CVE-2025-15559 Unauthenticated OS Command Injection in NesterSoft WorkTime

An unauthenticated attacker can inject OS commands when calling a server API endpoint in NesterSoft WorkTime. The server API call to generate and download the WorkTime client from the WorkTime server is vulnerable in the “guid” parameter. This allows an attacker to execute arbitrary commands on t...

PT-2015-1331

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 8.5 through CF05 Description The issue is related to resource management errors in the IBM WebSphere Portal server application interface. It allows remote attackers to cause a denial of service, specifically CPU...