PT-2025-23553 · Samsung · Samsung Mobile Processor Exynos

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions 1480 and 2400 Description: The issue is related to the lack of a length check, which leads to out-of-bounds writes. This problem was discovered in the Samsung Mobile Processor Exynos. Recommendations:...

PT-2025-23851 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical issue affects the formSetPPTPUserList function of the file /goform/setPptpUserList. The manipulation of the list argument leads to a buffer overflow. The attack may be initiated remotely...

PT-2025-23529 · High Logic · Fontcreator

Name of the Vulnerable Software and Affected Versions: High-Logic FontCreator version 15.0.0.3015 Description: An out-of-bounds read issue exists, allowing disclosure of sensitive information. This can be triggered by a specially crafted font file, requiring an attacker to trick a user into openi...

PT-2025-23505 · Linksys · Linksys Re9000 +5

Name of the Vulnerable Software and Affected Versions: Linksys RE6500 versions 1.0.013.001 through 1.2.07.001 Linksys RE6250 versions 1.0.013.001 through 1.2.07.001 Linksys RE6300 versions 1.0.013.001 through 1.2.07.001 Linksys RE6350 versions 1.0.013.001 through 1.2.07.001 Linksys RE7000 version...

PT-2025-24341

Name of the Vulnerable Software and Affected Versions Skyvern versions 0.1.0 through 0.1.85 Description The issue is related to a Jinja runtime leak in the sdk/workflow/models/block.py file. This leak can potentially be exploited, although specific details about real-world incidents or the...

PT-2025-23771 · D Link · D-Link Dcs-932L

Name of the Vulnerable Software and Affected Versions: D-Link DCS-932L version 2.18.01 Description: A critical vulnerability was found in the D-Link DCS-932L, affecting the function setSystemEmail of the file /setSystemEmail. The manipulation of the argument EmailSMTPPortNumber leads to a...

PT-2025-23549 · Unknown · Clinical Collaboration Platform

Name of the Vulnerable Software and Affected Versions: Clinical Collaboration Platform version 12.2.1.5 Description: The issue is related to a weak logout system in the Clinical Collaboration Platform, where the session token remains valid after a user logs out. This allows a remote attacker to...

PT-2025-23398 · Unknown · Phpgurukul Online Birth Certificate System

Name of the Vulnerable Software and Affected Versions: PHPGurukul HPGurukul Online Birth Certificate System version 2.0 Description: A critical issue was found in the system, affecting an unknown function of the file /admin/registered-users.php. The manipulation of the del argument leads to SQL...

PT-2025-23364 · Unknown · Django-Helpdesk

Name of the Vulnerable Software and Affected Versions: django-helpdesk versions prior to 1.0.0 Description: The issue concerns Sensitive Data Exposure due to the use of os.umask0 in models.py. This allows unauthorized access to sensitive information. Recommendations: For versions prior to 1.0.0,...

PT-2025-23422 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue concerns the storage of credential information for database authentication in a cleartext parameter file. This file could be viewed by an authenticated user, potentially...

PT-2025-23403

Name of the Vulnerable Software and Affected Versions Astun Technology iShare Maps version 5.4.0 Description A problematic vulnerability has been found in Astun Technology iShare Maps, affecting an unknown part of the file mycouncil2.aspx. The manipulation of the atTxtStreet argument leads to...

PT-2025-23241 · Unknown · Project Ai

Name of the Vulnerable Software and Affected Versions: Project AI versions prior to pre-beta Description: The issue concerns a hardcoded API key present in the source code of Project AI, a platform for creating AI agents. This problem has been resolved in the pre-beta version. Recommendations: Fo...

PT-2025-23343 · Campcodes · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /contact.php. The manipulation of the fullname argument leads to SQL injection. The attac...

PT-2025-23260 · Wivia 5 · Wivia 5

Name of the Vulnerable Software and Affected Versions: Wivia 5 affected versions not specified Description: There is an issue with OS command injection in Wivia 5. If this issue is exploited, a logged-in administrative user could execute an arbitrary OS command. Recommendations: At the moment,...

PT-2025-23342 · Unknown · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue was found in the system, affecting the /book-appointment.php file. The manipulation of the doctor argument leads to SQL injection. This issue can be initiat...

PT-2025-23426 · Ibm · Ibm Planning Analytics

Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics Local versions 2.0 through 2.1 Description: The issue allows an authenticated user to impersonate another user on the system because the session is not invalidated after a logout. Recommendations: For versions 2.0 and...

PT-2025-23282 · Devolutions · Devolutions Server

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2025.1.7.0 and earlier Description: The issue is related to improper access control in user group management, allowing a non-administrative user with both User Management and User Group Management permissions to...

PT-2025-23423 · Ibm · Ibm Planning Analytics Local

Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics Local versions 2.0 through 2.1 Description: The issue allows an authenticated user to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure...

PT-2025-23142

Name of the Vulnerable Software and Affected Versions mcp-markdownify-server versions all Description The issue concerns Server-Side Request Forgery SSRF via the Markdownify.get function. An attacker can craft a prompt that, once accessed by the MCP host, can invoke the webpage-to-markdown,...

PT-2025-23146

Name of the Vulnerable Software and Affected Versions Redis versions 7.0.0 through 8.0.2 Description Redis is an open source, in-memory database that persists on disk. A stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlenfilepath when copying a user-supplied...