PT-2026-53175

Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in application/front/controller/visitor/BookmarkListController.php. The permalink handler concatenates the raw $bookmark-getTitle into the pagetitle template variable and the RainTPL template emits it...

PT-2026-50684

Name of the Vulnerable Software and Affected Versions Grav versions 1.7.52 through 2.0 Description An incomplete fix for a stored Cross-Site Scripting XSS issue allows users with admin.pages permissions to inject unsanitized CSS into the style attribute of images via Markdown media actions. While...

CVE-2025-60218

CVE-2025-60218 concerns the WordPress plugin “PT Luxa Addons” (versions

CVE-2025-60218 WordPress PT Luxa Addons Plugin <= 1.2.2 - Arbitrary File Upload Vulnerability

Subscriber Arbitrary File Upload in PT Luxa Addons = 1.2.2 versions...

PT-2026-53026

Unknown description...

PT-2026-53000

It was discovered that GStreamer Good Plugins incorrectly handled certain Matroska files. An attacker could possibly use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2026-39043 It was...

PT-2026-49617

CVE ID :CVE-2026-54296 Published : June 15, 2026, 6:31 p.m. | 1 hour, 19 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2026-52180

Name of the Vulnerable Software and Affected Versions WeasyPrint affected versions not specified Description A CSS injection issue occurs when HTML presentational hints are enabled. Unescaped attribute values are embedded into CSS, allowing the injection of arbitrary CSS declarations. This...

PT-2026-48874

Name of the Vulnerable Software and Affected Versions n8n-mcp versions prior to 2.56.1 Description An authorization flaw exists in multi-tenant HTTP mode when ENABLE MULTI TENANT is set to true. This allows authenticated tenants to read and delete workflow version backups belonging to other...

PT-2026-48356

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description No information provided regarding the nature of the issue. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2026-48265

Name of the Vulnerable Software and Affected Versions Focus for iOS versions prior to 151.3.1 Klar for iOS versions prior to 151.3.1 Description Universal Cross-Site Scripting UXSS exists in the Webkit navigation of Focus for iOS and Klar for iOS. UXSS is a security flaw that allows an attacker t...

PT-2026-51160

Name of the Vulnerable Software and Affected Versions jq versions prior to 1.8.2 Description In assertion-disabled builds, the jq --rawfile command can lead to invalid-state reuse and a heap out-of-bounds write. This occurs when the jv load fileraw=1 function reads an attacker-controlled file and...

PT-2026-45644

Memory corruption while processing fastboot commands with invalid input...

PT-2026-48815

Unknown description...

PT-2026-48802

Unknown description...

PT-2026-48805

Unknown description...

PT-2026-45196

A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

PT-2026-48607

Unknown description...

PT-2026-47214

Name of the Vulnerable Software and Affected Versions incus versions 6.0.x and 7.0.0 Description An authenticated user with can create storage volumes permissions can cause a denial of service by crashing the incusd daemon. The issue occurs during the processing of an imported custom-volume backu...

PT-2026-47213

Name of the Vulnerable Software and Affected Versions Incus version 7.0.0 Description An authenticated user with can create instances permission can cause a denial of service by crashing the incusd daemon. The issue occurs when the daemon processes an instance backup tarball containing a malforme...