PT-2025-6591 · WordPress · Dethemekit For Elementor

Name of the Vulnerable Software and Affected Versions: DethemeKit For Elementor plugin for WordPress versions up to, and including, 2.1.8 Description: The issue is related to Stored Cross-Site Scripting via the plugin's De Gallery widget due to insufficient input sanitization and output escaping ...

PT-2025-6828 · Schneider Electric · Asco 5310 Single-Channel Remote Annunciator

Name of the Vulnerable Software and Affected Versions: Schneider Electric - ASCO 5310 Single-Channel Remote Annunciator versions all Description: A Cleartext Transmission of Sensitive Information issue exists, potentially exposing data when network traffic is being intercepted by an attacker. Thi...

PT-2025-7070 · Mediawiki · Lakeus

Name of the Vulnerable Software and Affected Versions: Lakeus versions 1.8.0 through 1.3.1 Lakeus versions prior to 1.3.1+REL1.39 Lakeus versions prior to 1.3.1+REL1.42 Lakeus versions prior to 1.4.0 Description: Lakeus is a simple skin made for MediaWiki. It is vulnerable to stored cross-site...

CVE-2025-0109 PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web Interface

An unauthenticated file deletion vulnerability in the Palo Alto Networks PAN-OS management web interface enables an unauthenticated attacker with network access to the management web interface to delete certain files as the “nobody” user; this includes limited logs and configuration files but doe...

PT-2025-6452 · WordPress · Wp Booking Calendar

Name of the Vulnerable Software and Affected Versions: WP Booking Calendar plugin for WordPress versions up to, and including, 10.10 Description: The issue allows unauthenticated attackers to manipulate their confirmed bookings, even after they have been approved, due to the plugin not properly...

PT-2025-16770

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A bug in the f2fs file system has been identified, which can cause a panic when fallocation fails for pinfile. This issue occurs due to concurrent pinfile allocation running out of...

PT-2025-6851 · Unknown · Code-Projects Wazifa System

Name of the Vulnerable Software and Affected Versions: code-projects Wazifa System version 1.0 Description: A problematic issue has been found in the searchuser function of the /search resualts.php file. The manipulation of the firstname/lastname argument leads to cross site scripting. It is...

PT-2025-6845 · Sourcecodester · Sourcecodester Best Church Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Church Management Software version 1.1 Description: A critical issue has been identified, affecting unknown code in the file /admin/app/slider crud.php. The manipulation of the del id argument leads to SQL injection. This...

PT-2025-6693 · Apache · Apache Atlas

Name of the Vulnerable Software and Affected Versions: Apache Atlas versions 2.3.0 and earlier Description: An authenticated user can perform XSS and potentially impersonate another user. This issue allows for cross-site scripting attacks, which could lead to unauthorized actions being taken on...

PT-2025-6931 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel. The issue is related to the dell uart bl serdev probe function calling devm serdev device open before setting the client operatio...

PT-2025-6141 · Unknown · Mayuri K Employee Management System

Name of the Vulnerable Software and Affected Versions: Mayuri K Employee Management System versions up to 192.168.70.3 Description: A critical issue affects some unknown functionality of the file /hr soft/admin/Update User.php. The manipulation of the id argument leads to SQL injection. The attac...

PT-2025-6255 · Fortinet · Fortisandbox

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSandbox versions 3.0.0 through 3.0.7 Fortinet FortiSandbox versions 3.1.0 through 3.1.5 Fortinet FortiSandbox versions 3.2.0 through 3.2.4 Fortinet FortiSandbox versions 4.0.0 through 4.0.4 Fortinet FortiSandbox versions 4.2.0...

PT-2025-6173 · Wattsense · Wattsense Bridge

Name of the Vulnerable Software and Affected Versions: Wattsense Bridge devices versions prior to BSP 6.4.1 Description: A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices. After connecting to the interface, access to the bootloader is possible, as well...

PT-2025-6137 · Sourcecodester · Sourcecodester Food Menu Manager

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Menu Manager version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file "endpoint/update.php". This leads to unrestricted upload. The issue can be exploited...

PT-2025-6254 · Fortinet · Fortisiem

Name of the Vulnerable Software and Affected Versions: FortiSIEM versions 6.7 through 7.1 Description: The issue is related to multiple improper neutralization of input during web page generation, also known as cross-site scripting. This may allow an authenticated attacker to perform a cross-site...

PT-2025-6168 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform versions 2024.4.1 and previous versions Description: The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. Although the disclosed data does not contain sensitive...

PT-2025-6104 · Dayrui · Xunruicms

Name of the Vulnerable Software and Affected Versions: dayrui XunRuiCMS versions up to 4.6.4 Description: A critical issue has been identified, affecting unknown code in the /Control/Api/Api.php file. The manipulation of the thumb argument leads to deserialization. This issue can be exploited...

PT-2025-6052

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43 Description A problematic issue has been found in GNU Binutils, affecting the bfd elf write section eh frame function of the ld component. This issue leads to memory corruption and can be initiated remotely, although...

PT-2025-6054 · Gnu +3 · Gnu Binutils +3

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.43 Description: A critical vulnerability was found in GNU Binutils, affecting the function bfd elf reloc symbol deleted p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is...

PT-2025-6102 · Webkul · Webkul Qloapps

Name of the Vulnerable Software and Affected Versions: Webkul QloApps version 1.6.1 Description: A problematic vulnerability was found in Webkul QloApps, affecting an unknown part of the file /stores of the component Your Location Search. The manipulation leads to cross site scripting. It is...