PT-2025-21348

Name of the Vulnerable Software and Affected Versions: Vyper versions up to and including 0.4.2rc1 Description: The issue concerns the slice builtin in Vyper, which can elide side effects when the output length is 0 and the source bytestring is a builtin, such as msg.data or .code. This occurs...

CVE-2024-56157

Summary: CVE-2024-56157 affects iTop before versions 3.1.3 and 3.2.1, where inserting malicious code into a CSV during import enables a cross-site scripting (XSS) attack. Affected software: iTop (web-based IT Service Management tool; Combodo). Root cause / vector: CSV import accepts unvalidated/m...

PT-2025-21215 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is an issue that is being actively exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

PT-2025-21153 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. No details about real-world incidents or technical aspects of the issue are provided. Recommendations: At the moment, there is no...

PT-2025-21156 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not provided. No details are available regarding the estimated number of potentially affected devices worldwide or real-world incidents where this issu...

PT-2025-20954 · Microsoft · Windows File Server +1

Name of the Vulnerable Software and Affected Versions: Windows File Server affected versions not specified Description: The issue is an out-of-bounds read that allows an unauthorized attacker to disclose information locally. This could potentially allow attackers to obtain sensitive information a...

PT-2025-21115 · Intel · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator for IntelR Tiber™ Edge Platform affected versions not specified Description: The issue concerns the exposure of sensitive information to unauthorized actors for some Edge Orchestrator software. This could potentially allow a...

PT-2025-20996

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to a use-after-free condition in Microsoft Office, allowing an unauthorized attacker to execute code locally. This can potentially enable remote attackers to...

PT-2025-20912 · Kirby · Kirby

Name of the Vulnerable Software and Affected Versions: Kirby versions prior to 3.9.8.3 Kirby versions prior to 3.10.1.2 Kirby versions prior to 4.7.1 Description: A vulnerability in Kirby affects setups that use PHP's built-in server, commonly used during local development. This issue allows...

PT-2025-23174 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.179 Description: The issue concerns the lack of a check to ensure users can only disable notifications for mailboxes they already have access to. The code allows users to gain access to a mailbox by disabling o...

PT-2025-20955 · Microsoft · Windows Media +1

Name of the Vulnerable Software and Affected Versions: Windows Media affected versions not specified Description: The issue is related to a stack-based buffer overflow in Windows Media, which can be exploited by a remote attacker to execute arbitrary code over a network. This could allow...

CVE-2025-31258

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to break out of its sandbox...

MTSoftware C-Lodop 代码问题漏洞

MTSoftware C-Lodop is a cloud-based Web printing control from China-based MTSoftware that supports cross-browser silent printing and complex report design. A code issue vulnerability exists in MTSoftware C-Lodop version 6.6.1.1, which stems from the presence of unquoted search paths in the...

PT-2025-20668 · Unknown · 1Panel-Dev Maxkb

Name of the Vulnerable Software and Affected Versions: 1Panel-dev MaxKB versions up to 1.10.7 Description: A critical issue was found in the Knowledge Base Module component, leading to csv injection. This issue can be exploited remotely. The estimated number of potentially affected devices...

PT-2025-20613 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an unvalidated redirect in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or real-worl...

CVE-2025-37846

In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a set operation The source register is not used for SET and reading it can result in a UBSAN out-of-bounds array access error, specifically when the MOPS exception is taken from a SET...

PT-2025-20472 · Unknown · Trailer Crate

Name of the Vulnerable Software and Affected Versions: trailer crate versions 0.1.2 and earlier Description: The issue is related to the lib.rs file in the trailer crate for Rust, which mishandles allocating with a size of zero. Recommendations: For trailer crate version 0.1.2 and earlier, consid...

Directory Traversal

Vite is vulnerable to Directory Traversal. The vulnerability is due to access control bypass due to insufficient enforcement of file access restrictions when using pattern-matching with dot-slash /. in network-exposed development servers...

CVE-2025-26844

An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag...

PT-2025-20432 · Microsoft · Dataverse

Name of the Vulnerable Software and Affected Versions: Microsoft Dataverse affected versions not specified Description: A remote code execution issue has been identified. Information about this issue has been published. Recommendations: At the moment, there is no information about a newer version...