PT-2023-30435 · Unknown · Dragon Family Line

Name of the Vulnerable Software and Affected Versions: DRAGON FAMILY Line version 13.6.1 Description: The issue allows remote attackers to send malicious notifications to victims due to the leakage of channel access token. Recommendations: For version 13.6.1, consider restricting access to the...

PT-2023-30315 · Unknown · Blockreassurance

Name of the Vulnerable Software and Affected Versions: blockreassurance versions prior to 5.1.4 Description: The issue concerns an AJAX function in the blockreassurance module that allows modification of any value in the configuration table, potentially compromising the trustworthiness of a store...

PT-2023-23709 · Unknown · Kathy Darling Simple User Listing

Name of the Vulnerable Software and Affected Versions: Kathy Darling Simple User Listing plugin versions = 1.9.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. No information is provided about the estimated number of potentially affected devices...

PT-2023-30124 · WordPress · Flowfact Wp Connector

Name of the Vulnerable Software and Affected Versions: FLOWFACT WP Connector plugin versions = 2.1.7 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal...

PT-2023-30318 · Bleachbit · Bleachbit

Name of the Vulnerable Software and Affected Versions: BleachBit for Windows versions 4.4.2 and earlier Description: BleachBit for Windows is vulnerable to a DLL Hijacking issue. This allows an attacker to run arbitrary code on every execution of BleachBit for Windows by placing a DLL in a specif...

PT-2023-30465 · Comodo · Combodo Itop

Name of the Vulnerable Software and Affected Versions: Combodo iTop version 3.1.0-2-11973 Description: The issue allows a local attacker to obtain sensitive information via a crafted script to the attrib manager id parameter in the General Information page and the id parameter in the contact page...

PT-2023-7456 · Aleos · Aleos

Name of the Vulnerable Software and Affected Versions: ALEOS versions 4.16.0 and earlier Description: The issue is related to an open-source third-party component in ALEOS that can be exploited from the local area network, resulting in a Denial of Service condition for the captive portal...

PT-2023-7514

Name of the Vulnerable Software and Affected Versions Keycloak version 22.0.5 Description A log injection flaw was found in Keycloak, related to the WebAuthn authentication mode. This issue allows a text string to be injected through the authentication form, which may have a minor impact on the...

PT-2025-18872 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.3.0-20230221.rc0.git4.99b8246b2d71.300.fc37.s390x+debug Description: A vulnerability in the Linux kernel has been resolved, specifically in the net/iucv module. The issue is related to the size of interrupt...

PT-2025-18871 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.4-cloudflare-kasan-2023.1.2 Description: A use-after-free issue has been identified in the Linux kernel, specifically in the veth module. This issue arises when the pskb expand head function is used to expan...

PT-2025-18544 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A potential null pointer dereference issue has been identified in the Linux kernel, specifically in the drm vblank destroy worker function. This issue arises when drm vblank init...

PT-2023-32244 · WordPress · Interact: Embed A Quiz On Your Site

Name of the Vulnerable Software and Affected Versions: Interact: Embed A Quiz On Your Site plugin for WordPress versions up to, and including, 3.0.7 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the 'interact-quiz' shortcode...

PT-2025-18850 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the wifi: mt76: connac component, where WED status is not checked for non-mmio devices. This can lead...

PT-2025-18556 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc1+ 174 Description: A vulnerability in the Linux kernel has been resolved, specifically in the scsi transport sas module. The issue occurs when transport add device fails in sas phy add, causing the kern...

PT-2023-27325 · Unknown · Rednao Donations Made Easy – Smart Donations

Name of the Vulnerable Software and Affected Versions: RedNao Donations Made Easy – Smart Donations versions 4.0.12 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...

PT-2023-30352 · Kadence · Kadence Woocommerce Email Designer

Name of the Vulnerable Software and Affected Versions: Kadence WP Kadence WooCommerce Email Designer plugin versions = 1.5.11 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2023-15611 · Softing · Smartlink Sw-Ht

Name of the Vulnerable Software and Affected Versions: Softing smartLink SW-HT versions prior to 1.30 Description: The issue allows an attacker to execute a dynamic script, such as JavaScript or VBScript, in the context of the application. This is a Cross-site Scripting vulnerability...

PT-2023-30351 · WordPress · Wpdiscuz

Name of the Vulnerable Software and Affected Versions: wpDiscuz plugin versions 7.6.11 and earlier Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, which can the...

PT-2023-15411 · Unknown · Simple Photo Gallery

Name of the Vulnerable Software and Affected Versions: Simple Photo Gallery versions n/a through v1.8.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2023-27332 · Unknown · Demon Image Annotation

Name of the Vulnerable Software and Affected Versions: demon image annotation versions n/a through 5.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...