 1.42.0 through 1.42.6 Mediawiki - CheckUser extension versions 1.43.0 through 1.43.1 Description: The issue is related to the rendering o...

PT-2025-28559 · Microsoft · Windows Event Tracing +1

Name of the Vulnerable Software and Affected Versions: Windows Event Tracing affected versions not specified Description: The issue is related to a use after free condition in Windows Event Tracing, which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment,...

PT-2025-28287 · Sap · Sap Netweaver

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver affected versions not specified Description: The issue allows an authenticated non-administrative user to call a remote-enabled function module, potentially granting access to non-sensitive information about the SAP system and O...

PT-2025-28574 · Microsoft · Windows Nt Rras +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is related to a heap-based buffer overflow in the Windows Routing and Remote Access Service RRAS, which allows an unauthorized attacker to...

PT-2025-28548

Name of the Vulnerable Software and Affected Versions: Microsoft Remote Desktop Client affected versions not specified Description: A relative path traversal flaw exists in the Remote Desktop Client, potentially allowing an unauthorized attacker to execute code over a network. Malicious Remote...

PT-2025-28391 · Siemens · Tia Project-Server +1

Name of the Vulnerable Software and Affected Versions: TIA Project-Server versions prior to V2.1.1 TIA Project-Server V17 versions Totally Integrated Automation Portal TIA Portal V17 versions Totally Integrated Automation Portal TIA Portal V18 versions Totally Integrated Automation Portal TIA...