13156 matches found
PT-2025-17314 · Unknown · Namelessmc
Name of the Vulnerable Software and Affected Versions: NamelessMC versions prior to 2.1.4 Description: The issue is related to SQL injection by providing an unexpected square bracket GET parameter syntax. This syntax refers to the structure ?param0=a¶m1=b¶m2=c utilized by PHP, which is...
PT-2025-17335 · Redoxos · Redoxos
Name of the Vulnerable Software and Affected Versions: redoxOS relibc versions before commit 98aa4ea5 Description: The issue allows a local attacker to cause a denial of service via the setsockopt function. Recommendations: For versions before commit 98aa4ea5, consider disabling the setsockopt...
PT-2025-17315
Name of the Vulnerable Software and Affected Versions Fastify versions 4.29.0 through 5.3.1 Fastify version 4.9.0 Description Fastify is a fast, low overhead web framework for Node.js. Applications specifying different validation strategies for different content types may bypass validation by...
PT-2025-20915 · Totolink · Totolink A3002Ru
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: A buffer overflow issue was discovered via the addrPoolEnd parameter in the "formDhcpv6s" interface. Recommendations: For TOTOLINK A3002R version 4.0.0-B20230531.1404, as a temporary...
PT-2025-17295 · 74Cms · 74Cms
Name of the Vulnerable Software and Affected Versions: 74cms versions 3.33 and earlier Description: The issue concerns remote code execution RCE in the background interface apiadmin. Recommendations: For versions 3.33 and earlier, update to a version later than 3.33 to resolve the issue. As a...
PT-2025-17316 · Ses · Ses
Name of the Vulnerable Software and Affected Versions: SES versions prior to 1.12.0 Description: The issue arises when using the SES and Compartment API to evaluate third-party code in an isolated environment. In versions prior to 1.12.0, top-level let, const, and class bindings in tags are...
PT-2025-17264 · Symisc · Unqlite
Name of the Vulnerable Software and Affected Versions: symisc UnQLite versions up to 957c377cb691a4f617db9aba5cc46d90425071e2 Description: A critical vulnerability was found in symisc UnQLite, affecting the jx9MemObjStore function in the /data/src/benchmarks/unqlite/unqlite.c file. This issue lea...
PT-2025-17345
Name of the Vulnerable Software and Affected Versions DaiCuo version 1.3.13 Description A vulnerability was found in the SEO Optimization Settings Section component, which can lead to cross-site scripting. The attack may be launched remotely. Recommendations For DaiCuo version 1.3.13, consider...
SUSE CVE-2025-32433
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in SSH protocol message handling, a malicious actor...
PT-2025-18287 · NetGear · Netgear Wnr2000V2
Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Description: A critical issue was found in the function sub 435E04, where the manipulation of the host argument leads to command injection. This issue can be exploited remotely. The vendor was contacted abo...
PT-2025-18305 · NetGear · Netgear Wag302V2
Name of the Vulnerable Software and Affected Versions: Netgear WG302v2 versions up to 5.2.9 Description: A critical issue was found, affecting the function ui get input value. The manipulation of the host argument leads to command injection. This issue can be exploited remotely. The vendor was...
PT-2025-17158 · Unknown · Solace Extra
Name of the Vulnerable Software and Affected Versions: Solace Extra versions 1.3.1 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For versions 1.3.1 and earlier, consider restricting file...
PT-2025-17195 · Unknown · Openmetadata
Name of the Vulnerable Software and Affected Versions: OpenMetadata versions 1.4.1 and earlier Description: The issue allows an attacker to extract information from the database. This is achieved through the listCount function in the WorkflowDAO interface, where the workflowtype and status...
PT-2025-17213 · Tenda · Tenda Ac10
Name of the Vulnerable Software and Affected Versions: Tenda AC10 version V4.0si V16.03.10.20 Description: The issue is related to a Buffer Overflow in AdvSetMacMtuWan via wanMTU2. This allows for potential exploitation. No information is provided about the estimated number of potentially affecte...
PT-2025-17221 · Unknown · Dragonflydb Dragonfly
Name of the Vulnerable Software and Affected Versions: DragonflyDB Dragonfly versions 1.28.2 and earlier Description: The issue allows authenticated users to cause a denial of service, resulting in a daemon crash, by utilizing a Lua library command that references a large negative integer...
PT-2025-18340 · NetGear · Netgear Ex6200
Name of the Vulnerable Software and Affected Versions: Netgear EX6200 version 1.0.3.94 Description: A critical issue was found affecting the function sub 3C03C. The manipulation of the host argument leads to a buffer overflow. It is possible to initiate the attack remotely. The vendor was contact...
PT-2025-18270 · NetGear · Netgear Wnr2000V2
Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Description: A critical vulnerability was found in the default version is new function. The manipulation of the host argument leads to a buffer overflow. This issue can be exploited remotely. The vendor was...
PT-2025-18948 · Unknown · Pcman Ftp Server
Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical vulnerability was found in the MGET Command Handler component of PCMan FTP Server, leading to a buffer overflow. The manipulation can be initiated remotely, and the exploit has been...
PT-2025-18273 · NetGear · Netgear Wnr2000V2
Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Description: A critical issue was found affecting the function sub 41A914. The manipulation of the host argument leads to a buffer overflow. The vendor was contacted about this issue but did not respond...
PT-2025-17210 · Pycel · Pycel
Name of the Vulnerable Software and Affected Versions: Pycel versions 1.0b30 and earlier Description: The issue allows code execution via a crafted formula in a cell, such as one beginning with the =IFA1=200, eval" import 'os'.system substring." in an untrusted spreadsheet. Recommendations: For...