PT-2025-29754 · Unknown · Gymbase Theme Classes

Name of the Vulnerable Software and Affected Versions: GymBase Theme Classes versions n/a through 1.4 Description: GymBase Theme Classes suffers from a SQL Injection issue due to improper neutralization of special elements used in an SQL command. This allows for potential SQL Injection attacks...

PT-2025-29719

Name of the Vulnerable Software and Affected Versions Eclipse GlassFish versions 7.0.16 and earlier Description Eclipse GlassFish is susceptible to login brute-force attacks due to the absence of restrictions on the number of failed login attempts. Recommendations Apply a configuration to limit t...

PT-2025-29708 · WordPress · Malcure Malware Scanner — #1 Toolset For Wordpress Malware Removal

Name of the Vulnerable Software and Affected Versions: Malcure Malware Scanner — 1 Toolset for WordPress Malware Removal plugin for WordPress versions through 16.8 Description: The Malcure Malware Scanner — 1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary Fi...

PT-2025-29837 · Nlnet +7 · Unbound +7

Name of the Vulnerable Software and Affected Versions: Unbound affected versions not specified Description: A multi-vendor cache poisoning vulnerability, named 'Rebirthday Attack', has been discovered in caching resolvers that support EDNS Client Subnet ECS. Unbound is vulnerable when compiled wi...

PT-2025-29554 · Riverbed Technology · Riverbed Steelcentral Netprofiler +1

Name of the Vulnerable Software and Affected Versions: Riverbed SteelCentral NetProfiler and NetExpress version 10.8.7 Description: An authenticated multi-stage remote code execution issue exists. A SQL injection vulnerability in the /api/common/1.0/login endpoint can be exploited to create a new...

PT-2025-29639

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the Server: Components Services component of Oracle MySQL. A high-privileged attacker...

PT-2025-29657

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the Server: DDL component of Oracle MySQL Server. A high-privileged attacker with...

PT-2025-29419 · Unknown · Utt Hiper 840G

Name of the Vulnerable Software and Affected Versions: UTT HiPER 840G versions up to 3.1.1-190328 Description: A critical buffer overflow vulnerability exists in UTT HiPER 840G. The issue is due to the manipulation of the remoteSrcTemp argument within the file /goform/aspRemoteApConfTempSend. The...

PT-2025-29432 · Phpgurukul · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue exists in PHPGurukul Online Fire Reporting System 1.2. The vulnerability is due to SQL injection in an unknown part of the /admin/assigned-requests.php file...

PT-2025-29490 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: FoxCMS version 1.2.6 Description: An arbitrary file upload vulnerability exists in the /controller/PicManager.php component. This allows attackers to execute arbitrary code by uploading a crafted template file. Recommendations: Update to a...

PT-2025-29385 · Code Projects · Online Appointment Booking System

Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical vulnerability exists in code-projects Online Appointment Booking System 1.0. The issue involves a SQL injection vulnerability in an unknown function within th...

PT-2025-29305 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The vulnerability is a denial-of-service issue. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about a newer version th...

PT-2025-29290 · Apache · Apache Sentry

Name of the Vulnerable Software and Affected Versions: Apache Sentry affected versions not specified Description: An authenticated user enrolled device may access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. This does not...

PT-2025-29333 · Phpgurukul · Phpgurukul Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Parking Management System version 1.13 Description: A critical issue exists in PHPGurukul Vehicle Parking Management System version 1.13. The vulnerability is located in an unknown part of the /users/profile.php file...

PT-2025-29086 · Open Information Security Foundation +1 · Suricata +1

Name of the Vulnerable Software and Affected Versions: Suricata versions 7.0.10 and below Suricata versions 8.0.0-beta1 through 8.0.0-rc1 Description: Suricata, a network IDS, IPS, and NSM engine, is affected by an issue where mishandling of data on HTTP2 stream 0 can lead to uncontrolled memory...

PT-2025-29128 · Headlamp · Headlamp

Name of the Vulnerable Software and Affected Versions: Headlamp versions prior to 0.31.1 Description: Headlamp is an extensible Kubernetes web UI. A command injection issue exists in the codeSign.js script used during the macOS packaging workflow. This is due to the improper use of the execSync...

PT-2025-29137 · Unknown · Mako Server

Name of the Vulnerable Software and Affected Versions: Mako Server versions 2.5 and 2.6 Description: An OS command injection vulnerability exists within the tutorial interface. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.execute code to the...

PT-2025-29156 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical issue exists in code-projects Library System 1.0 related to unrestricted file upload. The vulnerability is located in the /user/student/profile.php file, where manipulation of t...

PT-2025-29126 · Eset · Eset Security Product

Name of the Vulnerable Software and Affected Versions: ESET security products versions affected versions not specified Description: The installation file of ESET security products on Windows allows an attacker to delete an arbitrary file without the necessary permissions. An attacker with the...

PT-2025-29085

Name of the Vulnerable Software and Affected Versions: LibHTP versions 0.5.50 and below Description: LibHTP is a security-aware parser for the HTTP protocol. Versions 0.5.50 and below contain a traffic-induced memory leak that can lead to process memory starvation and loss of visibility...